Introduction | 引言

Exchange security should be every crypto trader's top priority. Despite significant improvements in exchange security infrastructure, hackers continue to target centralized platforms. In 2025 alone, over $2 billion was lost in exchange-related hacks. By implementing the security practices outlined in this guide, you can dramatically reduce your risk of losing funds.

交易所安全应该是每个加密货币交易者的首要任务。尽管交易所安全基础设施有了显著改善，但黑客仍然以中心化平台为目标。仅2025年，与交易所相关的黑客攻击就导致超过20亿美元的损失。通过实施本指南中概述的安全实践，你可以显著降低资金损失的风险。

Account Security Essentials | 账户安全基础

Start with the basics: 1) Enable 2FA using an authenticator app (Google Authenticator or Authy) — NOT SMS, which is vulnerable to SIM swapping. 2) Use a strong, unique password generated by a password manager. 3) Set up anti-phishing codes — exchanges will include this code in all legitimate communications. 4) Enable login notifications and device management to monitor account access. 5) Never share your API keys or allow third-party apps unnecessary permissions.

从基础开始：1) 使用身份验证器应用（Google Authenticator或Authy）启用2FA——不要用短信验证码，它容易受到SIM卡交换攻击。2) 使用密码管理器生成的强唯一密码。3) 设置反钓鱼码——交易所会在所有合法通信中包含此代码。4) 启用登录通知和设备管理以监控账户访问。5) 切勿分享你的API密钥或授予第三方应用不必要的权限。

Withdrawal Security Features | 提现安全功能

Exchange withdrawal security features can prevent fund loss even if your account is compromised. Always enable: 1) Withdrawal whitelist — only allow withdrawals to pre-approved addresses. 2) Withdrawal confirmation delays — require 24-48 hours for new address withdrawals. 3) Anti-money laundering address screening. 4) Cold wallet storage for the majority of your funds — only keep trading capital on the exchange. 5) Withdrawal limits — set daily and monthly limits appropriate for your trading needs.

即使账户被盗，交易所提现安全功能也能防止资金损失。务必启用：1) 提现白名单——只允许提现到预先批准的地址。2) 提现确认延迟——新地址提现需要24-48小时。3) 反洗钱地址筛查。4) 大部分资金存放在冷钱包——只在交易所保留交易资金。5) 提现限额——根据你的交易需求设置每日和每月限额。

Recognizing and Avoiding Crypto Scams | 识别和避免加密骗局

Common crypto exchange scams in 2026 include: 1) Fake exchange apps on app stores — always verify the developer. 2) Phishing emails claiming urgent account issues — never click links directly. 3) "Customer support" on Telegram/Discord asking for credentials — official support never asks for your password. 4) Fake trading bots promising guaranteed returns. 5) SIM swap attacks — use a separate phone number for crypto accounts or eSIM with extra security.

2026年常见的加密交易所骗局包括：1) 应用商店中的假冒交易所应用——务必验证开发者。2) 声称账户紧急问题的钓鱼邮件——切勿直接点击链接。3) Telegram/Discord上询问凭证的"客服"——官方支持绝不会索要密码。4) 承诺保证回报的虚假交易机器人。5) SIM卡交换攻击——为加密账户使用单独的号码或具有额外安全性的eSIM。

Insurance and Compensation Policies | 保险和赔偿政策

Understanding exchange insurance policies is crucial. Major exchanges like Coinbase carry crime insurance for a portion of hot wallet funds. Binance's SAFU (Secure Asset Fund for Users) holds $1 billion in a separate wallet for emergency protection. OKX and Bybit have similar protection funds. However, insurance rarely covers 100% of losses — which is why personal security practices are your most reliable protection.

了解交易所保险政策至关重要。Coinbase等主要交易所为部分热钱包资金投保犯罪保险。币安的SAFU（用户安全资产基金）在独立钱包中持有10亿美元作为紧急保护。OKX和Bybit有类似的保护基金。然而，保险很少覆盖100%的损失——这就是为什么个人安全实践是你最可靠的保护。