Custody Without a Custodian

This is not investment advice. It is not a recommendation to hold, trade, or use any token. It is the same question the rest of this journal asks, applied to value that moves with a signature: who can spend this, and what happens when that person, device, or company is gone?

I came to that question through privacy tools and then through decentralised finance. The marketing said “be your own bank.” The machinery said: a 12- or 24-word sentence is the bank, and everything else is a user interface.

An exchange is not a wallet

A balance on a centralised exchange is a claim on the company’s books. It can be the right tool: liquidity, on-ramps, the boring job of talking to a bank. It is not self-custody. Withdraw a test amount to an address you control, on a network you understand, and see how many days, forms, and surprises that takes before you need to do it in a hurry.

If you cannot withdraw, you do not hold the asset. You hold a promise.

A seed is a secret, not a vibe

Software wallets generate a BIP-39 mnemonic. That sentence is the key. Screenshots, cloud photos, password-manager notes synced to three phones, and “I sent it to myself by email” are all copies of the bank vault lying on the pavement.

A hardware wallet is a signing oracle. It is useful when:

• the seed was generated on the device or on an air-gapped machine you control,
• you wrote the words on a durable medium that is not the device,
• you have restored those words onto a second device and seen the same addresses,
• the passphrase (the “25th word”), if you use one, is remembered or stored as carefully as the seed — and you understand that a wrong passphrase silently opens an empty wallet, not an error message.

If the vendor generated the seed in their app and never showed it to you, you have a token with a customer-support department. See A Token Is Not the Secret.

rehearsal:
  1. receive a small test amount on address A
  2. wipe the device
  3. restore from paper
  4. confirm address A and send the test amount out
  5. date the note

Until step 4, you have stationery.

Smart contracts are someone else’s upgrade key

“On-chain” is not the same as “I hold it.” A proxy contract with an admin key, a bridge, a “custodial staking” product, or an account abstraction wallet with a social recovery service you did not audit is another custodian with extra steps. Read who can pause, upgrade, or change the implementation. If the honest answer is “a multisig of people I do not know,” you are back to trusting an institution. That can be fine. Name it.

Multisig you do control (2-of-3 with keys in different failure domains: house, trusted person, bank envelope) is real self-custody with a better loss story than a single seed. It is also operational work. If you will not rehearse a spend, do not pretend the diagram is the system.

The long-beard test

Can you, after the vendor’s website is gone and the original device is in a river, produce a transaction from material you stored offline, on a machine you installed yourself? If the path includes a login, a KYC ticket, or a seed you never wrote down, you have a custodian. Pay them as such, or change the path.

Household payments, salaries, and tax still live in the regulated system. Mapping those obligations — what is due, which account pays, which record proves it — is ordinary administration, not on-chain romance. Self-custody does not exempt you from that map. It adds a second map, with worse customer support.