Is Bitfinex safe to connect?

Exchange ยท Multi-asset centralized exchange (spot, margin, derivatives, lending). Checked 2026-10-25; every line links its source.

Worst case: Bitfinex holds your coins, and an API key with the Withdrawals permission and no IP whitelist can move funds out from anywhere if it leaks.

Already lost funds? What to do if a bot or wallet is drained.

Safe setup in 3 steps

  1. Never tick the Withdrawals permission on a key used by a bot or third-party tool
  2. Whitelist your server's IP (up to 20) on every key
  3. Keep long-term holdings in your own wallet; no full Terms of Service could be checked for freeze rules

What it can do with your money

Who holds the keysThe exchange holds your funds Custodial exchange account (operated by iFinex Inc.). source
Can funds be sent out to any address?Yes. Withdrawals available from the account and, if enabled, via API. source
What a leaked API key can doPermissions are set per key by category (Account Info, Orders, Wallets, Withdrawals, etc.); the Withdrawals permission 'enables withdrawals through the API'. Keys can be limited to up to 20 whitelisted IP addresses. Creating a key needs 2FA plus an email confirmation; editing permissions needs 2FA. Default for Withdrawals and any expiry are not stated. source
Monero and ZcashXMR: XMR spot listed against USD, BTC and USDT; deposit/withdrawal status not confirmed source source
ZEC: ZEC/USD listed source source

Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

Where we confirmed these

Incidents

None found in official sources or reputable reporting for 2024 to 2026. That doesn't prove nothing happened.

Check a link

Got a link, @handle or repo that claims to be Bitfinex? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to @TASCheckBot, or add it to your group so anyone can type /check. Alerts on new drains and fakes: @tradingAgentStk.

Get an alert for Bitfinex

We email you if we add an incident, a freeze report, a known fake or a deadline for Bitfinex. Free; unsubscribe anytime.

More checks: Exchanges

Something wrong or out of date? Send a correction with a link to the vendor's docs. Not financial advice. How we check.