101 · Foundations · lesson 4 of 4
Not your keys, not your coins — why Bitcoin on an exchange isn’t yours
“Not your keys, not your coins” isn’t a slogan — it’s the hard-won lesson from every exchange that has ever collapsed with people’s money inside. Here’s what “custodial failure” actually means, why it keeps happening, and the one simple habit that takes you out of the blast radius.
When you buy Bitcoin on an exchange and leave it there, it feels like the money is in your account. But under the surface, the company holds the actual Bitcoin and you hold a number on their screen — a promise that they’ll give it to you when you ask. As long as the company is healthy and honest, that promise is good. When it isn’t, the promise is all you have.
A quick word: custodial means someone else holds your Bitcoin for you (an exchange, an app, a “we’ll keep it safe” service). Self-custody means you hold it yourself, with your own keys. This guide is about moving from the first to the second — and this page is the why.
What “custodial” really means: you own an IOU, not Bitcoin
Most of the time that’s invisible and fine. The problem shows up when the company gets into trouble: if it goes bankrupt, the law generally treats you as an unsecured creditor — which is a formal way of saying you stand near the back of a very long line, hoping to get back cents on the dollar, sometimes years later. Your exchange balance is not a bank deposit; it is not government-insured the way cash in a bank is. That’s not a scare story — it’s simply how these failures have actually played out.
The track record — so you know this is real, not paranoia
• Mt. Gox (2014) — once the biggest exchange in the world, lost about 850,000 Bitcoin belonging to its customers. Many are still waiting.
• FTX (2022) — a giant, heavily-advertised, “reputable” exchange that vaporized roughly $8 billion of customer money. Its founder was convicted of fraud.
• QuadrigaCX (2019) — the founder reportedly died as the only person with the keys, and customer funds were simply gone.
• Celsius, Voyager, BlockFi (2022) — “earn interest on your crypto” companies that took customers’ coins, made risky bets, and collapsed one after another.
Notice the pattern: some of these looked huge, trustworthy, even glamorous — right up until the morning withdrawals stopped. Size and slick marketing are not safety.
The ways a custodian fails
• It runs out of money. Many custodians quietly lend out or gamble with customer coins. If those bets go bad — or they simply didn’t hold as much as they claimed — there isn’t enough left to pay everyone back.
• Fraud or theft from inside. The people running it steal, lie about their reserves, or run off with the funds.
• It gets hacked. Because a custodian holds a giant pile of everyone’s coins in one place, it’s the single juiciest target on the internet.
• Your account gets frozen. Even a healthy company can lock your withdrawals — during a hack, a legal order, a compliance “review,” or a banking problem — and there’s nothing you can do but wait.
You can’t tell from the outside which, if any, of these is brewing. That’s the whole point: you can’t verify it, so you shouldn’t have to trust it with your savings.
The yield trap: “earn interest on your Bitcoin”
That makes you worse off than a normal customer, not better — you’re now first in line to lose your Bitcoin if their bets go wrong. Celsius, Voyager, and BlockFi all ran versions of this, and their customers learned the lesson the hard way. A good rule for a beginner: Bitcoin you hold yourself doesn’t pay interest, and that’s fine. If something promises a yield on your Bitcoin, treat it as a loan you’re making to a stranger, not as free money.
“Proof of reserves” is reassurance, not a guarantee
A proof of reserves usually shows some coins the company held at one moment in time. It typically does not show what they owe — their debts and obligations — which is exactly the number that sinks a failing exchange. A company can look well-stocked on the day of the snapshot and still be deeply underwater. So it’s fine to prefer an exchange that publishes one, but it is not a reason to leave your savings there.
What to actually do — the simple habit that removes the risk
• Buy, then withdraw. After you buy, move your Bitcoin off the exchange and into your own wallet, where you hold the keys. That one step is what this whole guide is about.
• Keep only what you’re actively using on any exchange — your savings belong in your own custody, not on a company’s books.
• Prefer a reputable, Bitcoin-only exchange for buying. The test is two-part: it sells only Bitcoin (no casino of other coins to gamble your deposits on), and withdrawing to your own wallet is a first-class feature, not a buried one. River, Swan, and Strike pass it. Skip anything promising interest or yield on your coins.
• Test a small withdrawal early. When you open a new account, pull out a little Bitcoin to your own wallet right away, so you know the exit works before real money is involved.
Do that, and it simply won’t matter to you which exchange makes tomorrow’s bad headline. Your Bitcoin isn’t there. It’s with you.
Anything sitting on an exchange is exposed to that exchange’s failure — and you can’t fix their failure after the fact. So the moment you’ve bought, move your Bitcoin off the exchange into your own custody. Keep only what you’re actively spending or trading on a company’s books; your savings belong with you.
- Remember the rule: money on an exchange is an IOU — the company holds the keys, you hold a claim.
- After you buy, withdraw your Bitcoin to a wallet where you hold the keys.
- Keep only what you’re actively using on any exchange; savings go into your own custody.
- Ignore “earn interest / yield” offers — that means lending them your coins and standing first in line to lose them.
- Treat “proof of reserves” as partial reassurance, not a guarantee — it rarely shows what a company owes.
- Prefer a reputable Bitcoin-only exchange for buying, and test a small withdrawal early so you know the exit works.
Check yourself
2 questions on what this lesson just covered. Nothing is scored, recorded or saved — it isn’t sent anywhere and it’s gone when you close the tab.
1You buy Bitcoin on an exchange and leave it sitting there. What do you actually hold?
Coins left on an exchange are an IOU. The exchange holds the keys; you hold a row in their database. That is why a bankruptcy, a hack, or a freeze can put your coins out of reach without anyone stealing anything — Mt. Gox lost roughly 850,000 coins, and FTX vaporised about $8 billion of customer funds.
2Which one of these actually means your Bitcoin is in your own custody?
Custody is about keys — not about a balance on a screen, and not about how solid the company looks. Proof of reserves shows that an exchange holds coins; it does not make any of them yours, and it says nothing about what it owes. If you cannot sign a transaction without asking someone’s permission, you are not in custody.
✓ Last verified: August 4, 2026