Custody: Who Holds the Keys

Self-custody vs an exchange isn’t good vs bad — it’s a spectrum of control, convenience, and resilience, and the smart move is choosing the right point.

Crypto & Tokenization · Lesson 18 · 9 min read

You’ve heard “not your keys, not your coins” — so self-custody is the only true way, right? But you’ve also heard horror stories of people losing everything because they lost one phrase, with no recovery. So is the answer to hold your own keys, or to trust a company? Or is that even the right question? Hold it — custody is a spectrum, and the smart move is choosing the right point on it.

Custody is just: who holds the keys

There are two ends of a spectrum. Self-custody: you alone hold the keys — total control and censorship-resistance, but total responsibility (lose them and the funds are gone forever). Custodial: a company holds the keys for you — you get convenience and recovery (password resets), but you’re trusting their solvency and honesty, and what you hold is an IOU, not the coins themselves (lesson 2).

Neither is morally “right.” It’s a tradeoff of control vs convenience vs who bears the risk.

Beyond the binary: multisig, MPC, social recovery

Pure self-custody’s single-point-of-failure is brutal, so better tooling spreads the risk. Multisig requires several keys to approve a transaction (e.g. 2-of-3), so losing or leaking one key isn’t fatal — great for businesses, shared treasuries, and serious savers. MPC splits a key mathematically so no single device ever holds the whole thing. Social-recovery wallets let designated guardians help you regain access.

These keep most of self-custody’s control while removing the “one mistake and it’s gone” cliff.

A 2-of-3 multisig saving the day:
• A business holds its treasury in 2-of-3: three keys (CEO, CFO, a vault backup); any move needs 2.
• The CFO’s laptop is hacked and that key is stolen — in pure self-custody, that alone could drain everything.
• But one key can’t move funds; the thief needs 2 of 3. The business calmly rotates to fresh keys.
• Later the CEO loses their key in an accident — still fine: CFO + vault backup (2 of 3) recover the funds.
• Either a theft OR a loss of one key was survivable — exactly the cliff pure self-custody can’t absorb.

Matching custody to need — and the regulation reality

There’s no universally right answer: match the model to the amount and your situation — a custodian for convenience, small balances, or fiat on-ramps; multisig or hardware self-custody for serious long-term holdings. Most people sensibly use a mix.

Custody is also where regulation bites: custodians increasingly must follow licensing, KYC/AML, and consumer-protection rules — which add recourse and safety but reduce permissionlessness and privacy. That’s a real tradeoff to weigh, not a verdict to pronounce. And the verify-don’t-trust habit applies either way: with a custodian, check how they hold and prove reserves; with self-custody, check your own backup and recovery plan.

Choosing custody by the amount at stake:
1. You hold a little crypto for spending and to move in and out of regular money. A regulated custodian (an exchange) is convenient, recoverable, and the trust tradeoff is small relative to the amount.
2. You accumulate serious long-term savings. Now the custodian’s risks (freezes, insolvency, hacks) loom larger, so you move it to self-custody.
3. But a single key is a single point of failure, so you use a hardware wallet plus a 2-of-3 multisig with a backup key in a separate location.
4. Now neither one lost key nor one stolen key is fatal, and no company can freeze you.
5. You didn’t pick “self-custody” or “custodial” as a slogan — you matched each pot of money to the right point on the spectrum.