Why Self-Custody

Gerald Cotten died in December 2018, and the story his exchange told about his death became the story of everyone's money. QuadrigaCX, then Canada's largest bitcoin exchange, announced that its founder had taken the cold-wallet keys to the grave — roughly C$215 million owed to 76,000 customers, unreachable behind one dead man's laptop. Then the investigators looked. The cold wallets had been emptied months and years earlier; the Ontario Securities Commission concluded in 2020 that Cotten had been trading away customer funds all along and running the exchange like a Ponzi scheme. The customers never held bitcoin at all. They held a number in a database owned by the person spending their money — and that is what every custodial balance is, right up until the moment you test it.

Bitcoin is a bearer asset. Whoever can produce a valid signature over a coin can spend it, and nobody else can — the ledger recognises keys, not names, not court orders, not good intentions. This is the property everything else in this school flows from. When you hold the keys, ownership is a fact of mathematics. When an exchange holds the keys, your "bitcoin" is a row in their database: a promise to deliver, redeemable exactly as long as the promisor stays solvent, honest, and online. Those are different assets that happen to share a price.

The graveyard is the argument. Mt. Gox handled most of the world's bitcoin trade and collapsed in 2014 owing customers around 850,000 BTC, most of it long gone before anyone noticed. Celsius and Voyager marketed yield on deposits and froze withdrawals within weeks of each other in 2022, revealing the deposits had been lent into the same collapsing trade. FTX failed that November with an eight-billion-dollar hole where customer funds should have been, run — in the words of the man brought in to clean it up — with a complete failure of corporate controls. The pattern never varies: opacity while it works, a halted-withdrawals notice when it doesn't, and the discovery that "your" coins were rehypothecated long ago. You do not find out an exchange is fractional until the day everyone finds out together.

Honesty requires the other column. Self-custody does not delete risk; it relocates it — from the custodian's balance sheet to your own competence. Something on the order of three to four million bitcoin are estimated to be lost forever: seeds never backed up, backups burned or binned, passphrases that died with their owners. No hacker took most of those coins. Their owners simply failed a discipline they had never been taught. An exchange failure and a lost seed differ in one respect only — the second one was preventable by you.

That is why this school frames custody as a practice, not a purchase. You cannot buy your way to sovereignty with a gadget; the device is one component in a system that includes your backups, your passphrase decision, the machine you verify addresses on, the people who know what you hold, and the plan for the day you are not there. The curriculum walks that system in order: the hardware, the seed and its steel, the passphrase trade, airgapped signing, your own node, multisig quorums, the twelve documented ways holders actually lose coins, and the inheritance plan that makes the coins outlive you.

Start the way professionals start: small, and end to end. Move an amount you could afford to lose into your own keys, then rehearse the full cycle — receive it, back up the seed, wipe the device, recover from the backup alone, and spend a little back out. A backup you have never restored from is a hope, not a backup. Only when the whole loop has worked under your own hands do you scale it. By the end of this wing you will have done exactly that, with a checklist you can hold.