If a Bitcoin custodian fails, freezes withdrawals, or is hacked, you can lose immediate access to your coins and may not recover all of them. Bitcoin held by a non-bank custodian is generally outside FDIC deposit insurance, and SIPC generally does not protect claims for non-security crypto assets. Your recovery depends on the custody contract, whether coins and records were segregated, the custodian’s security and insurance, the legal proceeding, and whether the assets can be traced.
What can happen in each scenario
“Custodian” covers an exchange, wallet provider, trust company, broker, or other intermediary that controls the private keys or withdrawal process for you. The practical result differs depending on whether the problem is insolvency, a temporary suspension, or a security breach.
As an Amazon Associate I earn from qualifying purchases.
The custodian fails or enters bankruptcy
A failed custodian may stop withdrawals, close its platform, appoint a receiver, or enter a bankruptcy case. Your account balance is then a claim governed by the custody agreement and applicable insolvency law, not an automatic promise that the same bitcoins will be returned immediately. If the custodian kept identifiable customer coins separate from corporate assets, maintained reliable ownership records, and has a workable wind-down process, customers generally have a stronger basis for seeking return of those assets. Those safeguards improve recovery prospects but do not guarantee a quick or complete distribution.
Recommended Free Tools
If customer coins were commingled, lent out, pledged as collateral, or used in other transactions, the estate may not hold enough immediately available bitcoin to satisfy every account. The value and timing of a distribution can also be affected by court orders, competing creditors, asset tracing, and the costs of administering the case.
#1 Best Overall
- BITCOIN EXCLUSIVE, PHONE VERIFICATION: Bitkey is designed from the ground up exclusively for bitcoin — a dedicated hardware wallet for secure bitcoin storage. Approve transactions with a tap using your phone and NFC. No device screen is required.
- SELF-CUSTODY, NO EXCHANGE OR CUSTODIAN REQUIRED: You hold two of the three keys in the Bitkey system – one on your phone and one on your Bitkey device. The third is stored on Bitkey’s server and cannot move your bitcoin on its own.
- NO SEED PHRASE: Set up and use Bitkey without creating or storing a seed phrase.
- 2-of-3 MULTISIG: Three keys are stored separately across your phone, Bitkey device, and Bitkey’s server. Any two keys are required to move your bitcoin.
- BUILT-IN RECOVERY: Encrypted backup and recovery tools can help you regain access if you lose your phone or Bitkey device. You can also designate a Recovery Contact.
Withdrawals are frozen
A withdrawal freeze blocks or delays transfers. It can be caused by a liquidity shortfall, an operational failure, a compliance review, a legal order, a blockchain outage, or an investigation of suspicious activity. A freeze is a warning about access and liquidity, but it does not by itself prove that bitcoin was stolen. The key questions are whether the custodian still controls the coins, whether customer liabilities are fully recorded, and whether the stated reason and timetable are credible.
SEC disclosure guidance identifies suspended withdrawals, excessive redemptions, unaccounted-for customer crypto, commingling, and rehypothecation as material risks. A platform that cannot explain which of these conditions applies leaves you unable to assess when, or whether, access will be restored.
The custodian is hacked or private keys are compromised
A successful attack can transfer bitcoin to an attacker, destroy or expose key material, corrupt account records, or force the custodian to halt all transfers while it investigates. Even if the custodian identifies the theft, recovery depends on whether the coins can be traced, frozen by a downstream service, recovered from the attacker, or covered by a policy that actually applies to the incident.
Rank #2
- Unparalleled Security: Protect your assets NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Rest assured with Multi-share Backup, eliminating single points of failure for secure cold wallet recovery
Key-management controls matter before an attack occurs. SEC custody materials call for written policies protecting private keys against theft, loss, and unauthorized or accidental use, plus plans for blockchain failures, 51% attacks, hard forks, lawful freezes, and transfer to a trustee, receiver, or liquidator if the intermediary fails. Multisignature cold storage in an offline, air-gapped environment is one control described in an SEC-filed prospectus; it can reduce online attack exposure but cannot remove every insider, governance, or recovery risk.
Does FDIC or SIPC cover Bitcoin?
FDIC insurance
FDIC deposit insurance protects eligible deposits at insured banks. It does not insure bitcoin held with a non-bank exchange, wallet provider, or other crypto custodian, and it does not make a failed crypto platform’s obligations equivalent to bank deposits. The FDIC states: “FDIC insurance does not protect against the default, insolvency, or bankruptcy of any non-bank entity, including crypto custodians, exchanges, brokers, wallet providers, and neobanks.”
