Is Binance safe to connect?
Exchange ยท Multi-asset centralized exchange (spot, futures, margin). Checked 2026-10-24; every line links its source.
Worst case: Binance holds your coins: it can freeze or close your account under its own compliance rules, and a leaked API key that has withdrawals enabled can drain the account from any IP you whitelisted.
Safe setup in 3 steps
- Give bots read-only or trade-only API keys; never tick 'Enable Withdrawals' on a key you paste into a third-party tool
- If a key must trade, restrict it to your server's static IPv4 address so it is useless if leaked
- Enable an address whitelist and 2FA on the account, and keep long-term holdings in your own wallet
Binance also has a full listing with an Agent Risk Score Agent risk 86% (partial, 5 of 7 inputs): Binance on TradingAgentStack.
What it can do with your money
| Who holds the keys | The exchange holds your funds Custodial exchange: deposits sit in Binance-controlled wallets; you hold an account balance, not keys. source |
|---|---|
| Can funds be sent out to any address? | Yes. Crypto withdrawals to external addresses are available, subject to Binance's account and compliance controls. source |
| What a leaked API key can do | System-generated (HMAC) keys with unrestricted IP access can only have 'Enable Reading' (since 2023-01-30). Adding an IPv4 access restriction is mandatory to enable withdrawal permission. Binance strongly recommends against enabling non-read permissions without IP restriction; self-generated Ed25519/RSA keys are offered as an alternative. Expiry rules are not stated on this FAQ page. source |
| Monero and Zcash | XMR: delisted from spot 2024-02-20 (no XMR deposits/withdrawals); XMR perpetual futures still offered as of Oct 2026 per third-party survey source ZEC: trade+deposit+withdraw (spot listed); Binance removed ZEC's 'monitoring tag' on 2025-07-09 source source source |
Official links
- Website:
binance.com - X:
@binance
Where we confirmed these
Deadlines
- 2027-07-10: EU AMLR (Regulation (EU) 2024/1624, Art. 79(1)) applies: crypto-asset service providers may not keep accounts that allow anonymisation or obfuscation of transactions, including through anonymity-enhancing coins (e.g. XMR, ZEC). Relevant if you use an EU/EEA-licensed entity of this service. source
Incidents
| Date | What happened | Amount | Outcome | Source |
|---|---|---|---|---|
| 2025-10-10 | USDe, BNSOL and wBETH briefly depegged on Binance during the 10 Oct market crash, triggering liquidations of users using them as collateral | ~$283M reimbursed | refunded (Binance compensated affected Margin/Futures/Loan users within ~24h) | source |
| 2024-02-20 | Monero (XMR) delisted from Binance spot after a 'monitoring tag' review | XMR spot trading and deposits ended; users had to withdraw | source |