What Is the Primary Security Risk Associated with an Exchange Holding Private Keys for Physical Settlement?

The primary security risk is the "single point of failure" created by centralizing control over large reserves of cryptocurrency. The exchange becomes a massive honeypot, making it a prime target for hackers.

A successful breach of the exchange's hot or cold storage could result in the catastrophic loss of all underlying assets intended for physical delivery.