Bitcoin Self-Custody vs Exchange Custody

Bitcoin ownership is ultimately enforced by control of valid signing keys. In self-custody, the user controls those keys directly or through a multisignature arrangement.

With exchange custody, the user has an account claim against the platform. The exchange controls the wallets and decides whether a withdrawal request is processed.

That is the core trade-off: direct cryptographic control versus delegated operational responsibility.

Dimension	Self-Custody	Exchange Custody
Private-key control	Holder	Exchange or its custodian
Withdrawal permission	Holder can sign directly	Platform must approve
Counterparty risk	Lower	Higher
Key-loss risk	Holder bears it	Platform manages keys
Recovery process	Must be designed by holder	Account recovery process
Convenience	Lower for many users	Higher
Security responsibility	High	Shared/delegated
Exposure to account freezes	Low at protocol level	Possible at platform level
Inheritance planning	Must be deliberately designed	May rely partly on account/legal process
Suitability for beginners	Depends on competence	Often easier operationally

Self-custody eliminates exchange insolvency as a custody risk, but it does not eliminate loss. A poorly stored seed phrase, compromised signing device, weak backup, malicious software, or failed inheritance plan can permanently destroy access.

Good self-custody is a process, not merely owning a hardware wallet.

The exchange becomes a critical counterparty. Security failure, insolvency, regulatory action, withdrawal suspension, internal fraud, or account compromise can prevent access even though the Bitcoin network itself is functioning normally.

Strong exchanges may use sophisticated institutional controls, but the customer still does not control the final signing keys.

Self-custody fits holders who understand key management and want direct control, censorship resistance, and reduced dependence on a single company.

The larger the balance, the stronger the case for documented procedures, multisignature design, geographic backup separation, and inheritance planning.

Exchange custody may be more practical for small balances, active trading, or users who would otherwise manage keys badly. Delegation can reduce personal operational error.

That convenience should not be confused with removing risk. It changes who bears the operational risk and what failure modes matter.

The choice is not always binary. Professional custodians can provide segregated storage, governance controls, insurance arrangements, and institutional reporting without leaving assets on a trading exchange.

For companies and fiduciaries, that distinction can be more important than the simple phrase "not your keys."

Security quality varies enormously within both categories. A sophisticated multisignature setup is not comparable to a seed phrase stored in a desk drawer, and a regulated institutional custodian is not comparable to every retail exchange. The analysis should focus on the actual control design.

Self-custody gives maximum control but also makes the holder responsible for protecting and recovering the keys. Exchange custody simplifies access but makes the platform a critical dependency. The best arrangement is the one whose failure modes the holder can understand, control, and recover from.