Self-custody means you, not an exchange, hold the private keys that control your crypto. It eliminates counterparty risk entirely — no exchange can freeze, lose, or misappropriate assets it never held — but it also removes every safety net. There is no customer support line to call if you lose your keys or send funds to the wrong address; the transaction is final.
Hot vs. Cold Wallets
| Wallet type | Best for | Primary risk |
|---|---|---|
| Exchange wallet | Active trading capital | Exchange insolvency/hack |
| Hot wallet (MetaMask, mobile app) | Small amounts, frequent DeFi/dApp use | Malware, phishing, malicious contract approvals |
| Hardware wallet (Ledger, Trezor) | Long-term holdings | Physical loss/theft, supply-chain tampering |
| Multisig / air-gapped setup | Large holdings, institutional/family funds | Operational complexity, key coordination failure |
The Seed Phrase Is the Only Thing That Matters
Anyone who obtains your 12-24 word seed phrase has complete, irreversible control of every asset it protects — regardless of passwords, PINs, or device security layered on top. There is no way to reset or revoke a compromised seed phrase; the only remedy is to move funds to a brand-new wallet before an attacker does.
No legitimate wallet, exchange, or support agent will ever ask for your seed phrase. Any prompt asking you to 'verify your wallet' or 'restore access' by entering it is a phishing attempt, full stop — including fake browser extensions and cloned wallet websites.
Common Attack Vectors
- ▸Fake wallet apps and browser extensions listed in official app stores impersonating real products.
- ▸Malicious token approvals — signing a transaction that grants a contract unlimited spending access to your tokens.
- ▸Address poisoning — a look-alike address sent to your wallet history so you copy it by mistake later.
- ▸SIM-swapping to bypass SMS-based two-factor authentication on exchange accounts.
- ▸Clipboard hijacking malware that silently swaps a copied wallet address for the attacker's own.
A Practical Self-Custody Checklist
- 1.Use a hardware wallet for any holding you'd be devastated to lose; keep only trading-active funds on exchanges or hot wallets.
- 2.Write your seed phrase on physical material (steel backup ideally) — never store it as a photo, cloud note, or text file.
- 3.Use an authenticator app or hardware key for two-factor authentication, never SMS, on every exchange account.
- 4.Periodically review and revoke token approvals using a tool like Etherscan's token approval checker.
- 5.Always send a small test transaction before moving a large amount to a new address for the first time.