Custodial or self-custody: what are you choosing between?
Every holder of a crypto asset has answered this question, usually without noticing. It has no universally correct answer, and this course does not have a view on which you should pick. What it can do is describe precisely what each option is, and how each one fails.
Custodial: your balance is a claim
When an exchange, broker or app holds the keys, the assets are not yours on-chain. Your balance is a row in that company's database representing a claim against the company — enforceable in its jurisdiction, and ranked among its creditors if it fails.
What you get: password resets, two-factor recovery, a fraud team, familiar tax reporting, fiat rails in and out, and someone to escalate to. Deposits and withdrawals between two customers of the same firm never touch a blockchain, which is why they are instant, free, and — as Unit 2 noted — sometimes reversible.
What you carry: counterparty risk. Withdrawals can be paused. Accounts can be frozen for compliance reasons. Jurisdictions change rules. And you cannot verify from outside what actually backs the number on your screen. Proof-of-reserve exercises attempt to address exactly this and address only half of it — showing assets says nothing about liabilities elsewhere.
Self-custody: you hold the keys
What you get: no counterparty, no permission required, no freeze, no insolvency, and a balance anyone can verify on a public ledger.
What you carry: 100% of operational risk, with no recovery path. A lost phrase, a bad approval, a wrong network, a house fire. Everything in Unit 2 is your problem alone.
Hot and cold, and what cold actually protects
Within self-custody there is a second axis:
- Hot — the key sits on an internet-connected device: a phone app, a browser extension. Convenient, and exposed to malware, clipboard hijackers and malicious websites.
- Cold — the key is generated and kept offline. A hardware wallet stores the key in a dedicated chip and signs transactions inside the device; the key never reaches the computer, even if that computer is fully compromised. Air-gapped setups remove even the USB connection.
Now the caveat that matters more than anything else in this lesson, and it is why the safety unit came first:
A hardware wallet protects the key from being stolen. It does not protect you from authorising a bad transaction. The wallet-draining approval from Unit 2 is signed on the device just as happily as anywhere else — the device's job is to confirm that you signed, not to judge what you signed. Cold storage defends against one attack class. It is not a general safety guarantee, and no wallet or device is.
Both models have failed, differently
- Custodial: Mt. Gox (2014), Celsius and Voyager (2022), FTX (November 2022). In each case, customer assets were pooled and used, and the app balance was a claim rather than a holding.
- Self-custody: an unknown but large quantity of bitcoin is permanently unreachable behind lost keys — published estimates commonly land between 2 and 4 million coins, or roughly a tenth to a fifth of everything issued. There is no dispute process, no headline, and no register. The coins are simply visible and unmovable.
Custody fails when somebody else is dishonest or insolvent. Self-custody fails when you are careless or unlucky. Choosing is choosing which failure mode you are better equipped to prevent — and it is entirely reasonable for two informed people to answer differently.
Try it now
- For any crypto holding you have, or would consider, write down two answers: who holds the keys, and what happens if that entity stops answering email tomorrow. Most people have never written the second one down.
- On a block explorer, confirm that a self-custody address's balance is publicly verifiable by anyone. Then note that a custodial balance is not verifiable from outside at all — it is visible only inside the provider's app.
- A year of Bitcoin is below. Measure from its highest point to its lowest and read the percentage. That is the volatility both custody models sit on top of, and it applies whichever one you choose. Crypto assets are highly volatile, losses are common, and no custody arrangement changes that.