A public blockchain is straightforward to audit. It is the documentation internal to an exchange which can be opaque.

If trading is done off-chain, or transactions are made between currencies, those are not a part of the blockchain. For bitcoin-only transactions between wallets, no exchange is required.