The phrase means that if someone else controls the private keys to a crypto asset, you do not control the asset — you hold a claim against whoever does. It emerged from a decade of exchange failures in which customers who believed they owned coins discovered in bankruptcy proceedings that they owned an unsecured claim instead.
As a warning about counterparty exposure it is accurate and it has been expensively validated. As a complete account of custody it is incomplete, because it collapses two separate questions into one. Who holds the keys is a technical question. What you own if the holder fails is a legal one. They vary independently, and arrangements that look identical on the first can be completely different on the second.
What the Phrase Actually Claims
The underlying point is about where an asset sits when an intermediary collapses.
A balance shown in an exchange account is a database entry recording what the exchange says it owes you. Whether that entry corresponds to assets held for you, assets pooled and deployed, or assets that no longer exist depends entirely on arrangements the interface does not show. In several large failures, customers discovered the answer during insolvency proceedings — a pattern covered in our piece on who holds your money.
Holding the keys yourself removes that exposure completely. It is the only arrangement in which no third party's solvency can affect whether you still have the asset.
Custody Is Two Decisions, Not One
Decision One: The Key Technology
How keys are generated, stored and used to sign transactions. The main approaches:
- Single key. One private key controls the asset. Simple, and a single point of failure in both directions — lose it and the asset is gone; expose it and so is the asset.
- Multisignature (multisig). Several keys exist and a threshold must sign. Enforced on-chain by the protocol itself, visible to anyone, and the standard for treasuries that want transparency.
- Multi-party computation (MPC). A single key is split into shares held separately, and signatures are produced collaboratively without the whole key ever existing in one place. No on-chain footprint, which means lower fees and more privacy, and it has become the common institutional default.
- Hardware security modules and cold storage. Keys held in tamper-resistant hardware, usually offline. The standard for long-term reserves.
Decision Two: The Legal Arrangement
Who, in law, owns the asset — and what you hold if the holder fails. This is the question that determines outcomes in an insolvency, and it is independent of the technology above.
A provider can run exactly the same MPC infrastructure under two completely different legal arrangements: as a service where the client retains ownership, or as a custodian holding assets on its own book. The cryptography is identical. The outcome in a bankruptcy is not.
This is why "who holds the keys" is only half the question, and why the answer to the other half is usually buried in terms rather than displayed in a product description.
Four Arrangements, Compared
| Who controls keys | What you hold | Main risk | Typical use | |
|---|---|---|---|---|
| Self-custody | You | The asset itself | Key loss, operational error, theft | Long-term holdings, individuals, treasuries |
| Exchange custody | The exchange | Depends on terms — often a contractual claim | Operator insolvency, commingling, rehypothecation | Active trading, derivatives collateral |
| Qualified custodian | A regulated custodian | A property interest in segregated assets | Custodian failure, sub-custody chains, regulatory scope | Regulated funds and advisers, institutional mandates |
| MPC / collaborative | Split across parties | Varies by contract — may be either of the above | Provider dependency, recovery complexity, unclear legal treatment | Operational balances, settlement, institutional workflows |
The fourth row is where the two decisions most visibly come apart. MPC arrangements are frequently marketed as self-custody because no single party holds a complete key. Whether that is true in the sense that matters depends on the contract, not the cryptography.
What Regulators Require
Where custody is regulated, the rules target the legal arrangement rather than the technology — which is itself informative about which one determines outcomes.
New York's Department of Financial Services issued guidance on custodial structures for customer protection in the event of insolvency that sets out what a regulated custodian must do: segregate and separately account for customer assets apart from corporate assets, both on-chain and on internal ledgers; take possession only for the limited purpose of custody and safekeeping; obtain approval before using sub-custodians; and disclose clearly what property interest the customer retains.
The Distinction a Regulator Drew Explicitly
The most significant line in that guidance is that a custodian taking possession of customer assets must not establish a debtor-creditor relationship with the customer.
That is the entire distinction, stated by a regulator. A debtor-creditor relationship means the customer is owed something and joins the queue if the firm fails. A custodial relationship means the customer still owns the asset and the firm is merely holding it. Two arrangements that look identical in an app, with opposite outcomes in an insolvency.
