Most People Keep Crypto Where They Can’t Protect It

I’ve watched this exact setup play out before.

An exchange looks rock-solid. Trading volume is high, the interface is slick, customer support responds in under an hour. Then one morning, withdrawals are paused. A week later, the platform files for bankruptcy protection. Your coins—technically never yours—are locked in legal limbo while lawyers get paid first.

This year alone, $972 million has been lost to crypto hacks and exploits. Not all from exchanges, but enough that the self custody conversation has moved from paranoid cypherpunk circles to mainstream investor checklists. Emirates now accepts crypto payments through Crypto.com. Coinbase faces earnings pressure and trading slumps. Institutions are building custody solutions that didn’t exist five years ago.

The question isn’t whether exchanges can fail—we know they can. The question is whether you understand what you‘re trading away when you let someone else hold your keys, and whether that trade is worth it.

What Self Custody Actually Means

Self custody means you control the private keys to your crypto wallet. A private key is the cryptographic password that lets you move funds—if you have it, you own the asset. If someone else has it, they own the asset and you’re trusting them to give it back.

When you leave bitcoin or ether on Coinbase, Binance, Kraken, or any exchange, you don’t hold the keys. The exchange does. You have an account balance—a promise—but not the cryptographic proof. That’s why the old saying exists: “Not your keys, not your coins.”

With self custody, you use a hardware wallet (Ledger, Trezor, Coldcard) or a software wallet you control (Sparrow, Electrum, MetaMask if configured carefully). You write down a seed phrase—usually 12 or 24 words—that can regenerate your keys if your device is lost. That phrase is the master password. Lose it, and your funds are gone forever. No customer support can recover it.

Why Do People Still Use Exchanges?

Because convenience is a hell of a drug.

Exchanges offer instant liquidity, easy on-ramps from fiat, tax reporting integrations, staking yields, and—crucially—a “forgot password” button. For someone buying their first $500 of bitcoin, the idea of being solely responsible for a 24-word phrase that can never be reset sounds terrifying. And honestly, it should.

Regulated platforms like Coinbase carry FDIC insurance on USD balances (not the crypto) and maintain reserve audits. They invest in security infrastructure most individuals can’t replicate. Their UX is polished. You can trade in seconds, not wait for blockchain confirmations.

For active traders, keeping funds on an exchange makes operational sense—you’re not moving coins on-chain multiple times a day. Transaction fees and confirmation times would eat returns. But that’s a use case trade-off, not a storage strategy. If you’re holding long-term and still leaving everything on Coinbase, you’re choosing convenience over control without acknowledging the risk.

Keeping crypto on an exchange is like storing gold in someone else’s vault—efficient until the vault is locked, hacked, or regulated out of existence.

What Happens When an Exchange Fails?

You become an unsecured creditor in bankruptcy court. That’s the legal reality.

FTX collapsed in November . Users who held funds on the platform—some storing life savings, some parking trading capital—got a claim number and a years-long wait. No FDIC coverage for crypto. No immediate access. Withdrawals frozen overnight. The largest creditors and lawyers get paid first. Retail users get whatever scraps remain, if anything.

Mt. Gox went under in . Ten years later, creditors are still receiving partial payouts. Celsius, Voyager, BlockFi—same pattern. Custodial risk isn’t theoretical. It’s the most consistent way retail investors have lost money in crypto, after buying obvious scams.

Even if an exchange doesn’t collapse, it can freeze your account. Compliance holds, AML flags, disputed transactions, regulatory orders—your funds can be inaccessible for weeks or months while you argue with support tickets. Self custody eliminates that vector entirely. No one can freeze a wallet you control.

What Are the Actual Risks of Self Custody?

Let’s be honest: most people are bad at security.

They store seed phrases in Google Docs. They use the same passwords everywhere. They click phishing links, download fake wallet apps, or trust “customer support” scammers on Telegram. If you self-custody incorrectly, there’s no undo button. Send coins to the wrong address? Gone. Lose your seed phrase in a fire? Gone. Get tricked into signing a malicious transaction? Also gone.

Exchanges aggregate security risk—one honeypot for hackers—but they also employ security teams, bug bounties, and insurance policies. If Coinbase gets hacked and proves negligence, there’s a legal entity to sue. If you lose your Ledger seed phrase, there’s no one to call.

The real trade-off is this: self custody shifts risk from institutional failure to personal responsibility. For someone with strong operational security—metal backup plates, multisig setups, geographically distributed backups—that’s a clear win. For someone who barely remembers their email password, keeping a small amount on a regulated exchange might actually be the safer play.

Factor	Exchange Custody	Self Custody
Control	Platform holds keys	You hold keys
Bankruptcy risk	Unsecured creditor	No counterparty
Ease of use	High (password reset, support)	Low (no recovery if seed lost)
Speed of trading	Instant	Requires on-chain transfers
Regulatory freeze risk	High (KYC, AML holds)	None (censorship-resistant)
Personal security burden	Low (platform handles it)	High (you are the security)

So Which One Should You Choose?

There’s no universal answer, but there is a framework that makes sense for most people.

If you’re holding long-term—years, not weeks—and the amount is meaningful relative to your net worth, self custody is the move. Buy a hardware wallet, write down the seed phrase on metal, store it somewhere fireproof, and verify you can restore it before sending large amounts. That’s it. The setup takes an hour. The peace of mind lasts indefinitely.

If you’re actively trading or dollar-cost averaging small amounts, keeping working capital on a reputable exchange (Coinbase, Kraken, Gemini in the U.S.) is pragmatic. Just don’t let it pile up. Set a threshold—say, $5,000 or 10% of your stack—and sweep anything above that to cold storage quarterly.

If you’re new and terrified of responsibility, start small on an exchange while you learn. But treat it like training wheels, not the destination. The whole point of crypto is sovereignty—ownership without permission. Leaving it all on Coinbase forever is like buying a sports car and only driving it in the parking lot.

The mistake is thinking it’s binary. You can use both. Many experienced holders keep 5–10% on an exchange for liquidity and trading, and the rest in cold storage. That’s not paranoia. It’s just basic risk management—don’t put all your eggs in a basket someone else is holding.

What happens if I lose my seed phrase?

Your funds are permanently lost. No company, government, or hacker can recover them. That’s why seed phrase backups—ideally on metal plates stored in multiple secure locations—are non-negotiable. One user lost access to 7,002 BTC (worth ~$450 million today) because he forgot his password and exhausted his guess attempts. Self custody demands discipline.

Are hardware wallets really safer than exchanges?

Against exchange bankruptcy or regulatory seizure, yes—by definition. Against your own mistakes, no. A hardware wallet keeps your keys offline, immune to remote hacks. But if you get phished into signing a malicious transaction or lose your seed, the device won’t save you. Exchanges can reverse fraudulent transactions (sometimes). Hardware wallets can’t. It’s a trade between counterparty risk and operational risk.

Can I use self custody for assets other than bitcoin?

Absolutely. Hardware wallets support Ethereum, Solana, Polygon, and hundreds of tokens. MetaMask and similar software wallets work across chains. The principles are identical: control your keys, back up your seed phrase, verify addresses before sending. For NFTs and DeFi, self custody is even more common—most users interact on-chain directly, not through a centralized platform.