Key Takeaways
- On a CEX, a deposit goes to an address the exchange controls and trades settle on an internal ledger; a withdrawal is the point where an actual blockchain transaction occurs.
- On a DEX, a connected self-custody wallet trades directly against a smart contract or liquidity pool, and no company can reset access or reverse a mistaken transfer.
- Custody is the core distinction: a CEX balance is a claim on the exchange's ability to deliver assets, while DEX users bear full responsibility for their own wallet security.
- DEX-specific risks include smart-contract exploits, malicious tokens, price impact/slippage, token-approval abuse, front-end compromise, and oracle manipulation.
Direct Answer
A centralized exchange (CEX) is a company-operated trading platform that maintains customer accounts and commonly controls the private keys for deposited assets. A decentralized exchange (DEX) is a blockchain-based protocol that lets users trade through smart contracts or liquidity pools while generally retaining control of their own wallet.
The two models solve the same problem, matching a buyer with a seller, in structurally different ways. A CEX intermediates the trade through a company's internal systems and account ledger. A DEX intermediates it through code that runs the same way for everyone who calls it. Which one is "better" depends on what you value more: the convenience and recoverability of a managed account, or removing a single company from custody of your assets.
How a Centralized Exchange Works
A centralized exchange is built around an account, not a wallet you control:
- A deposit is sent to an address the exchange controls, not one the user holds the keys to.
- The exchange credits the user's internal account balance rather than moving assets to a personal wallet.
- Trades commonly occur on the exchange's internal ledger, matching buyers and sellers without necessarily creating an individual on-chain transaction for every fill.
- A withdrawal is the point at which the exchange actually initiates a blockchain transaction, moving assets from its own holdings to the address the user specifies.
In exchange for that custody arrangement, a centralized exchange typically offers account recovery if credentials are lost, customer support for disputes and errors, fiat on-ramps and off-ramps for converting to and from traditional currency, and compliance or identity-verification procedures required of a regulated or semi-regulated financial intermediary.
How a Decentralized Exchange Works
A decentralized exchange protocol is built around a wallet the user already controls:
- The user connects a self-custody wallet directly to the protocol's interface, no account, login, or deposit into a company-held address is involved.
- The trade executes through a smart contract, commonly against a liquidity pool using an automated market maker (AMM) formula, or in some designs through an on-chain order book.
- Because an AMM prices trades off the pool's own balance, the trader's own order can move the effective price against them as it consumes available liquidity. This is price impact.
- Network transaction fees apply in addition to whatever fee the protocol itself charges, so a trade's total cost is not just the protocol's advertised rate.
Account recovery on a DEX is limited to whatever the connected wallet itself supports. No company can reset access, freeze a mistaken transfer, or issue a refund, the protocol only executes what it is instructed to execute.
CEX vs. DEX at a Glance
| Criterion | Centralized exchange | Decentralized exchange |
|---|---|---|
| Key control | The exchange | The user |
| Account recovery | Often available | Limited to the wallet's own recovery design |
| Fiat access | Common | Usually indirect |
| Asset availability | Selected by the operator | Broader and often permissionless, including higher-risk tokens |
| Main dependency | The company's operations and solvency | Smart contracts, network conditions, and available liquidity |
| Transaction visibility | Some activity occurs off-chain, on an internal ledger | Trades generally settle on-chain |
| Common risk | Withdrawal freeze or custodian failure | Contract exploit, malicious token, or slippage |
Custody Is the Core Distinction
Every other difference in the table above follows from one decision: who holds the keys. On a centralized exchange, the number displayed as an account balance is a claim on the exchange's obligation and ability to deliver the underlying assets. It is not, itself, proof that the exchange holds a matching amount somewhere it can access on demand. If the exchange becomes insolvent, freezes withdrawals, or is compromised, a customer's practical access can be impaired regardless of what the exchange's own interface displays.
On a decentralized exchange. The trader is directly responsible for wallet security, losing a seed phrase or signing a malicious transaction has no company to appeal to. What the trader avoids is counterparty exposure to a single company holding the assets on their behalf. Neither arrangement is strictly safer; each trades one category of risk for a different one.
DEX-Specific Risks Worth Understanding
- Smart-contract bugs or exploits. The protocol's code is the entire system, a flaw in it can be used to drain a pool regardless of how careful any individual trader was.
- Malicious or fraudulent tokens. Because listing can be permissionless, anyone can create and pool a token designed to look legitimate while functioning as a scam.
- Price impact and slippage. Trading in a low-liquidity pool can move the execution price meaningfully against the trader, especially for larger orders.
- Token-approval risk. Granting a contract permission to spend a token can be abused later if the approval is excessive or the contract is subsequently compromised.
- Front-end compromise. The underlying smart contracts may function correctly while a fake or hacked website interface misleads users into signing something harmful.
- Oracle manipulation. Some protocols rely on external price oracles that can, in certain conditions, be manipulated to distort pricing or liquidations.
CEX-Specific Risks Worth Understanding
- Exchange insolvency or bankruptcy. Customer balances can be affected regardless of what any individual customer did correctly.
- Security breaches. A hack of exchange-held funds can affect all customers whose assets sat in the compromised systems.
- Withdrawal suspension. An exchange may pause withdrawals during periods of stress, for reasons that are not always disclosed in real time.
