Self-Custody vs. Exchange Custody: Who Really Controls Your Crypto?

Every crypto holder eventually faces the same practical question: should coins sit on an exchange, or move into a wallet the holder controls directly? The answer determines who can move the funds, who can freeze them, and who is responsible when something goes wrong. This guide explains what custody actually means at a technical level, what has historically gone wrong when exchanges hold customer funds, what self-custody demands in return for that control, and how to think about splitting holdings between the two.

“Not your keys, not your coins”

Ownership of crypto is defined by control of a private key, a piece of cryptographic data that authorizes spending from a given address on the blockchain. Whoever holds the private key can sign transactions and move the funds; whoever does not, cannot. This is the literal meaning of the phrase “not your keys, not your coins”: if a private key lives on an exchange’s servers rather than in a holder’s own wallet, that holder does not have direct cryptographic control over the assets. Instead, the exchange maintains an internal ledger showing that a customer is entitled to a certain balance, and the exchange itself holds the keys that could move real coins on-chain.

This distinction rarely matters day to day. It becomes critical the moment an exchange cannot, or will not, honor a withdrawal request.

How exchange custody works

When crypto is deposited on an exchange, the coins typically move into wallets controlled by the exchange, often pooled together rather than kept in individually addressed accounts. The exchange’s internal database then credits the customer’s account with a balance. Trading on the platform generally just updates these internal figures; no on-chain transaction occurs until a customer withdraws funds to an external address. This model is what makes exchanges fast and convenient. It also means customers are, in effect, unsecured creditors of the exchange for as long as their assets remain on the platform.

What this arrangement offers

• Convenience. No need to manage seed phrases or hardware devices; a password and two-factor authentication are typically enough to access funds.
• Recoverability. Forgotten passwords, locked accounts, and some user errors can often be resolved through customer support, since the exchange retains control of the underlying keys.
• Liquidity. Funds already on an exchange can usually be traded immediately, without waiting for an on-chain transaction to confirm.

What has historically gone wrong

Exchange custody concentrates risk in a single institution, and that risk has materialized repeatedly across the industry’s history. Broadly, the failure modes fall into a few categories.

• Counterparty risk. When an exchange holds customer assets, customers are exposed to that exchange’s solvency, internal controls, and honesty, in addition to the market risk of the assets themselves.
• Insolvency. Exchanges have, at various points, become unable to honor withdrawals because customer assets were mismanaged, lent out, or otherwise not held one-to-one against balances shown to users. In bankruptcy proceedings, crypto customers have sometimes been treated as unsecured creditors, recovering only a portion of their holdings, and only after lengthy legal processes.
• Security breaches. Centralized pools of assets are attractive targets, and exchange hacks have resulted in customer funds being stolen from hot wallets or improperly secured infrastructure.
• Withdrawal freezes. Exchanges can pause withdrawals during periods of technical trouble, regulatory action, or liquidity stress, which can leave customers unable to access funds precisely when they most want to.

None of this means every exchange is unsafe, and reputable platforms generally invest heavily in security, insurance, and proof-of-reserves practices. It does mean that exchange custody is not equivalent to holding an asset directly; it is a claim on an institution, and that claim is only as good as the institution behind it.

How self-custody works, and its tradeoffs

Self-custody means generating and storing private keys independently of any exchange, typically inside a software or hardware wallet. Because the holder alone controls the keys, no third party can freeze the funds, restrict withdrawals, or become insolvent in a way that affects them. This is the property that draws many holders toward self-custody, particularly for long-term holdings of core assets like bitcoin or ether.

Control comes with responsibility that an exchange would otherwise absorb.

• No customer support for key loss. If a seed phrase is lost or a hardware wallet is destroyed without a backup, the funds are typically unrecoverable. There is no password reset for a private key.
• Irreversible errors. Sending funds to the wrong address, using the wrong network, or misconfiguring a transaction generally cannot be undone once it confirms on-chain.
• Personal security burden. The holder becomes responsible for protecting seed phrases from theft, fire, water damage, and phishing attempts, without an institution’s security team as backup.
• Reduced convenience for active trading. Moving funds on-chain to trade requires transaction fees (gas) and confirmation times that exchange-internal trades do not.

Self-custody trades institutional risk for personal risk. For a holder who manages it carefully, that trade can be favorable. For a holder unfamiliar with wallet mechanics, it can introduce new ways to lose funds that exchange custody would have prevented.

A practical framework for deciding

Neither approach is correct in all cases; the right split typically depends on how the funds are meant to be used.

• Active trading capital. Funds used for frequent buying and selling generally need to stay on an exchange for practical reasons, so the relevant question becomes which exchange, and how reputable and transparent its custody practices are.
• Long-term holdings. Assets not expected to move for months or years are strong candidates for self-custody, since the main risks being avoided (institutional failure, freezes) grow with time held on a platform.
• Amounts relative to comfort with technical risk. A holder new to wallets might keep a small amount in self-custody to learn the mechanics before moving larger sums, treating early transactions as practice rather than a test with meaningful funds at stake.
• Emergency access needs. Funds that may need to be sold quickly for cash generally belong on an exchange, since self-custodied assets must first be transferred and converted before use.

Many experienced holders end up with a blend: a working balance on a reputable exchange for liquidity, and the bulk of long-term holdings in self-custody. Reviewing an exchange’s stated custody and security practices before depositing significant funds is a reasonable part of that decision.

Middle-ground options

The choice between exchange custody and full self-custody is not strictly binary. Several intermediate structures exist for holders who want more control than an exchange offers without taking on the full burden of solo key management.

• Multi-signature wallets. A multi-sig setup requires multiple private keys, often held across different devices or people, to authorize a transaction. This removes the single point of failure of one lost or stolen key, at the cost of added setup complexity.
• Reputable third-party custodians. Some institutions specialize in custody alone, separate from trading, and typically publish audits, insurance details, and segregation-of-assets policies aimed at reducing the counterparty risk seen on general-purpose exchanges.
• Hardware wallets with inheritance or backup planning. Holders can self-custody while still reducing single-point-of-failure risk, for example by splitting a seed phrase across secure locations or using a hardware wallet’s built-in backup features.

These options do not eliminate risk; they reshape it. A multi-sig wallet still requires careful key management across every signer, and a third-party custodian still requires trust in that institution, just a narrower form of trust than a full-service exchange.

This article is for informational purposes only and is not financial advice.