Share article

Bitcoin$62,724.52 custody is meant to reduce operational risk for institutions. The awkward bit is that, with Bitcoin, handing coins to a third party can recreate the exact counterparty exposure the asset was designed to remove.
That is the core argument in a fresh opinion piece from Wizardsardine CEO Kevin Loaec, published today, which takes aim at the institutional habit of treating regulated custodians as a default safety layer. His point is simple: for bearer assets like Bitcoin$62,724.52, outsourcing key control does not eliminate risk, it shifts it. [1]

Enjoy articles without ads?

Register for free and get unlimited access to all articles.

Why the usual institutional playbook breaks down

In traditional finance, large custodians sit inside a system with circuit breakers. Transactions can often be reversed, losses can be socialised, and regulators or central banks can step in when things go sideways. That model has trained institutions to see scale, compliance and insurance as a proper shield. [2]

Bitcoin works differently. Settlement is final, ownership is controlled by private keys, and there is no central operator to undo a bad transfer or patch over a failure. Once an institution gives up direct control of those keys, it introduces a new dependency: the custodian's security, governance, internal controls and solvency.
That is the tension Loaec highlights. Bitcoin removes counterparty risk at the protocol level, but standard custody arrangements can add it straight back in.

Custody can concentrate failure points

The practical issue is not theoretical. Centralised custodians aggregate large pools of assets, making them obvious targets for attackers and creating a single point of failure if internal controls fail.

For institutions, that exposure comes in a few forms. There is operational risk, meaning key mismanagement, insider abuse or process failures. There is legal risk, especially if asset segregation is unclear during insolvency. There is also access risk, where the owner may be the economic beneficiary of Bitcoin without having immediate unilateral control over it. [3]

Those trade-offs may be acceptable for some firms, particularly ones bound by mandates, auditors or internal compliance frameworks. But they are not the same thing as safety. They are a managed version of trust.

The false comfort of "qualified" custody

The wider industry has spent years selling custody as the bridge that makes Bitcoin investable for pensions, asset managers and corporates. That pitch has worked, especially in markets where institutions need familiar wrappers before they can get exposure. [4]

But familiar does not always mean robust. "Qualified" or regulated status can help with reporting, governance and legal accountability, yet it does not change the technical reality of Bitcoin$62,724.52. If a third party holds the keys, that third party controls the asset in the moment that matters.

That distinction tends to get blurred in institutional marketing. The result is a setup where firms may pay meaningful fees for administration, policy comfort and insurance optics, while still inheriting a fresh layer of counterparty risk.

Why this matters more as institutional balances grow

This debate lands at a time when institutional Bitcoin exposure is no longer niche. Between ETFs, treasury allocations and structured products, more balance sheets now rely on custody intermediaries to warehouse large BTC positions.

As those pools grow, so does the systemic importance of a small set of service providers. Concentration risk becomes harder to ignore. If too much BTC ends up clustered across a handful of custodians, the market gets a bit of a mess structurally: operationally centralised around chokepoints, even if the underlying network remains decentralised.

That does not mean institutions should all rush into pure self-custody tomorrow. Many cannot, at least not under current governance or regulatory constraints. It does mean the due diligence bar should be far higher than simply checking whether a custodian is regulated, insured or well known on CT, shorthand for Crypto Twitter. [5]

The alternative is not necessarily all-or-nothing

Loaec's criticism implicitly points toward setups that preserve more direct control, such as multi-signature arrangements, distributed governance over signing keys, and custody models where the institution retains meaningful participation in authorisation.

Those approaches can reduce blind trust in a single intermediary, though they also come with their own operational burdens. The real takeaway is not that every custodian is dodgy. It is that institutions should stop pretending custody removes Bitcoin's hardest problem. It changes who carries it. [6]

Risk box

The argument weakens if custodians can prove robust asset segregation, resilient multi-party key management, transparent recovery procedures and minimal rehypothecation or balance-sheet entanglement. It also weakens if regulatory frameworks evolve to give institutional clients stronger property rights in insolvency. [7]

Until then, the pitch that institutional custody is automatically safer than direct control looks more like comfort theatre than hard risk reduction.