GyaanamKnowledge for All
Back to Internal SecurityAll concepts

Centralised and Decentralised Cryptocurrency Exchanges

SyllabusBasics of cyber security: cyber crime, data protection and critical infrastructure

Internal SecurityPublished 2 November 2026

A centralised cryptocurrency exchange (CEX) is a trading platform operated by an intermediary that manages users’ accounts and usually holds the cryptoassets deposited with it. A decentralised exchange (DEX) uses blockchain-based programs called smart contracts to execute trades, generally allowing users to trade from wallets they control rather than depositing assets with a central operator.

Custody and control

The central distinction is where users place their trust: a CEX relies on an operator’s management and safeguards, while a DEX relies more directly on blockchain rules and software.

  • In a typical CEX, the operator controls the private keys authorising transfers of deposited cryptoassets; users access their balances through exchange accounts.
  • In a typical DEX, users retain self-custody through their own wallets and authorise transactions, although assets may be committed to smart contracts.
  • A CEX can administer accounts and withdrawals centrally; a DEX’s execution rules are implemented through smart contracts, although developers or governance participants may retain important powers.

How trading works

Both models connect buyers and sellers, but they organise transactions differently.

  • A CEX commonly uses an order book, which records buy and sell orders and allows the platform to match them.
  • Many DEXs use automated market makers, where smart contracts price trades against pools of cryptoassets supplied by liquidity providers; not all DEXs use this model.
  • CEX trades can be recorded within the operator’s internal accounts without a separate blockchain transaction for each trade; typical DEX trades require blockchain transactions and associated network fees.

Cybersecurity and accountability

Decentralisation changes the location of risk; it does not eliminate the possibility of theft or loss.

  • A CEX concentrates assets and account information, creating risks from custodial breaches, insider misuse, operational failure and withdrawal restrictions.
  • A DEX exposes users to smart-contract vulnerabilities, manipulation of trading mechanisms and attacks on interfaces used to access the protocol.
  • Self-custody makes wallet security crucial: compromised signing credentials can permit theft, while lost private keys can make assets inaccessible.
  • A CEX provides an identifiable operator for complaints and regulatory oversight; responsibility and enforcement can be harder to establish across distributed protocols.
  • Decentralisation is a matter of degree: concentrated governance or administrative control can persist even where trading occurs through smart contracts.

Keep reading

The news behind topics like this, explained every day

Every day Gyaanam reads The Hindu, the Indian Express and PIB and picks what matters for UPSC. Each story is written up against the syllabus line it belongs to. Your first 7 days or 3 articles are free, whichever ends first.

Sign up