# Is Bitfinex safe? Check before you connect

> Bitfinex: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-25.

Canonical: https://tradingagentstack.com/check/bitfinex/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Bitfinex

# Is Bitfinex safe to connect?

Exchange · Multi-asset centralized exchange (spot, margin, derivatives, lending). Checked 2026-10-25; every line links its source.

**Worst case:** Bitfinex holds your coins, and an API key with the Withdrawals permission and no IP whitelist can move funds out from anywhere if it leaks.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Never tick the Withdrawals permission on a key used by a bot or third-party tool

2. Whitelist your server's IP (up to 20) on every key

3. Keep long-term holdings in your own wallet; no full Terms of Service could be checked for freeze rules

## What it can do with your money

| Who holds the keys | The exchange holds your funds Custodial exchange account (operated by iFinex Inc.). [source](https://apps.apple.com/us/app/bitfinex-trade-digital-assets/id1436383182) |
| --- | --- |
| Can funds be sent out to any address? | Yes. Withdrawals available from the account and, if enabled, via API. [source](https://support.bitfinex.com/hc/en-us/articles/115003363429-How-to-create-and-revoke-a-Bitfinex-API-Key) |
| What a leaked API key can do | Permissions are set per key by category (Account Info, Orders, Wallets, Withdrawals, etc.); the Withdrawals permission 'enables withdrawals through the API'. Keys can be limited to up to 20 whitelisted IP addresses. Creating a key needs 2FA plus an email confirmation; editing permissions needs 2FA. Default for Withdrawals and any expiry are not stated. [source](https://support.bitfinex.com/hc/en-us/articles/115003363429-How-to-create-and-revoke-a-Bitfinex-API-Key) |
| Monero and Zcash | **XMR**: XMR spot listed against USD, BTC and USDT; deposit/withdrawal status not confirmed [source](https://en.coin-turk.com/?p=254402) [source](https://coinranking.com/coin/3mVx2FX_iJFp5+monero-xmr/markets) **ZEC**: ZEC/USD listed [source](https://coinranking.com/coin/aRGRWLf2RYNq4+zcash-zec/markets) [source](https://en.coin-turk.com/?p=254402) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `bitfinex.com`

- X: `@bitfinex`

- App: `https://apps.apple.com/us/app/bitfinex-trade-digital-assets/id1436383182`

Where we confirmed these
- https://www.bitfinex.com/ (footer links x.com/bitfinex, App Store id1436383182, Google Play com.bitfinex.mobileapp)

- https://www.coingecko.com/en/exchanges/bitfinex (bitfinex.com, twitter.com/bitfinex)

- https://apps.apple.com/us/app/bitfinex-trade-digital-assets/id1436383182 (developer Bitfinex, seller iFinex Inc., site bitfinex.com)

- https://x.com/bitfinex (verified, links bitfinex.com, checked 2026-10-25)

## Incidents

None found in official sources or reputable reporting for 2024 to 2026. That doesn't prove nothing happened.

## Check a link

Got a link, @handle or repo that claims to be Bitfinex? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Bitfinex

We email you if we add an incident, a freeze report, a known fake or a deadline for Bitfinex. Free; unsubscribe anytime.

## More checks: Exchanges
[Binance](https://tradingagentstack.com/check/binance/)[Bybit](https://tradingagentstack.com/check/bybit/)[OKX](https://tradingagentstack.com/check/okx/)[Kraken](https://tradingagentstack.com/check/kraken/)[Coinbase Advanced](https://tradingagentstack.com/check/coinbase-advanced/)[Hyperliquid](https://tradingagentstack.com/check/hyperliquid/)[Bitget](https://tradingagentstack.com/check/bitget/)[Gemini](https://tradingagentstack.com/check/gemini/)[KuCoin](https://tradingagentstack.com/check/kucoin/)[MEXC](https://tradingagentstack.com/check/mexc/)[Gate](https://tradingagentstack.com/check/gate/)[HTX](https://tradingagentstack.com/check/htx/)[Crypto.com Exchange](https://tradingagentstack.com/check/crypto-com-exchange/)[BingX](https://tradingagentstack.com/check/bingx/)[Bitvavo](https://tradingagentstack.com/check/bitvavo/)[Bitstamp](https://tradingagentstack.com/check/bitstamp/)[WhiteBIT](https://tradingagentstack.com/check/whitebit/)[Pionex](https://tradingagentstack.com/check/pionex/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)