$388M Gone and Everyone Learns Nothing About Keys

If you only remember one thing about this, make it this.

Bitget just watched $388 million walk out the door.

Hackers drained user funds, Circle and Tether scrambled to freeze the stolen stablecoins, and the same tired argument erupted for the hundredth time: should you hold your own keys or trust an exchange?

Here’s what nobody wants to say out loud. Both sides of the self custody debate are right. And both are dangerously wrong.

Exchanges get hacked. Mt. Gox lost 850,000 bitcoin. QuadrigaCX’s founder supposedly died with the only keys, taking $190 million with him. FTX imploded and took $8 billion in customer deposits. Now Bitget joins the list.

But self custody — holding your own private keys instead of letting an exchange hold them — comes with a different nightmare. Forget your seed phrase, and your crypto is gone forever. No password reset button. No customer service line. Just gone.

The numbers don’t lie on either side. Strip away the ideology and look at what actually happens.

What Actually Happened at Bitget

The attack hit hard and fast. Hackers compromised Bitget’s hot wallet — the portion of funds kept online for quick withdrawals — and drained $388 million worth of crypto before anyone could stop them.

A hot wallet is exactly what it sounds like: funds connected to the internet, ready to move. Exchanges need them because users demand instant withdrawals. The tradeoff is security. Keep too much in the hot wallet, and you‘re a target. Keep too little, and withdrawals slow to a crawl.

Circle and Tether froze a portion of the stolen USDC and USDT. That’s the safety net people forget about — stablecoin issuers can blacklist addresses and render those tokens worthless. But it only works when the hackers sit still. Move the funds to a decentralized exchange, swap them for other coins, and the trail goes cold.

Bitget says they’ll cover the losses. Maybe they will. FTX made similar promises before the bankruptcy filing.

Why Self Custody Sounds Better Than It Is

The argument for self custody is simple: if you hold your own private keys, nobody can take your crypto without physically stealing your hardware wallet or seed phrase. No exchange hack touches you. No platform meltdown wipes you out.

It’s mathematically correct. When you self custody, you control the private keys — the cryptographic passwords that prove ownership. The exchange holds nothing. They can’t lose what they don’t have.

But here’s the uncomfortable truth: most people are terrible at security.

Researchers estimate that roughly 20% of all bitcoin that will ever exist — about 3.7 million coins — is lost forever. Not stolen. Lost. People died without sharing their seed phrases. Hard drives got thrown out. Paper backups went through the wash. One guy famously threw away a hard drive containing 7,500 bitcoin, now worth over $300 million.

With self custody, you become your own bank. That means you also become your own IT security team, fraud department, and disaster recovery plan.

A hardware wallet — a physical device that stores your keys offline — solves part of the problem. Your keys never touch the internet, so remote hacks are impossible. Ledger and Trezor dominate the market, and for good reason. They work.

But they don’t solve the human problem. Lose the device and forget your 12- or 24-word recovery phrase? Gone. Write the phrase down and someone finds it? Also gone. Store it digitally and your cloud account gets hacked? You see where this goes.

Why Exchanges Sound Better Than They Are

Exchanges promise convenience and security. You get a password reset button. Two-factor authentication. Insurance funds. Professional security teams monitoring threats 24/7.

Then they get hacked anyway.

Or the founder runs a secret hedge fund with customer deposits. Or the exchange turns out to be insolvent and nobody noticed until withdrawals stopped. The list is long and expensive.

Coinbase holds insurance and follows U.S. regulations. Kraken has a solid security track record. But even the best-run exchanges create a single point of failure. When you deposit crypto, you’re trusting that the platform’s security is better than every hacker’s ambition. History suggests that’s a bad bet.

Most exchanges keep the majority of funds in cold storage — offline wallets that can’t be hacked remotely. But they still need hot wallets for daily operations. That’s where Bitget got hit. That’s where most hacks happen.

Which Risk Can You Actually Handle?

The question isn’t which option is safer in theory. It’s which failure mode you’re equipped to handle.

Self custody eliminates platform risk entirely. No exchange can lose, freeze, or misuse your funds. But you take on personal responsibility for security and disaster recovery. Forget your seed phrase or make one sloppy mistake, and there’s no undo button.

Exchanges eliminate personal responsibility. They manage the keys, handle security updates, and deal with threats. But you’re trusting them not to fail, get hacked, or implode. That trust has been broken repeatedly.

Risk Type	Self Custody	Exchange
Platform hack	Immune	Exposed
Lost keys/phrase	Fatal	Password reset
Platform insolvency	Immune	Full loss possible
Physical theft	Vulnerable	Protected by 2FA

For most people holding meaningful amounts, a hybrid approach makes sense. Keep trading funds on a regulated exchange with strong security. Move long-term holdings to self custody with proper backups — ideally a hardware wallet with your seed phrase stored in multiple secure locations.

Don’t keep everything in one place. Not all on exchanges. Not all in one wallet. Single points of failure are what make headlines like Bitget possible.

What Actually Changes After This?

Probably nothing, at least not immediately.

Every major hack triggers the same cycle. Outrage, promises of better security, calls for regulation, and then everyone moves on until the next one. Mt. Gox happened in . Ten years later, exchanges still get hacked.

The tools for self custody keep improving. Multi-signature wallets — which require multiple keys to authorize a transaction — reduce single points of failure. Social recovery options let trusted contacts help restore access if you lose your seed phrase. User interfaces get cleaner every year.

But the fundamental tradeoff remains. Convenience versus control. Trust versus responsibility. There’s no perfect answer because the risks point in opposite directions.

What you can control is understanding which risk you’re taking and whether you’re prepared for it. If you’re trusting an exchange, know that you’re betting on their security team and their solvency. If you’re holding your own keys, know that nobody can save you from yourself.

Bitget just reminded everyone what can go wrong when you trust the wrong platform. The lesson isn’t that one approach is always better. It’s that pretending the risk doesn’t exist is the actual mistake.

What happens to your crypto if an exchange gets hacked?

It depends entirely on the platform’s solvency and insurance. Bitget promised to cover losses, but FTX made similar claims before filing for bankruptcy. U.S. exchanges like Coinbase hold some insurance, but it typically doesn’t cover all user funds. In the worst cases — Mt. Gox, QuadrigaCX — users waited years for partial recovery or got nothing back.

Is self custody really safer than leaving funds on an exchange?

It eliminates platform risk but introduces human error risk. With self custody, exchange hacks can’t touch you. But roughly 20% of all bitcoin — 3.7 million coins — may be permanently lost due to forgotten keys and lost backups. The question isn’t which is objectively safer, but which failure mode you’re better equipped to prevent based on your technical skill and security discipline.

What’s the safest way to store crypto long-term?

For most people, a hardware wallet with your seed phrase backed up in multiple secure physical locations offers the best balance. Ledger and Trezor are the most trusted options. Write your recovery phrase on metal — paper degrades — and store copies in separate locations like a safe and a safety deposit box. Never store it digitally or take photos of it.