Self-custody vs the exchange.
Your coins never leave the chain. They were never in your wallet, and they were never inside the exchange either. A key signs, the chain records, and the only real question is who holds the key. This is the lesson I wish someone had drawn for me before I trusted a platform with more than I could afford to lose.
not advice · not a lawyer · just the mapI spent years inside banks. I watched who the system serves and who it bleeds. The whole point of this technology is that you can hold value nobody can freeze or print away, but that only works if you understand what you are actually holding. Most people never get told. So they leave everything on an exchange, call it "my crypto," and find out the hard way that it was an IOU the whole time.
There is no coin in the wallet.
A coin is not a file. It is not a token that sits somewhere and gets moved around. A coin is a row in a public ledger that every computer on the network keeps a copy of. The row says: this much value, controlled by whoever can produce a valid signature for this address.
Your private key is the thing that produces that signature. It is a very large secret number. It never touches the chain. When you "send" coins, you are not moving anything. You are signing a message that says "reassign this ledger entry to a new address," and broadcasting it. The network checks the signature and updates every copy of the ledger.
A wallet, then, is a keychain, not a vault. It holds keys, not coins. A seed phrase (usually 12 or 24 words) is the human-readable backup of those keys. Whoever has the seed can rebuild every key and sign for everything. That is the whole security model, and it is why "back up your seed" is not a nag, it is the entire game.
Both choices can cost you everything. Differently.
Crypto Twitter tells you self-custody is always right and exchanges are always evil. That is half the truth. Custody is a trade, and it cuts both ways. The failure modes are just different, so pick the one you can actually survive.
| Exchange (custodial) | Self-custody | |
|---|---|---|
| Who can freeze it | The company, a court, a hack, a bank-run halt on withdrawals | Nobody. It's a signature, not an account |
| If you mess up | Password reset, support ticket, sometimes a reversal | No undo. Wrong address or lost seed = gone |
| Counterparty risk | High. You're an unsecured creditor if they fail | None. No company between you and the coin |
| You-risk | Low. They handle keys and backups | High. You are the vault, the backup, and IT |
| Who you're trusting | A business's solvency and honesty | Your own discipline and your backup |
Self-custody does not remove risk. It moves the risk onto you. You trade counterparty risk for personal-responsibility risk. For a lot of people that is the right trade, because you can control your own behavior and you cannot control a CEO's. But if the honest answer is "I will lose the piece of paper," an exchange with good security may genuinely be safer for you than a hardware wallet you neglect. Know which person you are before you decide.
The receipts. Every one of these was "my crypto."
This is not fear-mongering, it is a public record. Every collapse below started the same way: users held a balance on a platform, called it theirs, and could not withdraw one morning. The dollar figures are real, the dates are real, and the part nobody mentions is how long the money was frozen even in the cases that ended well.
Mt. GoxThe one that taught the whole industry the phrase
By early 2014 Mt. Gox handled the majority of all bitcoin trades in the world. In February 2014 it halted withdrawals and filed for bankruptcy, saying roughly 850,000 BTC were gone, about 750,000 belonging to customers and 100,000 its own, around 7% of every bitcoin that existed. At the time that was worth roughly $450M. Today it would be tens of billions.
- About 140,000 BTC were later recovered from an old wallet.
- Repayments to creditors began in July 2024, a full decade after the collapse.
- The final repayment deadline has been pushed to October 31, 2026. Some creditors have waited twelve years.
The strange twist: because bitcoin rose so far over that decade, creditors who get repaid receive far more dollars than they lost, while getting back a fraction of the coins. They were unwilling long-term holders, locked in by a bankruptcy court, not by choice.
Celsius & Voyager"Earn interest on your crypto" — and the fine print
Voyager suspended all withdrawals on July 1, 2022 and filed Chapter 11 five days later. It had marketed accounts as effectively safe, and the FTC later charged that its claims of FDIC insurance were false. The initial in-kind distribution returned 35.72% of claims, with more depending on litigation over money owed by Three Arrows Capital and FTX.
Celsius froze withdrawals in June 2022 and filed Chapter 11 on July 13, 2022, owing users more than $4.7B. Here is the line that matters for this lesson: in January 2023 a bankruptcy judge ruled that roughly 600,000 "Earn" account holders had legally handed their crypto to Celsius, per the terms of service nobody read. That made them unsecured creditors, last in line. Celsius exited bankruptcy in January 2024 distributing around $3B in a mix of crypto and equity in a new mining company.
- The pattern in both: a friendly app, a yield number, and terms of service that quietly said the coins were now the company's.
- "Earn" and "interest" mean you lent them your coins. Lending is not custody. You became a creditor the moment you clicked yes.
FTX "paid everyone back 119%." Read the asterisk.
FTX is the headline people point to when they say the system works. A Delaware court approved a reorganization plan in October 2024, the estate recovered on the order of $16.5B, and roughly 98% of creditors were set to receive about 119% of their allowed claim, including interest. Distributions started in early 2025. That sounds like a happy ending, and for some it was.
Claims were valued in dollars at the November 2022 petition-date price. When FTX froze, bitcoin was near $16,000. It later ran past $100,000. So a customer who "held one bitcoin" on FTX got back the 2022 dollar value plus interest, not a bitcoin. They missed the entire run. Getting 119% of a number frozen at the bottom can mean recovering a fraction of what self-custody would have kept. "Made whole" in dollars is not "made whole" in coins.