If a bank provides a service connected with crypto, the insurance question still depends on what asset you own and where an eligible deposit is held. A statement that a platform uses banking partners is not, by itself, proof that your bitcoin balance is an insured deposit.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
SIPC protection
SIPC protection is tied to customer claims for securities held by a SIPC-member broker-dealer under the Securities Investor Protection Act. SEC staff says: “No. In general, SIPC protection extends to customer claims for ‘securities,’ as defined under SIPA, that are entrusted to a SIPC member broker-dealer.”
For ordinary bitcoin treated as a non-security crypto asset, SEC staff says it is not protected by SIPA and may not be protected by another specific insolvency regime. The staff warns that customers may be exposed to loss of those assets if the intermediary becomes insolvent. Whether a particular product involves a security, a broker-dealer, or a different legal structure requires reading its terms and the applicable law; do not infer SIPC coverage from the presence of a trading interface.
Private crime, specie, or cyber insurance
A custodian may buy crime, specie, cyber, or other commercial coverage. That is different from FDIC or SIPC protection. Check the policy’s aggregate limit, deductible, exclusions, sublimits, geographic scope, required security controls, and whether customers are insured beneficiaries or only claimants against the custodian. A policy can cover a defined theft event while excluding employee fraud, a key-management failure, an insolvency shortfall, network events, or losses above the aggregate limit. Coverage is meaningful only to the extent the policy responds to your specific wallet arrangement and the actual incident.
Rank #4
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
Why some customers recover more than others
The custody contract
Read the agreement for the legal characterization of your bitcoin. It should explain whether the custodian holds assets for your benefit, whether you receive a property interest or only a contractual payment claim, which law governs, and what happens during a freeze, bankruptcy, receivership, or transfer to another custodian. Clauses allowing lending, pledging, rehypothecation, netting, or use of customer assets can materially change the risk.
Segregation and on-chain records
Segregation means customer assets are separated from the firm’s operating property and can be identified. Stronger arrangements may include dedicated client accounts, on-chain segregation, wallet addresses mapped to customer records, and reconciliations that show liabilities match assets. These are provider-specific promises, not industry-wide guarantees. Ask how often balances are reconciled, who can alter ownership records, and how a receiver would obtain the wallet and transaction data needed to return coins.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchTraceability and proof of ownership
Blockchain transactions are public, but an address alone does not prove which customer owns a balance. Keep deposit addresses, withdrawal addresses, transaction IDs, dated statements, tax records, and the custody terms in your own files. During an insolvency or hack, a complete record can help connect your account to a specific liability or transaction history.
Best Value
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Rehypothecation and collateral
If a platform lends, pledges, or otherwise reuses customer bitcoin, the coins may be unavailable when many customers request withdrawals. SEC guidance treats these arrangements and their liquidity effects as material risks. A “yield” or lending feature should therefore be evaluated as a different risk category from simple custody, even when it appears in the same account.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What to check before choosing a custodian
- Identify the legal entity and status. Determine whether you are dealing with a bank, trust company, broker-dealer, exchange, or another type of provider. Find the governing law, regulator, venue for disputes, and insolvency process that would apply to your account.
- Read the ownership and wind-down terms. Look for language stating that coins are held for customers, explaining segregation, and describing return of assets if the firm fails. Note any right to lend, pledge, rehypothecate, or net balances.
- Verify records and segregation. Ask whether holdings are segregated on-chain, whether client accounts are separate from corporate wallets, and how often assets are reconciled to customer liabilities. Obtain a clear explanation of how a receiver could identify your coins.
- Examine key management. Ask where keys are generated and stored, whether storage is cold or air-gapped, how multisignature approvals work, how many signers are required, and how insider compromise or a lost signer is handled.
- Read the insurance schedule. Confirm the covered events, limits, deductibles, exclusions, policy period, and whether the customer is an insured beneficiary. Do not treat a general statement that assets are insured as proof that a specific wallet or account is covered.
- Review continuity procedures. The provider should explain what happens after a hack, chain outage, hard fork, legal freeze, bankruptcy filing, receiver appointment, or transfer to a replacement custodian. Look for tested procedures rather than only broad assurances.
