Crypto Wallets vs Exchange Accounts: Who Holds Your Coins?
Custody is a claim on a business and self-custody is keys you hold: how to tell which one you are in, and why QuadrigaCX made it a C$190m lesson.
TL;DR
- An exchange balance is a claim on a business; the platform holds the keys and you hold a promise.
- A wallet holds keys, not coins: the 12 or 24 seed words are the money, with no reset and no help desk.
- QuadrigaCX proved the stakes in 2018: one dead founder, about C$190m of customer funds out of reach.
- Neither model is wrong. The mistake is not knowing which one you are in, so run the password-reset test today.
- Educational only, not financial advice.
Gerald Cotten died in December 2018, on honeymoon in India, at 30. He ran QuadrigaCX, then Canada's largest crypto exchange, and he was reportedly the only person alive with the keys to its wallets, so about C$190 million of customer money went out of reach overnight. His customers thought they owned crypto, when what they actually owned was a claim on a business that could no longer pay.
That is the whole wallet-versus-exchange question in one grim story: not app design, not fees, but who holds the keys. This is an explainer, not financial advice.
An exchange balance is an IOU
Sign up to an exchange, pass KYC, buy some bitcoin, and the number on your screen is not crypto sitting in your account, it is a database entry. The platform holds the coins and the keys that move them, or is supposed to, and what you hold is a promise. The industry word for this arrangement is custodial.
Custody is not a con, it is how most people start, for decent reasons: forget your password and you reset it, lose your phone and the money stays put, and when something breaks there is a support desk to shout at. Banks have run on the same model for centuries.
But a promise is only as good as the business behind it. The Ontario Securities Commission picked through the Quadriga wreckage, and its June 2020 report concluded the exchange had operated like a Ponzi scheme, with most of the money gone before Cotten died. The lost-keys story was the polite version.
A wallet holds keys, not coins
A crypto wallet does not store coins, because the coins never move house: they sit on the blockchain, bitcoin's or ethereum's or whichever network you bought on. What the wallet holds is your private key, the thing that signs transactions and spends the money. Keys, not coins, that is the entire product.
Run your own wallet and you are in self-custody. Everything hangs off the seed phrase: 12 or 24 words, from a standard called BIP-39, that can regenerate every key the wallet will ever create. Anyone who has the words has the money, with no reset button and no help desk. That is not a flaw in the design. It is the design.
Wallets come as phone apps or as small offline devices. Trezor shipped the first hardware wallet in 2014, and the pitch has not changed since: a key that never touches the internet is a key nobody can steal over it.
How each one fails
Custodial accounts fail like businesses: withdrawals pause, terms change quietly. Sometimes the whole thing folds: FTX halted withdrawals on 8 November 2022, and balances people had checked that morning became lines in a court filing. Your real protection is the honesty of a company you cannot see into.
Self-custody fails like people: seed words lost in a house move, a phrase photographed, synced to the cloud, and phished six months later, the words typed into a fake support page at two in the morning. Nobody can freeze your coins, but nobody can rescue you either.
So neither model is wrong, whatever the maximalists tell you. Custody trades control for convenience, keys trade convenience for control. The dangerous position is the common one: keeping coins on a platform while believing you hold them yourself. Quadriga's customers were not fools, most had never been asked the question.
The thirty-second test
If you are not sure which side you are on, two questions settle it.
If you can reset your password and recover the account through email, then the platform holds the keys and the account is custodial.
If setup forced you to write down 12 or 24 words, then you hold the keys and you are in self-custody.
Quadriga's customers ran this test far too late, in January 2019, after withdrawals froze and the company filed for creditor protection. Run it now, while the answer costs nothing.
Buying and parking are separate decisions
People assume the place you buy is the place you must keep. It is not, and unlearning that early spares you real money and real grief. The thing that turns pounds or euros into crypto is an on-ramp. Banxa has run that plumbing since 2014, with more than 100 payment methods across 100-plus countries, and it is neither an exchange nor a wallet, just the pipe between your bank and the coins. Money in, coins out, in the markets it serves.
Buy through an on-ramp inside a wallet app and the coins land straight in self-custody, no exchange stopover, no second transfer to fumble. Card purchases typically arrive within about 10 minutes of the bank approving payment and cost 3 to 5% all-in, and a bank transfer runs nearer 1% and takes longer. Banxa's locked price quote holds for roughly 3 minutes, which is enough time to double-check the address and not much more.
Choose your custody on purpose
The split most people settle into: spending money on a platform, savings on keys they hold. Keep the convenience where the stakes are low, and move anything that would properly hurt into a wallet whose seed phrase lives on paper, in two places, nowhere digital. Not a screenshot, not a notes app, paper.
And treat the words like the money they are. No real platform, wallet or support agent will ever ask for your seed phrase. That request is a scam, every single time.
Cotten's customers never chose custody, they defaulted into it, and in December 2018 the default came due, all C$190 million of it. Choosing costs you one honest question: who holds the keys?
Frequently Asked Questions
Depends what the money is for. Coins you trade often are less hassle on a platform; coins you plan to hold for years belong in self-custody, where no company failure can touch them. Plenty of people run both. The wrong answer is not knowing which one you are using.
They go into wallets the platform controls, usually pooled with everyone else's. Your balance is a record of what you are owed, not coins with your name on them. That promise holds at most platforms, and it failed spectacularly at QuadrigaCX in 2018, to the tune of about C$190 million.
Yes, and it is usually your own doing. Lose every copy of the seed phrase and the coins are stranded forever; let someone else see the words and the coins are theirs. Write the 12 or 24 words on paper, keep two copies in separate places, and never type them into any website.
Not on day one. A reputable phone wallet is fine while the amounts are small. Once your holdings reach a figure that would properly sting, a device that keeps keys offline, a category Trezor started in 2014, is worth the money.
You do, or whoever owns the wallet address you give at checkout. Banxa is an on-ramp, not an exchange or a wallet: it converts your payment and delivers coins to the address you chose, in the markets it serves. Where the coins live after that is entirely your call.
A password gates an account and the company behind it can reset it. A seed phrase is the keys themselves: 12 or 24 words that regenerate everything in the wallet. Forget a password and you wait five minutes. Lose a seed phrase and there is nobody to ring.
About the author
Dan Clarke is the author of Bitcoin: The Complete Guide and a former content lead at Binance Academy, where he wrote crypto education for readers arriving with no background in the subject. He has worked in the cryptocurrency industry since 2017. His rule for these guides: plain language first, precision where it matters, no cheerleading.