In the final week of its eighth year, XT Exchange published a letter to its users. It ran several hundred words. It invoked customer service, in one form or another, at least eleven times. It mentioned proof of reserves, third-party audits, regulatory licenses, and the names of its founders exactly zero times. The letter was translated, reposted, and circulated through Chinese-language crypto media, where it arrived as a warm, human gesture from a platform that had evidently survived something. I read it three times, looking for one number a stranger could independently verify. I found none.
That absence is the story. When a trading venue reaches a milestone and chooses to speak only about how much it cares, the silence surrounding everything else becomes the most legible part of the document. Numbers can be audited. Care cannot. In an industry that has spent a decade learning โ repeatedly, and at costs measured in billions โ that the difference between a solvent custodian and an insolvent one lives in a proof-of-reserves page and not in a press release, the decision to publish the latter while withholding the former is not a stylistic preference. It is a disclosure strategy. What follows is an attempt to read it.
Context: The Long Tail and Its Narrative Economy
To understand what XT's letter is doing, you have to understand the position it is trying to defend. XT Exchange is a centralized venue โ a trading engine bolted to a custodial wallet, with a payment gateway, XT Pay, attached at the edge. It says it launched in 2018 and now serves more than twelve million registered users across two hundred or more countries and territories. Its product line is a horizontal spread of everything a modern exchange is expected to sell: spot, margin, futures, a tokenized real-world-asset market, an undefined TradFi exposure, and the payments arm. The anniversary theme, rendered in the company's own Latin characters, is Build the NeXT.
The industry context matters here. The 2024โ2025 cycle pushed the exchange sector toward two visible poles. At one pole, the large venues competed on regulatory legitimacy โ MiCA licensing in Europe, spot ETF custody in the United States, audited reserves, public proof pages updated monthly. At the other pole, a long tail of smaller venues competed on access, listing velocity, and leverage. XT sits in the long tail, and its anniversary letter is best read as an attempt to define a third axis of competition: service.
This is a familiar move. When a player cannot win on liquidity depth, cannot win on brand, and cannot win on regulatory standing, it relocates the contest to a dimension where victory cannot be measured. Service quality is precisely such a dimension. There is no exchange ranking that grades a venue on how kindly its support agents reply. There is no third-party auditor who certifies empathy. The narrative is unfalsifiable by construction, and that is its function. A claim that can be disproven is a liability; a claim that cannot be disproven is an asset. The service narrative is the second kind of claim, dressed in the language of the first.
The structural pressure behind this move is worth stating plainly. Centralized exchanges are a winner-take-all business. Liquidity attracts liquidity; the venue with the deepest order book offers the best prices, which attracts more order flow, which deepens the book further. The result is a gravitational pull toward the top of the market that no amount of marketing can reverse. Binance claims hundreds of millions of registrations, OKX and Bybit each claim tens of millions, and Coinbase, as a public company, reports its numbers under penalty of law. Below that tier, a long tail competes for the remaining flow, and the competition is brutal because the economics are thin. Fees compress. Listing revenue shrinks. The only durable advantages left are regulatory standing, which requires licenses, and liquidity, which requires capital. A venue without either must manufacture a third advantage from narrative.
I do not cover the story; I follow the code. And in 2018, I followed the code of a virtual real-estate project whose ownership records were stored off-chain, without cryptographic proof, and I published a breakdown predicting a ninety percent token devaluation within six months. The project collapsed in three. The lesson I carried out of that episode was not that the founders were dishonest โ some were not โ but that a platform's willingness to let a claim be checked is the only signal that survives a bear market. Everything else, including sincerity, is unverifiable. XT's letter asks to be trusted. It declines to be checked. Those two things are not the same, and the gap between them is where this analysis lives.
Core: A Systematic Teardown
The vanity metric that replaced a business. The single hardest number in XT's letter is the twelve million registered users. It is also the least useful. Registration is a decision made in a moment, often driven by a promotional airdrop, a listing announcement, or a no-fee trading window; it is not a commitment to trade. A user who registers to claim a token and never returns is indistinguishable, in the headline figure, from a user who trades daily. The metric that describes a functioning exchange โ daily active users, monthly active users, average daily volume, depth at the top of the book, reserve size โ is entirely absent. What remains is a number designed to impress a reader who will never ask what fraction of those twelve million have logged in this month.
