How Do Exchanges Typically Manage the Risk of RBF-enabled Deposits?
Exchanges typically manage the risk of RBF-enabled deposits by requiring a minimum number of confirmations before crediting the user's account. They will often wait for 3 to 6 confirmations, making it virtually impossible for the depositor to successfully double-spend the funds via RBF.
Additionally, some exchanges will monitor the mempool for RBF flags on incoming transactions and may reject or flag any transaction that is signaled as replaceable until it is confirmed.