HitBTC: used only twice. Didn't have a problem but never trust the site since this is the only one that you can make transactions without google authentication. I have played with small amounts and make transaction if i had to ( sometimes some ico' appear only here. But i know that, they were selling tezos when there was a case about Tezos and no real tezos have been unlocked yet. Very shadey from my side.