Open app

NexFlow › Is Luno safe

Is Luno safe? The exchange that lent to its own sibling and still protected the customer

Luno's page is the Gemini Earn story with the opposite ending — and a wrinkle Gemini didn't have. When Genesis froze withdrawals in November 2022, Luno's Savings Wallet lent to it too — but Genesis was also Luno's sister company under Digital Currency Group. A related-party counterparty failed inside the same corporate family, and customers still lost nothing: Luno had taken steps so access would survive the freeze, then killed the product weeks later anyway. The fullest-filed 'counterparty risk inside the family' case in this corpus.

Updated September 28, 2026 · By the NexFlow editorial desk · Sources linked throughout; vendor claims labeled.

What Luno is

Luno (founded 2013 as BitX, rebranded 2016) is a London-headquartered custodial exchange focused on markets the big venues underserve — South Africa, Nigeria, Malaysia, Indonesia, Singapore, plus Europe. Digital Currency Group acquired it in 2020, which matters for everything below: DCG also owned Genesis Global Capital, the institutional lender at the center of the 2022 credit collapse.

Custody is standard custodial exchange — Luno holds keys, runs deep-frozen storage it describes as majority-cold — with a disclosure practice ahead of its tier: quarterly proof-of-reserves audits by Mazars, publicly verifying customer liabilities since well before the FTX era made the practice fashionable. No documented breach of Luno's custody layer is on record — over a decade of operation, a claim fewer of its tier-mates can make with a third-party auditor attached and a regional license file to match.

November 2022: the counterparty was family

Luno's Savings Wallet generated yield by lending customer coins — and its lending partner was Genesis. When Genesis suspended redemptions on November 16, 2022 (post-FTX contagion; it went bankrupt January 2023), the structure that makes this page distinct snapped into focus: Luno customers' yield depended on a counterparty that was not just a third party but a corporate sibling — the kind of arrangement the terms had actually been amended on November 1 to clarify — customers would lend to Luno, which could then lend on to Genesis, with terms expressly indemnifying Luno against a counterparty default. Fifteen days later the counterparty defaulted anyway; the indemnification papered the liability, not the risk.

Three things then happened that did not happen on the other pages of this family. First, customers retained access: Luno had 'previously taken steps' so savings funds would remain reachable 'in the event redemptions from Genesis are not possible' — and through the freeze, withdrawals platform-wide never halted — confirmed contemporaneously by regional management who reported no significant change in deposits, withdrawals, or volumes through the panic. Second, the company killed the product anyway: on December 1, 2022 the Savings Wallet closed, all coins plus earned interest moved to primary wallets — the exposure retired even though no customer had lost a cent. Third, the disclosure posture held: Luno's November 9 quarterly transparency report, including its proof-of-reserves, landed mid-crisis showing the platform's own books intact.

Why the same event ended differently here

The comparison is instructive because the input was identical — yield product, Genesis, November 2022 — and the outcomes weren't. Gemini Earn users spent ~18 months locked in a bankruptcy and recovered 100% in kind only through court process and regulatory enforcement. Luno Savings users kept access through the event and exited whole in weeks, because the platform had treated the related-party lending as a contingent liability it might have to absorb rather than a risk it could wave at a terms-of-service page — the quiet version of the same architecture decision that decided outcomes across this entire family.

Honest framing of that difference: it is partly design (Luno's steps to preserve access) and partly scale — the savings book was small relative to a solvent parent subsidiary able to backstop it. Either way, the recorded result is zero customer loss against a counterparty failure inside the same corporate family — the exact scenario 'is the venue safe' questions are really asking about.

The residual risks that remain

The record is not a blank check. The Savings episode documents that Luno will intermediate customer funds into related parties — terms that indemnify it against counterparty default existed, and users found the lending partner's identity — and its kinship to Luno's own parent — in fine print rather than headlines. Related-party lending inside one corporate group is a risk shape worth naming: it concentrates exposure, it conflicts the monitor, and in this case the monitor and the borrower answered to the same parent. The product line since carries fewer of those structures (the flagship one was retired), but the disclosure habit the corpus cares about — tell me who holds my risk — was learned here the way Gemini learned it: expensively, except Luno paid in a product line rather than customer losses.

Custody-side, the standard custodial caveats apply unchanged: no exchange breach on record, Mazars-verified reserves quarterly, and the standing truth that attestations evidence balances at a point in time rather than guaranteeing behavior on a bad day.

Where Luno stands

In the mid-tier cluster Luno is the quietest strong record: the only venue in this family that faced the Genesis collapse as a related-party event and delivered a zero-loss outcome, backed by audited reserves rather than assertions. The honest verdict shape is 'better record than its headline visibility suggests' — an exchange whose defining stress test is documented, dated, and passed.

Frequently asked questions

Has Luno ever been hacked?

No documented breach draining customer funds is on record — a clean custody file since 2013, plus quarterly Mazars proof-of-reserves audits it ran before the industry made them standard. What did happen was a product-counterparty event (the Genesis freeze, below) that customers exited without loss — which is a different thing than a hack and a better-documented one than most venues can show.

Did Luno lend customer funds to Genesis?

Yes — the Savings Wallet's yield came through lending that ran to Genesis Global Capital, Luno's sister company under DCG. When Genesis froze in November 2022, Luno customers kept access anyway (steps had been taken so savings funds would survive the freeze), and Luno closed the product December 1, 2022, returning all coins plus earned interest. Zero customer loss — the anti-Gemini outcome on the same counterparty.

Is Luno owned by Digital Currency Group?

Yes, since 2020 — which is what made its Genesis exposure a related-party arrangement rather than an arms-length one. The honest read: the corporate connection created the risk AND the backstop; the recorded result was customers protected through a sibling's bankruptcy. DCG's own 2023 distress never reached Luno's customer custody — Mazars' quarterly attestations ran through it.

Does Luno do proof of reserves?

Yes — quarterly attestations by Mazars, publicly verifying customer-asset coverage since 2021 — earlier than Kraken's AICPA attestations mainstreamed the practice for this tier. The standard caveat applies: a point-in-time verification that the books balance, not a guarantee about every future day — but as documented custody evidence it beats anything else in its peer set.

Is Luno regulated?

Registered/licensed in its core markets — South Africa (FSCA crypto-asset service provider license among the first issued), Malaysia (SC-registered), Indonesia, Singapore pathway, plus UK/EU registrations. It's a compliance-forward operator by regional standards; the meaningful caveat is that its licenses are strongest in the markets it actually serves — Luno's profile is regional-depth, not global-bluechip.

What happened to the Luno Savings Wallet?

Luno discontinued it December 1, 2022 — two weeks after the Genesis freeze — moving all savings balances plus earned interest to primary wallets. No customer lost funds in either event. The product's retirement is itself the honest signal: management looked at a related-party lending structure that had survived only because they'd hedged it, and removed the structure.

NexFlow is an educational risk tool, not financial advice. On-chain data can be incomplete or manipulated; a clean check is a dated snapshot, not a guarantee. Always do your own research. Free · no signup · a NexFlow product