Poloniex Review: Fees, Security, and the $126 Million Hack You Should Know About
by AK Arora 
On November 10, 2023, blockchain security firms PeckShield and Cyvers flagged suspicious activity draining Poloniex’s hot wallets. Within hours, the exchange had lost approximately $126 million in Bitcoin, Ethereum, and TRX. Poloniex’s owner, Justin Sun — the founder of Tron — publicly pledged full reimbursement and offered the attacker a 5% “white hat bounty” to return the funds voluntarily.
This is the single most important fact to understand before evaluating Poloniex in 2026. The exchange has survived two major security breaches across its history, changed ownership multiple times, and settled sanctions violations with the US government — yet it remains operational today, trading hundreds of millions of dollars in daily volume. Read our can crypto be hacked guide for a broader look at exchange security risks.
This review covers exactly what Poloniex is, what happened, and what it offers in 2026.
Poloniex Quick Overview
| Category | Detail |
|---|---|
| Founded | 2014, by Tristan D’Agosta |
| Current owner | Justin Sun (Tron founder), since 2019 |
| Headquarters | Operates offshore (formerly Seychelles-registered) |
| Cryptocurrencies listed | 400+ |
| Spot trading fees | 0.09%–0.155% (maker/taker, volume-tiered) |
| Futures leverage | Up to 100x |
| US residents | Not available |
| Major security incident | $126 million hack, November 2023 |
| Regulatory settlement | $7.6 million OFAC sanctions settlement |
A Brief History of Ownership Changes
Understanding Poloniex requires understanding that it is not the same company today as when it launched — it has changed hands multiple times, and each transition matters for evaluating its current trustworthiness.
2014 — Founded by Tristan D’Agosta. Poloniex launched as one of the earliest cryptocurrency exchanges, gaining early recognition for its wide selection of altcoins and margin trading capabilities at a time when most exchanges offered neither.
2014 — First security breach. Shortly after launch, Poloniex suffered a hack resulting in the loss of approximately 12.3% of its Bitcoin holdings at the time, valued at roughly $50,000. The exchange absorbed the loss and reimbursed affected users, continuing operations.
2016 — First to list Ethereum. Poloniex became one of the first major exchanges to list ETH, a notable early bet that paid off as Ethereum grew into the second-largest cryptocurrency by market capitalisation.
2018 — Acquired by Circle. Circle Internet Financial — the company behind the USDC stablecoin — acquired Poloniex for approximately $400 million, intending to bring the exchange into a more compliance-focused operating structure.
2019 — Sold to an Asian investor consortium, then to Justin Sun. Circle divested Poloniex in 2019. Justin Sun, founder of the Tron blockchain, subsequently became the controlling figure behind the exchange, a relationship that has continued through 2026.
2023 — Justin Sun’s ownership becomes fully associated with Tron’s broader ecosystem. By this point, Poloniex operated alongside other Sun-affiliated platforms, including the HTX exchange, with overlapping leadership and, as later events would demonstrate, apparently overlapping security vulnerabilities.
The November 2023 Hack: What Actually Happened
This is the defining event in Poloniex’s recent history, and any review that omits it is incomplete.
On November 10, 2023, security firms PeckShield and Cyvers detected unusual outflows from Poloniex’s hot wallets. An Ethereum-based wallet linked to the attacker executed a sequence of 357 transactions, draining approximately $114 million in tokens. Simultaneously, a separate wallet on the Tron blockchain moved approximately $42 million. Combined, on-chain analytics firm Arkham Intelligence calculated total losses at approximately $126 million, including over 288 million TRX and 865 BTC.
Poloniex disabled wallet functionality within 11 minutes of the security firms’ public alert. Justin Sun confirmed the breach the same day, stating that “Poloniex maintains a healthy financial position and will fully reimburse the affected funds.” He offered the attacker a 5% bounty (approximately $6.5 million) for voluntary return of the funds, with a seven-day deadline before involving law enforcement.
Within hours, Sun announced that Poloniex had identified and frozen a portion of the assets linked to the attacker’s addresses. By December 2023, Sun stated that Poloniex had restored approximately 85% of the USD value of affected assets, with full reimbursement to users completed in the following months.
