Crypto.com
Crypto.com is a Singapore-based cryptocurrency exchange and mobile app founded in 2016 as Monaco and renamed in 2018 after acquiring the crypto.com domain. Run by CEO Kris Marszalek, it offers an easy consumer app, a lower-fee exchange interface, Visa-branded cards and staking, and it issues the CRO token behind the Cronos blockchain. It is a distinct entity from the Crypto.com Arena sports venue that carries its name.
Is Crypto.com safe?
Crypto.com is a Singapore-based exchange and app, founded in 2016 as Monaco and renamed after it bought the crypto.com domain in 2018. One quick disambiguation: the company is a separate thing from the Crypto.com Arena, the Los Angeles sports venue it holds naming rights to — this profile is about the exchange, not the stadium. The company issues the CRO token and backs the Cronos blockchain.
On security, Crypto.com is custodial and says it holds the majority of customer assets in cold storage. Its one notable breach was in January 2022 (detailed below), after which it reimbursed every affected user, revoked all 2FA tokens and added a mandatory 24-hour delay before withdrawals to newly whitelisted addresses. It also runs a Worldwide Account Protection Program offering to restore up to $250,000 to qualifying users hit by unauthorized access. The usual custodial caveats still apply: Crypto.com holds your keys, and your own account can be phished.
Crypto.com fees
Crypto.com's exchange uses a maker-taker schedule that starts around 0.25% maker and 0.50% taker for users under about $10,000 in 30-day volume, and falls at higher volume tiers, with taker fees dropping toward 0.05% (and lower on select pairs). Staking the CRO token unlocks further trading discounts and, at higher lock-up levels, maker rebates.
Two costs are easy to miss. The Crypto.com app's simple buy screen often bakes its fee into the spread rather than showing a separate line, which makes it less transparent and usually pricier than trading on the exchange interface. And crypto withdrawals carry the underlying network fee, which the platform passes through. For anything beyond an occasional buy, the exchange interface is materially cheaper than the app's instant-buy path.
Incident record
On 17 January 2022, attackers bypassed two-factor authentication to make unauthorized withdrawals from 483 user accounts, taking about 4,836 ETH and 444 BTC, roughly $34 million in total. Crypto.com revoked all customer 2FA tokens, added a mandatory 24-hour delay before withdrawals to newly whitelisted addresses, and hardened its infrastructure. It says no customer ultimately lost funds: many unauthorized withdrawals were blocked, and every remaining affected user was fully reimbursed.
In our ratings
Where we score Crypto.com against its peers on open data. The number lives there, not here.
Compare with
Our coverage of Crypto.com
Frequently asked
Is Crypto.com safe?+
Crypto.com is a custodial exchange that says it keeps most customer assets in cold storage. Its January 2022 account breach was resolved by fully reimbursing affected users, and it added a 24-hour whitelist-withdrawal delay and an account-protection program afterward. The residual risks are the usual custodial ones: it holds your keys, and your own account can be phished.
Was Crypto.com hacked?+
Yes, in January 2022 attackers bypassed two-factor authentication and made unauthorized withdrawals from 483 accounts, about $34 million in total. Crypto.com blocked many of the withdrawals, fully reimbursed the remaining affected users so none ultimately lost funds, and hardened its withdrawal controls.
Is Crypto.com the same as Crypto.com Arena?+
No. Crypto.com is the cryptocurrency exchange and app; the Crypto.com Arena is a Los Angeles sports venue the company bought naming rights to. They share a name but are different things.
What are Crypto.com's fees?+
The exchange interface uses a maker-taker schedule starting around 0.25% maker and 0.50% taker for low-volume users, falling with volume and CRO staking. The app's instant-buy screen often bakes its fee into the spread, making it pricier, and crypto withdrawals carry the underlying network fee.
What changed
- 2026-09-28Profile created: founding and Singapore-entity facts, CRO/Cronos and stadium disambiguation, fees, and the January 2022 2FA-bypass breach with a confirmed reimbursement verdict.