Phemex review: a low-fee derivatives venue with a large 2025 hot-wallet theft, an Ontario sanction and no major-jurisdiction licence we could find.

Phemex publishes monthly Merkle-tree Proof of Reserves. A March 2026 Forklog review (a promotional piece with affiliate links) cites a February 1, 2026 snapshot with BTC at 137% (2,014 held against 1,468 owed), ETH at 149%, USDT/USDC at 113.7%, SOL at 147% and XRP at 140%, all company-reported. CoinGecko’s July 2026 report counts verifiable on-chain reserves of $278.4 million on June 1, 2026, down 14.4% from $325.4 million in January, mostly because of lower prices, but it does not describe the method or an auditor, and we could not confirm an independent one. Custody is described as over 70% cold multisig, about 22% warm with MPC key fragmentation and AWS Nitro Enclaves, and under 8% hot, with Fireblocks as MPC provider after the 2025 breach (company-reported via Forklog). No dedicated insurance fund is disclosed, and losses are said to be paid from company reserves. The incident record is serious. On January 23, 2025 attackers drained hot wallets across many chains at once. PeckShield counted about $69.1 million, other outlets said more than $70 million, Rekt put it above $73 million and later reports cited up to $85 million, so the figure is disputed; early estimates were $29 million to $37 million. Researchers suspected North Korea-linked actors, but we found no official attribution. Phemex suspended withdrawals, restored USDT and USDC progressively with manual review within about a day, and its CEO said in sponsored CoinDesk content that all user losses were covered and that some stolen funds were frozen (company-reported). Forklog notes the same group struck Bybit a month later.

Phemex has no major-jurisdiction licence that we could confirm. Ontario’s Capital Markets Tribunal found on December 18, 2024 that Phemex Limited (British Virgin Islands) and Phemex Technology Pte. Ltd. (Singapore) ran an unregistered crypto trading platform and distributed securities without a prospectus between November 25, 2019 and January 6, 2023, blocking Ontario IP addresses on January 7, 2023 after the regulator made contact. Investment Executive reported on June 16, 2025 that the tribunal imposed permanent bans, a $300,000 penalty, $135,000 in costs and US$39,712 in disgorgement, below the $500,000 penalty the Commission had sought. The tribunal also records that Phemex Limited began voluntary liquidation on August 24, 2023. Elsewhere, DataWallet (an affiliate-style site) says Phemex is registered as a US FinCEN money services business with no MiCA or FCA authorisation and is not licensed by Singapore’s MAS, and a competitor comparison (Bit2Me) says its Lithuanian subsidiary holds only a VASP registration and that Phemex was absent from ESMA’s MiCA register as of June 30, 2026; we treat the competitor claim cautiously. Phemex told The Record in 2025 it had approval to operate in the US, Canada, Turkey and Lithuania, which conflicts with its current restriction of those markets, so that claim is dated. Restricted regions include the US, UK and Ontario, with one source listing over 40 regions and fiat blocked in 46 jurisdictions. Press releases are datelined Apia, Samoa, while the user agreement reportedly points to Singapore law.

Phemex is cheap for derivatives. The base tier charges 0.10% maker and 0.10% taker on spot and 0.01% maker and 0.06% taker on USDT perpetuals (Phemex’s own blog, Forklog, Altrady and others agree). Holding the PT token gives a 20% discount on spot and 10% on futures, and the VIP programme has six tiers, with Phemex stating that a 0% maker rate needs about $380 million in monthly volume (via Forklog). Market-maker rebates reach 0.005%. On-chain trading carries a 1% fee, deposits and internal transfers are free, and withdrawal fees cited are 0.005 ETH and 1 USDT on TRC-20. Sources conflict on the old Premium subscription that gave zero spot fees ($9.99 for 30 days, $69.99 for a year, with 2021 limits of $1 million a day): CoinCodeCap still lists it, while Trade Reclaim says it was retired for 2026, so we do not count on it. We could not load Phemex’s live fee page, so confirm rates before trading.

Phemex is derivatives-first with wide coverage. Forklog and CoinCodeCap cite 600+ spot coins, CoinGecko lists 591 pairs, and other reviews say 250, 300 or 480, so counts are unreconciled. CoinGecko’s July 2026 report shows 58 new spot tokens and 106 new perpetual contracts between January and May 2026, 77 of the perpetuals tied to Ondo tokenised stocks (including pre-IPO names such as OPENAI and ANTHROPIC), though trading volume in them is small. TradFi perpetuals launched on February 6, 2026, and the company said they passed $10 billion in volume in their first month. Pre-market futures, COIN-M contracts, on-chain derivatives with up to 3x leverage and a prediction market powered by Polymarket (April 23, 2026) round out the range. Leverage reaches 100x on major pairs and 50x on altcoins, with spot margin up to 5x. Concentration is high: perpetuals averaged $1.69 billion a day against $0.70 billion for spot, and BTC/USD perpetuals held 62.8% of open interest in late May 2026.

The platform is built for active traders. Phemex announced a futures engine upgrade to 40,000 transactions per second on March 5, 2026 and an AI Bot on February 25, 2026 (both company-reported), with demo trading, six free bot types and copy trading alongside. TradingView charting is cited by one review, and fiat on-ramps run through partners such as Legend Trading according to Forklog. The weaker side is account access: reviewers describe blocked accounts, long 2FA unbinding delays and funds frozen after verification, and the interface is aimed at derivatives users rather than beginners.

Public feedback is poor. The Trustpilot pages we saw show a TrustScore of about 2.3 to 2.5 out of 5, labelled Poor, with 269 reviews on the Canadian page; counts and replies differ by regional page, and that page says Phemex has not replied to negative reviews while other regional pages show replies pointing users to support@phemex.zendesk.com. Recent complaints include a user locked out and emailing support seven times over three months about 2FA unbinding (May 2025), a disputed liquidation, and funds blocked on November 11, 2025 with support declining to release them. Praise exists too, mostly for fast live chat, and Phemex says support is available 24 hours a day. An older Cult of Money test reached a human in about a minute but found no phone support. Trustpilot reviews skew negative and cannot be verified, so we weigh them moderately.

Phemex offers a decent social and token ecosystem. Copy trading is available, with CoinCodeCap citing 17,000+ lead traders (unverified) and Forklog noting up to 20 master traders per user. There are six free bot types and the AI Bot, Earn products with promotional yields (USDT 5% APY up to 20,000 USDT, per Forklog), staking, Launchpool and on-chain trading on Solana, Base and BNB Chain. The PT token drives fee discounts, and staking it as vePT unlocks governance and Launchpad access. The company claims more than 10 million users (company-reported); CoinGecko’s report gives no user figures. Phemex also sponsors editorial content on major crypto sites, so some positive coverage is paid placement.