The ratio matters. Across the industry, the gap between registered accounts and active accounts is typically an order of magnitude or more. If even ten percent of XT's twelve million registrations were monthly active โ an optimistic assumption for a long-tail venue โ the active base would be roughly 1.2 million, a figure that would place it well below the top tier and, more importantly, below several competitors that do not bother to advertise their registration counts. The letter chooses the flattering number and omits the honest one. That is not a rounding error. It is the whole point.
Spread those twelve million accounts across two hundred or more countries and territories and the number becomes thinner still. It implies a per-market penetration so low that no single jurisdiction can be described as a home market. It implies a user base assembled from everywhere and anchored nowhere โ which is precisely the profile that generates the least reliable revenue and the most concentrated compliance exposure. A venue with twelve million registrations and no disclosed active-user figure is not telling you it is large. It is telling you it wants to be seen as large.
I have made this argument before. In 2022, I tracked fifty top-tier profile-picture collections and found that seventy percent of secondary sales were wash trades โ the same wallet selling to itself to manufacture the appearance of demand. Utility vanished before the mint even cooled. Registration counts and NFT sales share a common ancestor: both are vanity metrics, engineered to look like activity while remaining immune to the question of whether any value changed hands. The ledger remembers what the hype forgets, and in this letter, the ledger is a registration list.
The missing ledger: proof of reserves as an absence. Here is the paragraph XT's letter did not write. For a centralized exchange, the central technical question is not the speed of the matching engine or the breadth of the product menu. It is whether the assets the venue says it holds actually exist, and whether they exist in a form that can be returned to users on demand. That question is answered by proof of reserves โ a cryptographic commitment, usually built on a Merkle tree, that lets a user verify their balance is included in a solvency snapshot. The mechanism is simple in principle: the exchange hashes every account balance into a tree, publishes the root, and lets each user check that their leaf is present and that the sum of all leaves does not exceed the assets the venue actually controls. Done correctly, it is the closest thing this industry has to a balance sheet.
XT's eight-year anniversary letter does not mention reserves. It does not mention a Merkle root, a third-party attestation, a cold-storage ratio, or a monthly update cadence. It does not point to a proof page. For a venue that has operated through the FTX collapse, the Celsius freeze, and the slow-motion failures of a dozen second-tier platforms, this is not an oversight. It is a decision. The industry has spent three years making reserve transparency a baseline expectation; a venue that markets itself on trust while declining to meet that baseline has told you which side of the ledger it wants you to look at.
In 2024, I examined the custody arrangements of several issuers behind the newly approved spot Bitcoin products, and I found a two-hundred-million-dollar shortfall in one custodian's cold-storage verification. The discovery did not come from a press release. It came from reading the reserve reports line by line and noticing what the totals did not reconcile to โ a gap between the number on the page and the number the wallets could support. That investigation forced a third-party audit and exposed how thin institutional-grade crypto custody can be even when a regulated wrapper surrounds it. If a licensed custodian serving ETF products can carry a nine-figure reconciliation gap, the absence of any reserve disclosure from an unlicensed, offshore-facing exchange is not a neutral data point. It is the single most important thing the letter chose not to say.
There is a technical corollary worth stating. Proof of reserves is only as strong as its weakest component. A Merkle-tree commitment proves that the liabilities side of the balance sheet is internally consistent; it does not, by itself, prove that the assets side is real. That requires a separate attestation โ a third party confirming that the wallets the venue controls actually hold the coins the root implies. A serious reserve program publishes both: the cryptographic commitment to liabilities and the audited confirmation of assets. XT publishes neither. And so the question a user should be asking is not whether XT is solvent. It is why, after eight years and twelve million registrations, the venue has still not offered the means to find out.
Silence in the code is the loudest confession. The letter is warm. The ledger is silent. For a custodian, the second sentence is the only one that matters.
The regulatory silence of two hundred jurisdictions. XT says it serves more than two hundred countries and territories. It does not name a single license, a single regulator, a single registration, or a single home jurisdiction. There is no reference to MiCA, no reference to a US state money-transmitter regime, no reference to an Australian, Singaporean, or Japanese approval. The company's legal structure โ whether it operates through a foundation, a licensed entity, or a stack of shell companies โ is not described. For a financial intermediary, this is not a footnote. It is the load-bearing wall.
The regulatory posture of an exchange is a leading indicator of its operational durability, and the reason is structural. A venue with a clear home license has something to lose. It has a regulator who can revoke its permission to operate, fine it, or force it into remediation, and that constraint disciplines its behavior across every other function โ reserves, listing standards, marketing claims. The license is not merely permission; it is a governance mechanism. A venue that operates across two hundred jurisdictions while disclosing no licenses has, by construction, optimized for the absence of that mechanism. The phrase for this is regulatory arbitrage. It is not illegal. But it is a risk profile, and the profile belongs to the user, not to the platform.
