How To Tell If a Crypto Lender Is Safe

In 2022, Celsius, BlockFi, Voyager and Genesis all froze customer withdrawals within months of each other. People who thought they had an account somewhere safe discovered they were unsecured creditors in a bankruptcy, waiting years for a partial recovery.

Here is the uncomfortable part. The warning signs were public before any of them collapsed. They were in the terms of service, in what the companies did and did not publish, and in the gap between the rates being advertised and what could plausibly fund them.

Nobody read them, because reading a lender’s fine print is tedious and the marketing page is right there looking reassuring.

We recently re-scored every lender on this site against a written rubric, and the exercise turned up things we had missed ourselves, including a lender whose own two pages disagree about its loan book by more than a billion dollars. This article is the shortcut. Here are the 6 checks that actually separate a safe lender from a dangerous one, what a good answer looks like, and where to find each one.

1. Find Out What They Can Legally Do With Your Coins

This is the question that decides everything else, and it is the one most people never ask.

When you take a crypto-backed loan or deposit crypto to earn interest, the company holds your assets. What their terms permit them to do with those assets while they hold them is the difference between a bad week and a total loss.

There are roughly 4 arrangements, and they are not equally safe.

Arrangement	What it means	Risk
You hold a key	Multisig custody where the company cannot move your coins alone	Lowest
Segregated and never lent	Held 1:1 at a named custodian, contractually untouchable	Low
Pledged to funding partners	Used as security for the company’s own borrowing, ring-fenced	Moderate
Re-lent for yield	Loaned to third parties so the company can pay you a return	Highest

That bottom row is what killed Celsius and BlockFi. They lent customer assets to other firms, those firms defaulted, and the customers whose coins had been lent out had no claim on anything real.

If a company is paying you a return on an asset you deposited, something is being done with that asset to generate the money. Find out what, in writing, before you deposit.

The answer lives in the terms of service or the help centre, not the marketing page. Search those documents for “rehypothecate”, “re-post”, “lend”, and “pledge”.

Good answers are specific. Unchained states plainly that it “does NOT rehypothecate, or lend to other people/entities, any bitcoin backing an Unchained loan,” and uses a 2-of-3 multisig arrangement where you hold one key. That is about as good as this gets.

Weaker answers hedge. Ledn says collateral “may only be re-posted” to an institutional funding partner or into its own securitization vehicle. That is more honest than most competitors manage, and it is still not the same as your Bitcoin sitting untouched.

The worst answers are the ones that describe the yield without describing the mechanism. If the terms say the company earns from “interest rate spreads” on its lending, your deposit is funding loans to other people.

2. Ask Who Checks Their Numbers, and How Often

Any company can claim it holds your assets. A proof of reserves is an outside accountant confirming it.

Three things matter about a proof of reserves, and marketing pages tend to blur all three.

Who performs it. A named CPA firm conducting a formal attestation is meaningful. A security certification is not the same thing and does not cover reserves at all.
How often. Twice yearly is reasonable. A report from several years ago tells you about a company that no longer exists in the same form.
What it actually covers. Some companies publish frequent figures alongside a rare audited one, and the frequent figures are often explicitly unaudited.

That last distinction catches careful readers out. Ledn publishes monthly loan-book metrics beside its twice-yearly CPA attestation, and the accounting firm’s own disclaimer says its role on the monthly numbers is limited to pulling balances and performing “mechanical calculations”, adding that it “is not an audit, review, or attestation engagement.”

Both numbers sit on the same page. Only one of them is audited.

The check takes 2 minutes. Look for a proof of reserves page, find the date of the most recent report, and find the name of the firm that signed it. A company with nothing to hide makes this easy to find.

3. See Whether Their Own Pages Agree With Each Other

This is the check nobody does, and it is the most revealing one in this article.

Large companies publish the same figure in several places. When those figures disagree, you have learned something real about how carefully the operation is run, without needing any financial expertise at all.

While scoring Ledn, we found its bitcoin-backed loans page claiming $11.5 billion in originations since 2018. Its open book report, checked the same day, said $10.2 billion, and a headline figure on that same page rounded it to $10 billion.

That is a gap of roughly $1.3 billion between pages on one website, from a company whose entire pitch is that you can check its numbers.

It is probably a stale figure rather than anything sinister. But a company asking you to trust its disclosures should be able to keep its own disclosures straight.

Nexo advertises “rates from 0.9%” on its US page and “from 1.9%” globally for the same product. Neither is wrong exactly. Together they tell you the marketing is not being checked against itself.

4. Look Up What Regulators Have Actually Done

Not what the company says about its regulatory standing, which is always flattering, but what regulators have done.

This is public and searchable. The SEC publishes press releases on enforcement actions, state regulators publish consent orders, and a search for the company name plus “SEC” or “settlement” surfaces most of it in a minute.