- Regulatory action. A legal or regulatory restriction on the exchange can affect a customer's ability to access their own account.
- Internal fraud or mismanagement. Customer assets have, in past industry incidents, been misused in ways not visible from the outside.
- Proof-of-reserves snapshots are not audits. A published reserves snapshot, if one exists, indicates assets held at a moment in time. It is not the same as an independent financial-statement audit of the company's overall solvency.
Decision Framework
Before choosing a venue for a particular trade, work through:
- Do I need to convert to or from traditional currency? This favors a centralized exchange for convenience.
- Do I want direct custody and to avoid a single company holding my assets? This favors a decentralized exchange, provided you can manage a wallet safely.
- Am I trading an asset that is only available on one type of venue?
- Do I need account recovery options, or am I comfortable that a lost wallet means permanent loss?
- How much do fees, spreads, and price impact matter for my typical trade size?
- What is my tolerance for smart-contract risk versus counterparty and custodian risk?
Neither Model Eliminates Trust
A decentralized exchange can still depend on front-end hosting, a governance process, price oracles, liquidity providers, and the underlying blockchain network functioning correctly. Using one does not mean "no trust required". It means trusting a different set of things than a single centralized operator. Evaluating a DEX means evaluating those dependencies specifically, not assuming that "decentralized" is a synonym for "risk-free."
Matching the Venue to the Failure You Can Live With
The choice between a centralised and a decentralised venue is a choice about which failure mode you prefer, not about which is safer in general. One concentrates risk in a company that holds your assets and can be hacked, mismanaged or frozen. The other concentrates it in code that executes exactly as written, including when what was written is wrong.
A workable split for many people is functional. Use whichever venue offers real depth for the pair you need, keep balances there only for as long as a trade requires, and hold longer-term positions somewhere the trading venue does not control. That approach accepts both risks briefly rather than either permanently.
The misconception worth naming is that self-custody removes counterparty risk from a decentralised trade. It removes the custodian. It leaves the smart contract, the front-end website serving you the interface, the router deciding your path and the price oracle feeding the pool, any of which can fail independently of your keys being safe.
Neither venue type protects you from the two most common losses in this market: sending to the wrong address and approving a contract that then drains the token you approved. Both happen with keys entirely intact and are unrecoverable on any venue.
CEX vs. DEX FAQs
Is a decentralized exchange safer than a centralized exchange?
Not automatically. A decentralized exchange can reduce custody risk because trades commonly happen from a user's own wallet, but it introduces smart-contract, liquidity, token-verification, and transaction-signing risk instead. A centralized exchange removes most of those technical risks but adds custodial and counterparty risk tied to the operator's solvency, security, and policies.
Why would I need identity verification on a centralized exchange but not a decentralized one?
Centralized exchanges are typically operated by a company subject to applicable financial-services regulations, which commonly include identity-verification requirements. Decentralized exchange protocols are generally accessed directly through a wallet without a company intermediary collecting that information, though the specifics vary by protocol and jurisdiction.
Can I lose money to slippage on a decentralized exchange?
Yes. Trading against a liquidity pool can move the effective execution price against the trader as the trade itself consumes available liquidity, especially for larger trades in less-liquid pools. Reviewing expected price impact before confirming a trade helps manage this risk.
What is a token approval, and why does it matter on a decentralized exchange?
A token approval is a permission granted to a smart contract allowing it to spend a specified token from a user's wallet, generally required before a decentralized exchange can execute a trade on the user's behalf. Granting an unnecessarily broad or unlimited approval, or approving a malicious contract, can expose more of a wallet's holdings than intended if that contract is later compromised or was deceptive from the start.
If a centralized exchange gets hacked, do I lose my funds?
It depends on the exchange's security practices, insurance arrangements if any, and how it handles the aftermath, outcomes have varied significantly across past incidents in the industry. Because the exchange controls the underlying keys, a customer's practical recovery depends entirely on that company's response rather than on the customer's own actions.
Do decentralized exchanges require a company to operate?
Decentralized exchange protocols are generally designed to operate through smart contracts without requiring an operating company to execute trades, but many protocols still depend on a front-end website, a development team for upgrades, and sometimes a governance process, so some degree of centralized involvement is common even in nominally decentralized designs.
Which is better for a beginner: a centralized or decentralized exchange?
There is no universal answer. A centralized exchange is often simpler for beginners because of fiat access, customer support, and account recovery, but it requires trusting the operator with custody. A decentralized exchange requires more technical understanding of wallets, network fees, and transaction verification, but removes reliance on a single company holding the funds.
Can I move assets directly between a centralized and a decentralized exchange?
You withdraw from the centralized exchange to a wallet you control, then connect that wallet to the decentralized exchange. There is no direct transfer between the two, because a decentralized exchange has no account to receive a deposit. The step that most often goes wrong is the network selection on withdrawal, since sending on a chain the receiving wallet does not support can make the funds unreachable.
Why do prices differ between a centralized and a decentralized venue for the same token?
The two use different price-formation mechanisms. A centralized exchange matches a limit order book, while most decentralized venues price trades from the ratio of assets held in a liquidity pool. Those move independently until arbitrage brings them together, and the size of the gap reflects how quickly arbitrage capital can act given fees, gas costs, and the depth available on each side.