FTX creditors did comparatively well because the estate clawed back enormous assets and crypto rallied into the recovery. That is luck and litigation, not a guarantee. Most people who lose money on a platform do not get a 119% court plan. They get 35%, or they get a decade of waiting, or they get nothing. Do not plan around being the lucky bankruptcy.
Now the honest other side. People lose self-custodied coins forever.
If I only showed you the exchange collapses, I would be selling you something. The same property that makes self-custody powerful, no company can freeze it, no one can reverse it, means no one can recover it for you either. A lost key is not a support ticket. It is a permanent hole in the supply.
| Who | What happened | How much |
|---|---|---|
| James Howells | Threw out a hard drive holding the private key while clearing his house in 2013. It sits in a Newport, Wales landfill. A UK court dismissed his final bid to dig in January 2025. | 8,000 BTC ~$700M+ |
| Stefan Thomas | Holds 7,002 BTC on an encrypted IronKey drive. He lost the paper with the password. The drive permanently self-encrypts after 10 wrong guesses. He has 2 tries left. | 7,002 BTC hundreds of $M |
| QuadrigaCX | Canada's biggest exchange said its founder died in 2018 as the only person with the cold-wallet keys, locking ~$190M. Investigators later found he had run it like a Ponzi. Both failures at once. | ~$190M CAD custodial + lost keys |
Blockchain-analytics firm Chainalysis estimates that between 2.3 and 3.7 million bitcoin are permanently lost, roughly 11 to 18 percent of the 21 million that will ever exist. Most of that was not stolen. It was self-custodied by people who lost a key, forgot a password, or died without leaving the seed to anyone. Self-custody without a backup plan is how a large chunk of all bitcoin left the economy for good.
Custody is a dial. Here are the four settings.
This is not exchange-or-nothing. There is a spectrum from "someone else holds everything" to "a quorum of keys you split up." As you move right you gain control and give up convenience, and you take on more of the responsibility yourself. Most people should hold different amounts at different settings.
Hardware wallets: what they stop, and what they don't.
A hardware wallet is not a USB stick that "stores your coins." Remember, coins live on the chain. It is a small computer with one job: generate a key, keep it inside, and sign transactions without ever letting the key out. The key is created on the device and never leaves it, even when you plug it into an infected laptop.
When you send, your computer builds the unsigned transaction and hands it to the device. The device signs it internally and returns only the signature. The key never touches the internet-connected machine. Crucially, the device has its own screen: it shows you the real address and amount it is about to sign, so malware on your laptop cannot silently swap the destination. You verify on the device, not on the computer.
The most common 2024–2026 drain is not a cracked device. It is a real owner of a real hardware wallet who signed a malicious approval on a fake site, or approved a transaction without reading the device screen. The hardware did its job, it showed the truth, and the human clicked through. Buy the device sealed and directly from the maker, and treat every "approve" prompt as the moment that matters.
Backup and inheritance. This is where the coins actually die.
Almost nobody loses coins to a cracked cipher. They lose them the boring way: the one backup was in the house that flooded, the seed was written on a sticky note that got tossed, or they died and no one else on earth knew the words. Self-custody without a durable, redundant backup is just a slower way to lose it.
- The seed is everything. 12 or 24 words that rebuild every key. Write them down offline, on paper or stamped metal. Never type them into a website, a photo, a cloud note, or a wallet that asks for your "existing seed" out of nowhere.
- Redundancy beats secrecy. One copy can burn or flood. Keep two or three, in separate physical places. Metal survives fire and water in a way a screenshot never will.
- Multisig and passkeys, 2026 options. Multisig (say 2 of 3 keys) means losing one key is not fatal and stealing one key is not enough. Newer "smart" wallets add passkey and social-recovery setups, hardware-backed keys on your phone plus trusted recovery contacts, so a normal person can self-custody without a single fragile seed. Convenience is closing the gap with safety, slowly.
- The inheritance question. If you got hit by a bus tonight, could someone you trust find and use the coins? QuadrigaCX lost $190M because one man died with the only keys. Write a plan: where the backups are, how the multisig works, who holds what. Sealed instructions with a lawyer, or a split of keys among people you trust. A key nobody else can ever find is functionally the same as a lost one.
The move. Boring on purpose.
You do not have to go all-in on either side. The sane version is a split you set once and stop renegotiating:
- Trading and cashing out: a reputable exchange, holding only what you are actively trading or about to move. Treat that balance as an IOU, because it is.
- Spending money: a hot wallet on your phone, small amounts, the way you'd carry cash. Assume a hot wallet can be compromised and never keep savings there.
- Savings: a hardware wallet, bought sealed from the manufacturer, seed backed up on metal in two places. This is the default home for anything you're not touching this month.
- Serious size: multisig, so no single lost or stolen key ends you, plus a written inheritance plan so the coins survive you.
Every exchange in the receipts section looked completely safe the day before it wasn't. The users who kept their coins were not smarter about markets, they just held their own keys and had a backup. Don't trust, verify. Hold your keys, back up the seed, keep on a platform only what you can afford to watch freeze.
Back to the crypto track → First wallet to first swap, then DeFi past the buzzwords. Everything we work out building in the open gets written down here. No paywall, no email gate.