Other jurisdictions reach similar conclusions by different routes. Japan requires operators to manage and preserve customer assets separately from company assets, with fiat held in third-party trust — a requirement whose practical effect during the 2022 failures we examined in our piece on proof of reserves. The EU's framework requires service providers to safeguard client holdings and keep them separate from their own. The common thread is segregation and the denial of a creditor relationship, not any particular key technology.
Where Self-Custody Stops Working
Self-custody removes counterparty risk and replaces it with two others.
Key management risk is permanent and unforgiving. There is no password reset, no fraud department and no recovery process. Operational error is final, and the burden does not diminish over time.
Certain strategies become impossible. A delta-neutral funding position requires a short perpetual futures position, and that requires collateral posted at the venue running the contract. The hedge cannot be constructed from cold storage, which means any strategy earning from derivatives markets necessarily accepts venue exposure. We set this out in our delta-neutral strategy overview.
The honest framing is not that one model is safe and another is not. It is that custody is a choice about which risks you are better placed to manage — your own operational discipline, or someone else's solvency and the legal arrangement governing it.
The Attack Surface Has Moved
One pattern is worth noting because it changes what diligence should focus on.
As key-management cryptography has hardened — threshold signing, hardware isolation, distributed shares — the practical attack surface has shifted upward, to the interface and governance layer: how transactions are proposed and displayed, who approves them, what the signer actually sees, and how the approval workflow is controlled. The largest crypto theft recorded to date, in early 2025, was widely described as a failure of a multisig arrangement, though analysis of the incident has centred on the signing and approval process rather than on the cryptography itself.
The implication for anyone evaluating a custody arrangement: comparing cryptographic models tells you less than examining how approvals actually work.
Questions to Ask About Any Custody Arrangement
- Who holds the keys, and in what form — single, threshold, split shares, hardware?
- What do I legally own — the asset, a property interest in segregated assets, or a contractual claim?
- Is there a debtor-creditor relationship? If the terms create one, you are a creditor regardless of what the product is called.
- Is there segregation, and is it on-chain, on the ledger, or both?
- Are sub-custodians used, and are they disclosed?
- Who approves transactions, and how — the governance layer, not the cryptography.
- What jurisdiction governs it, and what does that regime require?
Frequently Asked Questions
What does "not your keys, not your coins" mean?
That if a third party controls the private keys to a crypto asset, you hold a claim against that party rather than the asset itself. If they fail, your recovery depends on their solvency and on the legal arrangement governing the holding.
Is a qualified custodian the same as self-custody?
No. A qualified custodian is a regulated entity holding assets on a client's behalf under rules requiring segregation and separate accounting. The client does not control the keys, but typically retains a property interest in segregated assets rather than a creditor claim — which is a materially different position from an unsegregated exchange balance.
What is the difference between multisig and MPC?
Multisig uses several distinct keys with a threshold enforced on-chain by the protocol, making it visible and auditable. MPC splits a single key into shares held separately and produces signatures collaboratively, so the complete key never exists in one place and nothing distinctive appears on-chain.
Can you self-custody and still trade derivatives?
Not for the position itself. Derivatives require collateral posted at the venue running the contract, so any strategy earning from derivatives markets accepts venue exposure by construction. Self-custody can apply to assets held outside those positions.
Does holding keys yourself remove all risk?
It removes counterparty risk and replaces it with key management risk, which is permanent and has no recovery mechanism. Operational error, loss or theft are final.
Control and Claim Are Different Things
The slogan survives because its core warning is correct: a balance in someone else's system is a claim, and claims are only as good as the entity behind them and the law governing it.
What it does not capture is that claims differ enormously. A segregated property interest with a regulated custodian and an unsegregated balance with an offshore operator are both "not your keys" — and they are not remotely the same position. The useful question is not only who holds the keys, but what you own when something goes wrong, and which rulebook decides.
This article is published for informational purposes and does not constitute investment, legal or tax advice, or an offer to transact. It describes custody arrangements and regulatory requirements generally and does not assess any specific provider or venue. Regulatory treatment differs by jurisdiction and changes over time. Capital is at risk.
This article is for information only and is not investment advice. Past performance does not guarantee future results.