A related incident: the same month, Sun’s other exchange, HTX, was also hacked, with combined losses across both platforms exceeding $200 million — raising significant questions about shared security infrastructure or practices across Sun-affiliated platforms.
The OFAC Sanctions Settlement
Separately from the hack, Poloniex’s history includes a notable US regulatory settlement. The exchange agreed to pay $7.6 million to the US Department of the Treasury’s Office of Foreign Assets Control (OFAC) to settle allegations that it had allowed customers from sanctioned regions — including Cuba, Iran, Sudan, Syria, and Crimea — to trade on its platform between January 2014 and November 2019.
Separately, in 2021, Poloniex paid over $10 million to settle charges with the US Securities and Exchange Commission for operating an unregistered digital asset exchange. Together, these settlements span the period before and immediately after Circle’s ownership, reflecting compliance gaps across multiple ownership eras.
Current Features in 2026
Despite its troubled security and regulatory history, Poloniex continues operating with a reasonably broad feature set.
Cryptocurrency selection — over 400 cryptocurrencies listed, with the most popular markets including BTC, ETH, SOL, XRP, DOGE, and TRX (reflecting Sun’s Tron ecosystem ties). Most trading pairs are denominated in USDT.
Trading options — spot trading, margin trading (up to 1:3 leverage), and perpetual futures contracts (up to 100x leverage on a limited set of approximately 10 futures markets).
Additional products — automated trading bots, copy trading, staking with advertised yields up to 100% APY on select assets, and DeFi-linked earning products.
Fiat purchases — available through third-party providers Mercuryo and Simplex, limited to seven digital assets (BTC, ETH, XRP, USDT, USDC, LTC, TRX), with Mercuryo charging a notably high 3.95% fee for card and bank transfer purchases.
Fees: Where Poloniex Stands in 2026
Poloniex uses a tiered fee structure based on 30-day trading volume.
| Tier | Maker Fee | Taker Fee |
|---|---|---|
| Standard | 0.09%–0.125% | 0.10%–0.155% |
| VIP / high-volume | As low as 0% (maker) | Below 0.04% |
For context, these fees sit in the mid-to-higher range compared to leading competitors. Bitget, for example, offers 0.01% spot fees for both makers and takers, with discounts of up to 80% available for fee-token holders — making Poloniex’s default fee structure notably less competitive for casual traders who do not qualify for VIP tiers.
Withdrawal fees vary by cryptocurrency and network, generally following standard network fee rates plus a service charge. Deposits remain free of charge, consistent with industry standard practice.
Security Measures After the Hack
Following the 2023 breach, Poloniex implemented several additional security measures:
- Expanded cold storage allocation for the majority of user funds
- Improved multi-signature wallet systems
- Strengthened withdrawal verification processes
- IP, device, and wallet whitelisting options
- Two-factor authentication (2FA) requirements
- Anti-phishing codes and device management controls
What remains a genuine gap: unlike some competitors that maintain publicly disclosed insurance or protection funds with specific dollar amounts (Bitget, for example, operates a Protection Fund exceeding $300 million), Poloniex does not publish real-time proof-of-reserves or maintain a comparably transparent dedicated protection fund. For guidance on how to protect your own holdings regardless of which exchange you use, read our how to store cryptocurrency safely guide.
Account Verification and Withdrawal Limits
Poloniex uses a two-tier KYC system:
Level 1 — requires only email registration. Grants access to spot trading and deposits, with a daily withdrawal limit of approximately $10,000–$20,000. Does not permit access to margin trading or other advanced features.
Level 2 — requires submission of government ID, proof of address, date of birth, and a valid phone number. Grants access to all platform features, including margin trading, with daily withdrawal limits reportedly as high as $500,000–$750,000 depending on the specific account tier.
This relatively permissive Level 1 tier — allowing meaningful trading activity with minimal verification — has historically made Poloniex attractive to users seeking to avoid extensive KYC processes, which is also part of why it has faced sanctions-related regulatory scrutiny.