The letter does contain one compliance artifact, and it is worth reading carefully. It notes that large withdrawals trigger a check to confirm the requester's identity. On its surface this is a positive signal: it means the venue has implemented at least a basic know-your-customer and anti-money-laundering gate. A venue with no KYC at all would be a far worse proposition. But read it again from the perspective of an account holder. The same control that verifies identity on the way out is also the control that can delay or block the way out. In ordinary conditions it is friction โ a few extra minutes and a document upload. In a stress event it is a circuit breaker that the platform, not the user, gets to pull. The disclosure of a withdrawal-review process is honest as far as it goes. It is also a quiet admission that, under pressure, exit is not guaranteed to be instant.
And the compliance surface is expanding, not shrinking. The letter gestures at a real-world-asset market and a TradFi exposure. If XT is genuinely building distribution for tokenized bonds and equities, it is moving into securities law, commodities law, and payment regulation simultaneously. XT Pay, if it operates at scale, would require money-transmission or payment-institution licenses in most major markets. None of these are mentioned. A venue that markets itself as serving two hundred jurisdictions while quietly entering three of the most heavily regulated business lines in finance has not reduced its risk. It has compounded it, and left the compounding undisclosed. In every jurisdiction where the venue operates without a license, the user's recourse in a dispute is not a regulator. It is a support ticket โ answered, if the letter is to be believed, by someone named Lily.
The team that has no name. The most revealing structural fact about the letter is who signed it. It is attributed to Lily, described as the head of key customer service. No surname. No biography. No founder, no chief technology officer, no head of risk, no board, no investors. For a company that claims eight years of operation and twelve million users, this is an extraordinary degree of anonymity. In a business built entirely on the custody of other people's money, the identity of the people holding it is not a courtesy. It is the first line of due diligence.
Compare the disclosure norms of the venues XT implicitly competes against. Binance, whatever one thinks of its regulatory history, names its leadership and publishes reserve attestations. OKX and Bybit publish proof-of-reserves pages and identify their executives. Coinbase is a public company with audited financials, a named board, and quarterly filings under securities law. XT, by contrast, offers a single first name attached to a support function. The gap between those two standards is not a matter of public-relations taste. It is the difference between an entity that has accepted accountability and one that has arranged not to.
The choice of spokesperson is itself a message. The anniversary is framed as a relationship milestone, not a corporate disclosure event. A chief executive would have to answer questions about reserves and licensing; a customer-service lead only has to talk about care. By elevating the support function to the front of the document, the letter performs a category substitution: it invites the reader to evaluate the venue on warmth, where the spokesperson is credible, rather than on solvency and licensing, where the venue has said nothing. The messenger was chosen to match the message.
There is a pattern here I recognize from my own work. In 2018, one of the earliest red flags in that virtual real-estate audit was not a line of vulnerable code โ it was the refusal to attach a verifiable identity to the promises. Anonymity is not proof of fraud. But it is proof that no one has accepted personal accountability for the claims being made. Eight years is a long time to run a financial intermediary without a named founder, and the longer the anonymity persists, the more deliberate it looks.
Product sprawl as following, not leading. The letter's product list reads like a checklist of 2024โ2025 industry themes: spot, margin, futures, RWA, TradFi, payments. Every one of these is a category the market's larger players defined first. Tokenized treasuries were scaled by established issuers and integrated by top-tier venues before the long tail noticed. TradFi exposure became a talking point after the spot ETF approvals. Payment gateways became fashionable after stablecoin settlement proved its utility in cross-border flows. XT's menu is a follower's menu โ comprehensive in coverage, derivative in origin. That is not disqualifying; most exchanges are followers. But it does mean the product list cannot be read as evidence of capability. It can only be read as evidence of ambition.
This matters because breadth is not the same as depth. A venue that lists a real-world-asset market but discloses no issuance volume, no partner, and no settlement data has announced an intention, not a business. A venue that advertises TradFi exposure without naming a single instrument, counterparty, or jurisdiction has advertised a direction, not a product. The letter is careful to keep every one of these claims at the level of the verb โ building, expanding, adding โ and never at the level of the noun, where a claim becomes checkable. That grammatical caution is not accidental. It is the same disclosure strategy the rest of the document follows, applied at the sentence level. In a sideways market, where every venue is hunting for a narrative that justifies its valuation, the temptation to list features faster than they are built is strongest. The letter is a specimen of that temptation, and it should be read as one.
