Counterparty & venue risk

Every leg is an unsecured deposit at an exchange. Outages, withdrawal freezes and API downtime are part of the trade.

The deposit is the risk

A cross-exchange spread doubles your counterparty surface: collateral sits on two venues, and the trade needs both to keep functioning. Everything else on this page is a variation of one fact — an exchange balance is an unsecured claim on a company, not custody.

Outages

Exchanges go down, most often during exactly the volatility that makes spreads attractive: matching-engine overload, degraded API modes, “temporary” order-placement restrictions. When one venue is down:

You cannot close, resize or protect that leg. The other leg keeps trading.
Liquidation engines generally keep running even when order entry is degraded.
The window is unpredictable — minutes to hours.

An outage on one venue converts your pair into a directional position with extra steps. If your plan requires the ability to exit both legs quickly, your plan requires two venues’ uptime simultaneously.

Withdrawal freezes

The quieter failure: trading continues, withdrawals stop — for a token (contract migration, chain halt) or for the whole venue (liquidity trouble, “wallet maintenance” that stretches). For carry positions this strands the spot inventory; for any position it blocks the collateral rebalancing that margin management depends on. A venue whose withdrawals are frozen is also a venue whose perps start pricing an exit discount — basis against it can widen for reasons that have nothing to do with the asset.

API downtime

If you execute or monitor via API, its availability is separate from the website’s. Order endpoints get rate-limited or disabled first during load; market-data streams stall while trading continues. Stale monitoring is its own hazard — a feed that froze five minutes ago shows you a hedge that may no longer exist.

Diversification, practically

Spread capital across venues; keep on each only what active positions require.
Prefer venues you have withdrawn from before — test the exit path with a small amount before it matters.
Watch venue-level signals: withdrawal processing times, proof-of-reserves cadence, persistent negative basis against the rest of the market.
Assume the worst combination: the venue holding your winning leg is the one that stops responding.

Warning Venue risk does not show in any spread number. Two venues can quote a clean 0.5%/8h gap while one of them is quietly insolvent. The rate table cannot see balance sheets.