What "not your keys, not your coins" leaves out

The slogan is right: a balance held by a company is a claim on that company, and history has repeatedly shown what that claim is worth when the company fails. What it leaves out is that self-custody does not remove risk. It replaces a risk somebody else manages with one you manage, and the second kind has its own failure rate.

What the slogan gets right

Custodial failure is not hypothetical, and it does not require a hack. Public filings from at least one large exchange disclose that custodially held assets could be treated as property of the bankruptcy estate, with customers ranking as general unsecured creditors — a sentence that exists because a listed company is obliged to state material risks, not because that company is worse than its private competitors.

There is a second problem the slogan captures well: you cannot verify what you cannot see. Of the 29 exchanges we researched for the exchange rating, only a minority publish a proof of reserves that includes total liabilities and carries a named third-party attestation. Everywhere else, your balance is a number in a company's database.

What it leaves out

Self-custody makes you responsible for three jobs that a custodian was doing, badly or well.

• Key management. A recovery phrase that survives a house fire, a house move and your own absence. Most self-custody losses are here, and none of them involve an attacker.
• Transaction review. Nobody will stop you approving a malicious contract. The most common drain in self-custody is a signature the owner gave voluntarily, on a page that looked right.
• Operational continuity. Firmware updates, device replacement, and a plan for what happens to the holdings if you cannot execute it yourself.

None of these is difficult. All of them are ongoing, and they are the part the slogan does not mention.

The failure modes are not symmetrical

Custodial failure is rare, correlated and total: it happens to everyone at that venue at the same time, usually without warning, and often with no recovery. Self-custody failure is more common, uncorrelated and usually partial: it happens to one person, frequently because of one avoidable decision, and it can often be contained by keeping balances separated.

That asymmetry is why the right answer for most people is not one or the other. It is a working balance at a custodian you have actually checked, and a long-term balance you hold yourself.

How to make self-custody survivable

• Use a device that shows you what you are signing. Coldcard Q tops our rating on exactly this, and cheaper devices in the same table do it too.
• Use a wallet that simulates transactions before you approve them. Rabby does this by default.
• Keep two balances, not one. Whatever you have at risk in daily on-chain activity should not be the same wallet holding your long-term position.
• Test recovery once before you rely on it.

Custodial failure is rare and total. Self-custody failure is common and usually avoidable. Neither of those sentences is an argument for doing nothing.

The short version

Keep the slogan, and add the second half: not your keys, not your coins — and your keys, your job. The right split is a small working balance with a custodian you can verify, and everything else under your own control with a setup you have actually tested.