Module 1 of 4
Why Self-Custody
The technical and philosophical case for holding your own keys, and the documented history of what happens when you don't.
Film · Not your keys, not your coins · 1:32
Block ———A short film for module 1 of Self-Custody: a bank deposit as the bank's IOU (Bank of England); Cyprus in 2013, when banks shut, cash machines were capped and uninsured deposits at one bank became its shares; an exchange balance as a claim on the exchange; a large exchange's collapse in 2022 and the court order that found customer funds commingled and misappropriated; a bitcoin as a chain of digital signatures, so whoever holds the key holds the coins; the first digital money you can hold yourself, with nobody's permission; the flip side, that lost keys mean lost coins; the course's next modules, multisig and its own risks; and fiat currency against bitcoin. It loops while on screen; use Pause to stop it. Turn on Narration to hear it explained aloud. A transcript follows.
Read the film, with its sources
- Self-Custody · Module 1 of 4Why Self-Custody. When someone else holds your money, what do you actually own? Bitcoin is the first digital money you can hold yourself; this module asks why that matters, and what it asks of you.
- Fiat currency in a bankStart with fiat currency in a bank. A deposit is not money kept in a vault with your name on it. The Bank of England describes bank deposits as “an IOU from commercial banks to consumers”, and its companion article explains that “bank lending creates deposits”. Your balance is the bank’s promise to pay you: a claim on the bank.McLeay, Radia and Thomas, “Money in the modern economy: an introduction”, Bank of England Quarterly Bulletin 2014 Q1, p. 7McLeay, Radia and Thomas, “Money creation in the modern economy”, Bank of England Quarterly Bulletin 2014 Q1, p. 14
- Cyprus, March 2013Promises can fail. In March 2013, to rescue its banks, Cyprus first proposed a levy on depositors, insured and uninsured. Parliament rejected it; the central bank declared a bank holiday on 18 March 2013, and banks did not reopen until 28 March 2013. At Laiki, cash machines paid out at most €260 a day. Deposits below €100,000 were protected; at Bank of Cyprus, 47.5 per cent of uninsured deposits over €100,000 were converted into the bank’s shares.European Commission, The Economic Adjustment Programme for Cyprus (May 2013)Eurogroup statement on Cyprus, 25 March 2013, 25 mar 2013ESM, FAQ on financial assistance for Cyprus (September 2013), 18 sep 2013
- An exchange accountAn exchange account works the same way. The balance it shows you is an entry in the exchange’s own ledger: a claim on the exchange, not bitcoin you hold. Whether the bitcoin behind it is there, and safe, rests on the exchange’s honesty, its solvency and its security.
- November 2022 → August 2024In November 2022 a large exchange collapsed. In August 2024 a US court order found that it had held customers’ assets, bitcoin among them, “in custody” while saying it kept them separate from its own, “when in fact customer funds were commingled and misappropriated”. The order requires $12.7 billion to be paid, $8.7 billion of it in restitution. Customers had believed they held bitcoin; they held a claim on a firm that had spent it.CFTC, Release 8938-24, 8 August 2024 (consent order, US District Court, SDNY)
- A chain of signaturesBitcoin works differently. The white paper defines a coin as “a chain of digital signatures”: each owner passes it on by signing it over to the next owner’s key. Only the matching private key can make that signature, so whoever holds the key controls the coins, and no one can move them without it.Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008), §2 Transactions
- Nobody’s permissionThat makes bitcoin the first digital money you can hold yourself. Cash and gold can be held too, but not sent across the world; bitcoin can, with no bank in between, as the white paper set out: payments sent directly from one party to another “without going through a financial institution”. The network’s nodes check the signature, not who you are.Satoshi Nakamoto, Bitcoin: A Peer-to-Peer Electronic Cash System (2008), abstract
- The flip sideThe flip side is responsibility. If you lose your keys, and every backup of them, the coins cannot be moved again: there is no bank to call, no password reset, and no one who can reverse a payment or recover it for you. The rule that keeps everyone else out keeps you out too.
