I'm planning to build a CEX that does not track IPs, requires no KYC, no fiat support, and no email verification. The main goal is to create a privacy focused exchange. However, we've recently seen authorities shutting down privacy coins and exchanges under the pretext of money laundering and terrorist financing.
I have a question for you.
If you build an exchange that doesn't store customers data, doesn't track IP, no email verification, no KYC etc. Then someone fraudulent decides to send a stolen or hacked coin into your exchange, how are you going to know about this action and stop it?
That is a matter of concern. We cannot detect who operates the account, but we always get the sender's wallet address. If they have exchanged coins to another coin, we have that data as well, and if they have withdrawn the newly exchanged coins, we have that wallet address too. The fact is that we have no information about who operates this account - no name, IP, or location.