What you are looking for is not merely whether something happened, but whether it happened to the product you are about to use.

Nexo paid $45 million in January 2023 to settle with the SEC and all 50 state regulators. The settlement concerned its Earn Interest Product, which is the direct ancestor of the savings product it offers today. That is a very different signal from a penalty about, say, marketing disclosures.

Kraken settled for $30 million in February 2023 and had to shut its staking service down for US customers entirely. What it runs now is a restructured product, not the one that was challenged.

Both companies are still operating, and both disclose more than many competitors. The point is not that an enforcement action disqualifies a lender forever. The point is that you should know about it, and the company’s own site is not where you will find out.

5. Work Out Whether You Can Actually Get the Advertised Rate

Headline rates are marketing. The rate you receive is usually lower, and the gap is where the fine print lives.

Five things commonly sit between the advertised number and your account.

Commission skimmed off the top. Kraken takes 25% of staking rewards on its bonded product and 30% on flexible, and the rates displayed are quoted before that deduction.
Only part of your deposit earning. On assets with an unbonding period, Kraken keeps up to half your stake unstaked for liquidity, so the advertised rate applies to roughly half your money.
Token holdings. Nexo’s top rate of 16% requires holding 2 million NEXO tokens. A depositor with none tops out around 10.75%.
Paid subscriptions. Crypto.com’s best cash rate needs a paid plan or a 12-month token lockup, and Coinbase’s higher USDC rate requires a Coinbase One membership.
Payment in a different asset. Crypto.com pays all Cash Earn yield in CRO, its own token, so a product sold on FDIC-insured principal hands you a return whose value moves.

None of these are hidden exactly. They are all documented somewhere. They are simply not on the page with the big number.

6. Find Out What Happens If the Company Itself Fails

People reasonably assume a balance at a large, familiar company carries some protection. Usually it does not.

PayPal’s own terms state, in capital letters, that crypto assets “ARE NOT INSURED BY THE FEDERAL DEPOSIT INSURANCE CORPORATION (FDIC), THE SECURITIES INVESTOR PROTECTION CORPORATION (SIPC) OR ANY OTHER PUBLIC OR PRIVATE INSURER.” Kraken says the same about staked assets.

Where FDIC coverage does appear, read exactly what it covers. Crypto.com sweeps US dollar balances to partner banks with coverage up to $5 million, which is real. It protects you if one of those banks fails. It does not protect your crypto, and it does not protect you if Crypto.com fails.

Insurance language is also where companies quietly go backwards. Ledn named BitGo as its custodian and cited a $100 million policy in 2019. Its current site names no custodian and publishes no insurance figure at all.

The Short Version

If you only have 5 minutes before deciding, these are the signals that matter most.

Warning sign	Reassuring sign
Terms permit lending your assets to third parties	Written commitment not to lend or rehypothecate
No proof of reserves, or one several years old	Recent attestation by a named accounting firm
No custodian named anywhere	Custodian named, with the arrangement explained
Headline rate needs tokens, tiers, or a subscription	Advertised rate is what an ordinary customer receives
Enforcement action about this exact product	Clean record, or a resolved matter about something else
Company’s own pages contradict each other	Figures agree across the site

One final filter that costs nothing. The rate itself is information. In 2026, sustainable returns on stablecoins and cash run around 3% to 4%, and genuine protocol staking varies enormously by network. Anything well above that is not a better deal, it is a different risk, and the extra yield is being paid out of something. Find out what.

FAQ

Is crypto lending safe in 2026?

Safer than it was in 2022, mostly because the least careful operators went bankrupt. The surviving platforms disclose more and several publish real attestations. It is still meaningfully riskier than a bank deposit, because almost nothing in this category is insured and you are relying on a company’s own controls.

What is rehypothecation and why does it matter?

It means the company re-uses assets you deposited, typically by lending them out or pledging them as security for its own borrowing. It matters because it converts your holding into a claim on a company rather than ownership of an asset. If that company fails, you join the creditor queue.

Does FDIC insurance cover my crypto?

No. FDIC insurance covers US dollar deposits at insured banks. Where a crypto platform advertises FDIC coverage, it almost always applies to cash balances swept to partner banks, not to your crypto, and it protects against a bank failing rather than the platform failing.

How often should I re-check a lender I already use?

At least once a year, and whenever the terms change. Companies quietly stop naming custodians, drop insurance figures, and let attestations lapse. Every example of that in this article came from a company that used to disclose more than it does now.

When We Checked This

Every figure and quotation here was verified against the company’s own documentation between September and October 2026. Crypto lending terms change frequently, so confirm current details directly with any platform before you commit funds. Some links on this site are affiliate links, and the lender rated lowest on our comparison pages is one we earn commission from, which is the clearest illustration we can offer that the ratings are not for sale.