- The rest of this courseThe rest of this course covers how: the kinds of wallet, keeping a seed phrase safe, and multisig, where spending needs, for example, 2 of 3 keys kept in different places, so one lost key is not the end. Multisig spreads the risk but has risks of its own: more steps to get wrong, falling below the threshold, harder for heirs, and without the wallet descriptor the seed phrases alone will not recover the wallet. Practise recovery with small amounts first. If it is more than you will maintain, that is a legitimate answer, and it should change what you keep in cold storage.BIP 11, “M-of-N Standard Transactions” (Gavin Andresen, 2011)BIP 380, “Output Script Descriptors General Operation” (Pieter Wuille and Ava Chow, 2021)
- Fiat currency and bitcoinFiat currency in a bank is a claim on the bank, and bitcoin on an exchange is a claim on the exchange. Bitcoin you hold the keys to is simply yours: you sign to spend it, and no one can freeze or move it without the keys. Keeping it safe takes care.
- The Bitcoin TransitionNot your keys, not your coins.
The Bitcoin network makes one guarantee: if you hold the private keys to an address, you control the funds at that address. No one can move them without your authorisation. No institution can freeze them. No government can seize them without first obtaining the keys themselves.
The inverse is also true. If someone else holds the keys, they control the funds. You hold a promise, not bitcoin. The distinction is the entire point of the protocol.
The Historical Record
The history of third-party custody in Bitcoin is a history of failure. It is worth reviewing because the pattern is consistent and the lesson is the same every time.
Mt. Gox (2014)
Mt. Gox was the dominant Bitcoin exchange from 2010 to 2014, at one point handling over 70% of all bitcoin transactions. In February 2014, the exchange suspended trading and filed for bankruptcy. Approximately 850,000 bitcoin — belonging to customers — were missing. The loss was attributed to a combination of theft, fraud, and inadequate security practices. Creditors waited over a decade for partial recovery.
QuadrigaCX (2019)
QuadrigaCX was Canada's largest cryptocurrency exchange. When its founder, Gerald Cotten, died in December 2018, the exchange claimed that only Cotten had access to the cold wallet keys. Approximately C$215 million in customer funds became inaccessible. Subsequent investigation revealed that the cold wallets had been empty for months. The funds had been used for personal trading and expenses.
FTX (2022)
FTX was the third-largest cryptocurrency exchange globally. In November 2022, it became clear that customer deposits had been lent to Alameda Research, a trading firm controlled by FTX's founder. The exchange filed for bankruptcy. Approximately $8 billion in customer funds were missing. The founder was subsequently convicted of fraud.
In each case, customers believed they held bitcoin. They held an entry in a database controlled by someone else. When that someone else failed — through incompetence, fraud, or death — the entry became worthless. The bitcoin, if it ever existed, was gone.
What Custody Actually Means
A Bitcoin wallet is not a container. It is a collection of private keys — cryptographic secrets that authorise transactions from specific addresses on the blockchain. When you "hold" bitcoin, what you actually hold is the key that can sign a valid spending transaction.
When an exchange shows you a balance, it is showing you their internal ledger. Whether the corresponding bitcoin exists on-chain, in a wallet whose keys the exchange controls, is a question you cannot verify from outside. You are trusting the exchange's solvency, honesty, and operational security.
This is precisely the type of trust Satoshi designed Bitcoin to eliminate.
The root problem with conventional currency is all the trust that's required to make it work.
Holding bitcoin on a custodian is a voluntary reintroduction of the problem Bitcoin was built to solve. For small amounts held briefly for trading, the convenience may justify the risk. For savings — for anything that represents your accumulated economic output — it does not.
The Practical Consequence
Self-custody is not an advanced technique. It is the default way Bitcoin is meant to be used. Everything else — exchange accounts, custodial wallets, lending platforms — is a simplification that trades sovereignty for convenience.
The remaining modules in this course cover the mechanics: what types of wallets exist, how to secure a seed phrase, and how to set up multi-signature custody for savings. Some of it is simple; multisig takes care and practice. All of it is important.