- Check withdrawal and collateral rules. Understand daily limits, review delays, maintenance procedures, and whether the provider can suspend transfers. Determine whether your bitcoin is ever lent, pledged, or reused.
What to do when withdrawals are frozen
- Preserve evidence immediately. Export account statements and save deposit and withdrawal records, wallet addresses, transaction IDs, custody agreements, fee schedules, emails, and support tickets. Keep copies outside the affected account.
- Classify the event. Check the provider’s official status page, notices, and regulator communications. Determine whether the suspension is scheduled maintenance, a chain-wide incident, a legal order, a liquidity suspension, or a security investigation. Avoid relying on screenshots or social-media posts that cannot be authenticated.
- Protect credentials without creating a second incident. Change passwords through the verified official site, enable strong multifactor authentication, and review API keys and login sessions. Never disclose a seed phrase, private key, one-time code, or recovery code to support staff.
- Separate unaffected assets carefully. If another asset or account remains available, move it only after independently verifying the destination address and confirming that the transfer is not part of the incident. A rushed transfer to an address supplied by an impersonator can turn a freeze into a theft.
- Watch for formal proceedings. If insolvency, receivership, or liquidation is announced, follow the court, trustee, or receiver instructions and meet every claims deadline. Record the account balance and valuation method used at the relevant date.
- Treat recovery promises as unconfirmed. Do not assume that a proposed insurance payment, token distribution, restructuring, or “recovery” service will deliver value until the custodian, insurer, trustee, or court documents it. Scammers often target customers during a crisis.
How to compare custodians’ failure protections
| Comparison area | Questions to ask | Why it matters after a failure |
|---|---|---|
| Legal and regulatory status | What entity holds the assets, under which law, and in what insolvency forum? | Determines whether you have a property claim, a contractual claim, or a claim under a specialized regime. |
| Segregation and records | Are customer wallets or accounts segregated and reconciled to liabilities? | Clear ownership records can make tracing and distribution easier. |
| Key architecture | Are keys offline or air-gapped, and do transfers require multisignature approval? | Reduces some theft and single-point-of-failure risks. |
| Insurance scope | What events, wallets, limits, deductibles, and exclusions apply, and are customers insured? | Commercial coverage may reduce a defined loss but is not FDIC or SIPC insurance. |
| Continuity and withdrawals | What is the procedure for a hack, chain failure, legal freeze, or transfer to a trustee? | A tested process can reduce confusion and shorten access interruptions. |
| Reuse of assets | Can the provider lend, pledge, or rehypothecate customer bitcoin? | Reuse can create liquidity and recovery risks when many customers withdraw. |
| Claims support | How will customers prove balances, file claims, and receive updates? | Reliable records and clear instructions matter when normal account access ends. |
Should you move Bitcoin to a hardware wallet?
Self-custody removes the custodian counterparty: no exchange bankruptcy or withdrawal policy controls the private keys. The trade-off is that you become responsible for every security and recovery decision. A Bitcoin hardware wallet can keep signing keys in a dedicated device, but the device does not protect funds if you approve a fraudulent address, reveal the recovery phrase, lose the backups, or fail to plan for inheritance.
Responsibilities that move to you
- Create and store multiple secure backups of the recovery phrase without photographing or typing it into an internet-connected device.
- Verify firmware downloads, device authenticity, and transaction addresses on the device’s trusted display.
- Use a phishing-resistant workflow and assume unsolicited “support” messages are hostile.
- Plan how a trusted person could recover funds if you become unavailable, while preventing any single person from taking them prematurely.
- Test a small recovery and transaction process before committing a large balance.
Self-custody reduces dependence on a company, but it does not provide insurance and cannot reverse a mistake signed with your keys. Some owners use a custodian for trading liquidity and self-custody for long-term holdings; that split limits, rather than eliminates, counterparty exposure.
Bottom line
A frozen withdrawal is an access and liquidity warning, not automatic proof of theft. A hack can become a permanent loss if keys or records are compromised. FDIC insurance generally does not cover bitcoin at a non-bank custodian, and SIPC generally does not protect non-security crypto claims. Before depositing, evaluate the legal entity, segregation, records, key controls, insurance, reuse policy, and wind-down plan. If trouble starts, preserve evidence, verify the incident through official channels, protect credentials, avoid sharing private keys, and follow formal claims instructions. Recovery is possible in some failures, but no custody structure guarantees that you will receive the same coins or the full balance on demand.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
