Centralized exchanges and brokers

Why market intermediaries exist

A crypto-asset may move on a public network, yet many people first acquire or sell it through an intermediary. A centralized exchange (CEX) is an organization that brings together buying and selling interest, commonly using an internal trading system. A broker is an intermediary that arranges or executes a transaction for a customer, potentially using its own inventory or an external trading venue. These labels describe business functions, not necessarily distinct legal licenses. One firm may perform several functions, while another may outsource parts of its service.

The distinction matters because a blockchain transfer and a market trade are separate events. A trade may match two orders within an exchange's database without immediately moving assets on a public ledger. Conversely, a blockchain transfer can move an asset between addresses without involving any market trade. For a manager, auditor, or investigator, the first question is therefore: which records establish the trade, and which records establish settlement or delivery?

The term centralized describes operational control over services such as account access, matching rules, listings, and customer support. It does not automatically describe the underlying blockchain, which may be decentralized. Centralized operators can deliver convenient access and customer service, but they also introduce dependencies on their governance, technology, liquidity, and financial condition.

A typical trade from instruction to settlement

Orders, quotes, and matching

An order is an instruction to buy or sell under specified conditions. A market order prioritizes prompt execution against available prices, while a limit order sets a price boundary and may remain unfilled. An order book lists resting buy orders (bids) and sell orders (asks). The highest bid and lowest ask form the quoted spread, although displayed amounts may change before execution. Trade execution occurs when compatible interest is matched; a displayed quote is not itself proof that a customer traded at that price.

A broker may provide a quote directly rather than expose a full order book. Its quote can include a spread or other charges. When a provider acts as principal, it trades against the customer from its own inventory; when acting as agent, it generally seeks execution on the customer's behalf. The economics, disclosures, and potential conflicts differ. The word broker alone does not establish which model applies.

After the match, the venue updates customer balances or trade records and determines how obligations are settled. Some transfers are internal bookkeeping movements, often called off-chain settlement. Withdrawal to an external address usually generates an on-chain transaction after processing, checks, and fees. Time of trade, time of internal credit, and time of on-chain delivery are different timestamps; a reconciliation must not collapse them into one event.

Deposits, withdrawals, and omnibus accounts

In an omnibus arrangement, a provider may hold assets for multiple customers using pooled addresses or accounts while recording individual entitlements internally. The balance at a visible blockchain address therefore need not correspond to one customer. A deposit reference, credited account entry, or withdrawal instruction can be essential evidence for connecting a customer to a transaction. On-chain visibility alone cannot reveal every internal customer allocation.

A withdrawal can be pending even when an internal balance shows the amount as available. Typical dependencies include risk checks, network availability, operational liquidity, and transaction confirmation. These checks do not prove wrongdoing; they are features of a managed service. Equally, a customer statement is not a substitute for independent assurance that the provider holds the assets it reports.

Liquidity, prices, and execution quality

Liquidity is the ability to trade a meaningful amount without materially changing the price. Depth refers to the volume available at different price levels. Slippage is the difference between an expected execution price and the achieved price. Large orders may consume multiple levels of an order book, producing a worse average price than the best displayed quote. A tight spread can coexist with shallow depth: those are different measures.

Market makers are participants that repeatedly quote buying and selling prices and take inventory risk. Some trading venues have professional market makers; others rely on broader participation. Trading volume is a measure of executed activity, not a direct guarantee of liquidity or the authenticity of every reported trade. An analyst should also distinguish the last traded price, the bid, the ask, and a reference price used for valuation. None is universally appropriate for every purpose.

Operational boundaries and accountability

Customer access is not blockchain settlement

A platform login, password reset, or customer balance is a service-layer record. Private-key control, account entitlements, and withdrawal approval may belong to different people or systems. This module does not repeat the custody designs covered in Module 4; instead it emphasizes that trading records and custody records should be reconcilable but are not identical. Reconciliation tests whether internal liabilities, asset movements, and customer activity agree within defined tolerances.

Operational risk can arise from matching-engine downtime, erroneous order handling, inaccurate price feeds, network congestion, insufficient liquidity, poor record retention, or cyber incidents. Segregation of duties, access logs, incident response, and independent review help make activity explainable. Market integrity concerns include wash trading (transactions intended to create misleading activity), spoofing (orders placed with the intent to mislead rather than execute), and conflicts when an operator trades for itself. Whether specific conduct is unlawful depends on the relevant jurisdiction and facts.

The legal perimeter: functional rather than promotional labels

Regulators often treat these functions as distinct activities, each with its own authorization and conduct rules: operating a trading platform, exchanging crypto-assets for funds or other crypto-assets, executing orders on behalf of clients, and receiving and transmitting orders. IOSCO's 2023 Policy Recommendations for Crypto and Digital Asset Markets address the conflicts that arise when one firm combines them. These are distinct activities even if a consumer sees one interface.

FATF Recommendation 15 and its Interpretive Note address risks from virtual assets and virtual asset service providers (VASPs). FATF's 2021 Updated Guidance for a Risk-Based Approach to Virtual Assets and Virtual Asset Service Providers explains that obligations follow covered activities and relevant persons rather than marketing terminology alone. FATF Recommendation 16 concerns information accompanying qualifying transfers under applicable rules; an internal exchange trade should not automatically be treated as the same event as a blockchain transfer. Implementation and scope vary by jurisdiction.

For any jurisdiction, a reviewer should ask which entity contracts with the customer, which entity holds or controls assets, where trades execute, what records exist, and what supervisory framework applies. An exchange's website language is not a legal classification. Neither an authorization number nor a recognizable brand is a blanket guarantee of solvency or good execution.

Worked example: a customer sells an asset

Suppose a customer places a limit sell order for 100 units at a minimum price of 10 units of account each. The venue matches 60 units immediately and leaves 40 unfilled. Its internal system records a partial execution, a fee, and the customer's new balances. A public blockchain explorer may show nothing at that moment because no external transfer is required for the match. Later, the customer requests withdrawal of the proceeds. That withdrawal can produce a separate transaction with its own network fee and confirmation status. Three different amounts may appear: gross trade proceeds, net credited proceeds after venue charges, and the eventual withdrawn amount after any relevant withdrawal charge.

A sound review would seek the original order, each fill, fee schedule, account ledger, withdrawal instruction, and blockchain transaction identifier where one exists. It would not infer that the on-chain withdrawal price equals the earlier execution price. It would also not equate a single blockchain address with a single owner merely because that address received the withdrawal.

Exam focus: Distinguish an order from its execution; an internal account credit from an on-chain transfer; an exchange venue from a broker; and market liquidity from custody assurance. Know that operating a platform, exchanging, executing orders and transmitting orders are distinct regulated functions, not interchangeable labels.