Is Bitfinex safe to connect?
Exchange ยท Multi-asset centralized exchange (spot, margin, derivatives, lending). Checked 2026-10-25; every line links its source.
Worst case: Bitfinex holds your coins, and an API key with the Withdrawals permission and no IP whitelist can move funds out from anywhere if it leaks.
Safe setup in 3 steps
- Never tick the Withdrawals permission on a key used by a bot or third-party tool
- Whitelist your server's IP (up to 20) on every key
- Keep long-term holdings in your own wallet; no full Terms of Service could be checked for freeze rules
What it can do with your money
| Who holds the keys | The exchange holds your funds Custodial exchange account (operated by iFinex Inc.). source |
|---|---|
| Can funds be sent out to any address? | Yes. Withdrawals available from the account and, if enabled, via API. source |
| What a leaked API key can do | Permissions are set per key by category (Account Info, Orders, Wallets, Withdrawals, etc.); the Withdrawals permission 'enables withdrawals through the API'. Keys can be limited to up to 20 whitelisted IP addresses. Creating a key needs 2FA plus an email confirmation; editing permissions needs 2FA. Default for Withdrawals and any expiry are not stated. source |
| Monero and Zcash | XMR: XMR spot listed against USD, BTC and USDT; deposit/withdrawal status not confirmed source source ZEC: ZEC/USD listed source source |
Official links
- Website:
bitfinex.com - X:
@bitfinex - App:
https://apps.apple.com/us/app/bitfinex-trade-digital-assets/id1436383182
Where we confirmed these
Incidents
None found in official sources or reputable reporting for 2024 to 2026. That doesn't prove nothing happened.