Poloniex vs Competitors: Quick Comparison
| Feature | Poloniex | Typical Tier-1 Exchange |
|---|---|---|
| Spot trading fees | 0.09%–0.155% | 0.01%–0.10% |
| Major security incidents | 2 (2014, 2023) | Varies, generally fewer at scale |
| Publicly disclosed protection fund | No | Often yes |
| Available to US residents | No | Often yes |
| Cryptocurrencies listed | 400+ | Often 300-600+ |
| Regulatory settlements | OFAC ($7.6M), SEC ($10M+) | Varies significantly |
Merits and Demerits
Merits:
- Long operating history since 2014, having survived and recovered from multiple crises
- Wide selection of over 400 cryptocurrencies
- Competitive offerings for margin and futures traders seeking high leverage
- User-friendly interface across desktop and mobile
- Active development of newer features including copy trading and trading bots
Demerits:
- Two major historical security breaches, including a $126 million hack in 2023
- Not available to US residents due to regulatory restrictions
- Higher default trading fees compared to leading competitors
- No publicly disclosed insurance or protection fund matching industry-leading transparency standards
- History of regulatory settlements related to sanctions compliance and unregistered exchange operations
- Limited fiat deposit options compared to more established competitors
Should You Use Poloniex?
Poloniex’s core trade-off is straightforward: it offers a wide cryptocurrency selection and accessible KYC tiers, but carries a security and regulatory track record that is genuinely worse than several leading competitors.
Consider Poloniex if: you specifically need access to its altcoin selection or Tron-ecosystem integration, you are comfortable with its historical security profile, and you are not a US resident (where it is unavailable regardless).
Consider alternatives if: security track record and regulatory compliance are priorities, or if you are simply seeking the most competitive trading fees — several established exchanges currently offer materially lower costs and stronger transparency standards. Read our CoinDCX vs Binance comparison for two such alternatives.
Regardless of which exchange you choose, the most important practical lesson from Poloniex’s history applies universally: never store more on any centralised exchange than you are prepared to lose, and consider moving long-term holdings to self-custody. Read our types of crypto wallets explained guide for a complete breakdown of your storage options.
FAQ
Is Poloniex safe to use in 2026?
Poloniex has implemented enhanced security measures since its 2023 hack, including expanded cold storage and improved verification processes. However, its track record includes two major breaches and the lack of a publicly disclosed protection fund comparable to some competitors. Users should weigh this history carefully and avoid storing more than necessary on the platform.
What happened in the Poloniex hack?
In November 2023, attackers exploited Poloniex’s hot wallets, draining approximately $126 million across Bitcoin, Ethereum, and TRX. Owner Justin Sun pledged full reimbursement, which was substantially completed in the following months, alongside a related $200 million combined loss across Poloniex and the affiliated HTX exchange.
Who owns Poloniex?
Justin Sun, founder of the Tron blockchain, has controlled Poloniex since 2019, following the exchange’s earlier acquisition by Circle Internet Financial in 2018 for approximately $400 million.
Can US residents use Poloniex?
No. Poloniex is not available to US residents due to regulatory restrictions, partly stemming from its history of sanctions-related compliance issues, including a $7.6 million settlement with OFAC.
What are Poloniex’s trading fees?
Poloniex uses a tiered fee structure starting at approximately 0.09%–0.155% for makers and takers, decreasing for higher-volume traders. These fees are generally higher than several leading competitors offering rates as low as 0.01%.
Does Poloniex have a protection fund for hacked user assets?
Poloniex does not publish a dedicated, transparent protection fund with a specific disclosed amount, unlike some competitors. Following its 2023 hack, the exchange reimbursed affected users from its own operating funds rather than a pre-established insurance pool.
Final Word
Poloniex’s story is genuinely one of survival through repeated crisis rather than steady, untroubled growth. A 2014 hack, an acquisition by Circle, a sale to Justin Sun, sanctions violations, an SEC settlement, and a $126 million breach in 2023 — each of these would be a defining event for most exchanges. Poloniex has weathered all of them and continues operating with hundreds of millions in daily trading volume.
That resilience is not the same as reliability. For traders specifically seeking Poloniex’s altcoin selection or Tron ecosystem integration, the platform remains functional in 2026. For traders prioritising security track record, regulatory transparency, and competitive fees above all else, several alternatives currently offer a meaningfully stronger profile across all three dimensions.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency exchange use carries risk, including the potential for security breaches and regulatory changes. Always conduct your own research before choosing any platform.