The narrative transfer: moving the goalposts. The letter's intellectual core is a single proposition: that service is part of the product experience. Stated abstractly, the proposition is true. A trading venue that responds slowly, mishandles withdrawals, or ignores its users is a worse product than one that does not. No serious analyst would dispute it. And yet the proposition is deployed here for a specific purpose, and the purpose is the part that matters.
The move it performs is a substitution. It takes the dimensions on which XT is weak โ liquidity, brand, regulatory standing, reserve transparency โ and replaces them with a dimension on which no one can lose, because no one is keeping score. Service is the goalpost that moves whenever you approach it. There is no service-level agreement attached to the letter, no published response-time commitment, no satisfaction metric, no third-party audit of support quality. The claim that users have become more professional is presented as the reason service now matters. But it can just as easily be read in reverse: as a reframing of a competitive disadvantage โ an inability to win on liquidity โ as a rising customer standard. The same sentence serves both readings, and the letter does not disambiguate them.
This is what I mean by trading value for visibility. A venue that cannot show a reserve page shows a customer-service philosophy instead. A venue that cannot name a license names a service lead. The substitution is not a lie; every individual claim may be true. But the aggregate effect is to draw the reader's attention away from the checkable and toward the unfalsifiable, and in a custodial business, that is the direction that matters least. We traded value for visibility, and lost both โ and the letter is the receipt.
The venue's own choice of medium reinforces the read. The anniversary was distributed primarily through a Chinese-language audio space, which suggests a user base concentrated in Chinese-speaking markets despite the two-hundred-jurisdiction claim. That is not a criticism; regional concentration is a legitimate strategy, and localized support is a genuine advantage where it exists. It is, however, another piece of the picture the letter leaves blurry โ a global footprint asserted in the abstract, a regional audience addressed in practice. The document promises the world and speaks to a neighborhood, and the gap between the two is where the analyst should stand.
Contrarian: What the Bulls Got Right
It would be easy, and wrong, to read the letter as pure deception. The charitable case is stronger than it first appears, and I want to give it its due, because a one-sided teardown is not an analysis โ it is a prosecution.
First, survival is itself a signal. Eight years in an industry that has buried hundreds of venues โ including several that were larger and better funded than XT โ is not nothing. A platform that has operated continuously through the 2018 winter, the 2020 crash, the 2022 contagion, and the 2024โ2025 regulatory squeeze has demonstrated a form of operational resilience that a proof-of-reserves page does not capture. Custodians fail suddenly, but they rarely fail quietly for eight years. The longevity is a real, if modest, counterweight to the disclosure gaps, and it is the strongest single fact in the letter's favor.
Second, the service thesis is not cynical in the way I have framed it. For a genuinely long-tail venue, competing on responsiveness is a rational strategy rather than a rhetorical dodge. A user with a hundred thousand dollars to trade will not choose a second-tier exchange for its customer support โ but a user in an underserved market, dealing with a platform that speaks their language and answers their tickets, may well stay, and may well tell others. If XT's user base really is concentrated in Chinese-speaking regions, then localized support is a genuine moat of exactly the kind I argued for earlier: a barrier that competitors cannot quickly copy because it requires presence, not capital.
Third, and most importantly, the letter is not a substitute for disclosure โ it is an invitation to demand it. Nothing in the document is false. Registration counts can be defended. Service claims can be honored. The problem is omission, not fabrication, and omission is curable. A reserve attestation published next quarter would answer the loudest question. A named leadership team would answer the second. A single license in a single major jurisdiction would answer the third. The bulls' strongest argument is not that XT has earned trust, but that it has left the door open to earn it. That is a low bar โ but it is a bar, and it is one the venue can still clear.
What the letter gets right is that trust, in the end, is a relationship, not a spreadsheet. What it gets wrong is the order of operations. A relationship cannot substitute for a solvency proof; it can only be built on top of one.
Takeaway
So the question for anyone holding assets on XT is not whether the anniversary letter is warm. It is whether warmth is the asset they think they are holding. A custodian's promise is only as durable as the reserves behind it, and the letter, for all its length, did not put a single reserve on the page.
The ledger remembers what the hype forgets, and this quarter, the ledger is empty. Watch for the reserve page that is not there. Watch for the license that is never named. Watch for the founder who never speaks. A venue that publishes an anniversary instead of an attestation has told you, in the only language that survives a cycle, exactly what it is choosing not to say. The letter said everything except the things that can be checked โ and for a custodian, the things that can be checked are the only things that were ever being said.