The FTX Files

The phrase "not your keys, not your coins" had been a cliche in the Bitcoin community for years before FTX collapsed. It was something people said on social media, printed on stickers, and mostly did not act on. FTX changed that. When a company that had Super Bowl commercials, stadium naming rights, and the endorsement of prominent politicians and celebrities turned out to be insolvent, the phrase stopped being a slogan and became an urgent instruction. This episode is not a history of FTX. It is an examination of the structural lessons, because the next failure will have a different name but the same underlying causes. For the practical guide to moving your Bitcoin off exchanges and into your own custody, the Self-Custody First Steps guide covers the process from beginning to end.

What Actually Happened

FTX was a cryptocurrency exchange that grew rapidly to become one of the largest in the world. Its public image was polished and professional. It attracted institutional investors, celebrity endorsements, and regulatory goodwill. Behind the public image, the company was commingling customer funds with its affiliated trading firm. Customer deposits were being lent, traded, and spent. The balance sheet was not what anyone outside the inner circle believed it to be.

When a loss of confidence triggered a wave of customer withdrawals, FTX could not meet them. The reserves did not exist. The company filed for bankruptcy. Billions of dollars in customer funds were unaccounted for. The collapse took days, not months. The speed was a function of the fragility: when a company's solvency depends on no one asking too many questions, a single question can bring the whole thing down.

The founder was subsequently charged with and convicted of multiple counts of fraud. The legal proceedings revealed a pattern of misrepresentation, inadequate controls, and deliberate misuse of customer assets. It was not a case of bad luck or market conditions. It was a failure of integrity, enabled by a system that allowed one entity to hold and control other people's money without adequate oversight.

Counterparty Risk Explained

Counterparty risk is the risk that the other party in a financial arrangement fails to meet their obligations. When you leave Bitcoin on an exchange, the exchange is your counterparty. They promise to hold your Bitcoin safely and return it when you ask. The entire relationship depends on that promise being honored. FTX demonstrated what happens when it is not.

The critical insight is that counterparty risk cannot be fully evaluated from the outside. FTX had audited financials. It had regulatory licenses. It had endorsements from sophisticated investors who performed due diligence. None of it detected the fraud until it was too late. If the most connected, well-resourced, and experienced participants in the industry could not identify the risk, a retail customer has no realistic chance of doing so.

This is not a criticism of any specific exchange operating today. It is a statement about the inherent limitation of trust-based custody. The problem is structural, not incidental. Any system that requires you to trust a third party with your assets exposes you to the risk that the third party fails, and the history of finance is a long catalog of trusted third parties failing.

The Self-Custody Imperative

Bitcoin was designed to eliminate the need for trusted third parties. The entire architecture, proof of work, distributed nodes, cryptographic keys, exists to enable a financial system where you do not need to trust anyone else with your money. Using an exchange undoes that design. It reintroduces exactly the counterparty risk that Bitcoin was built to remove.

Self-custody means holding your own private keys. It means the Bitcoin is under your direct control, not a promise from a company that they will give it back. When you hold your own keys, no exchange failure, no corporate fraud, no regulatory action can separate you from your Bitcoin. The security of your holdings depends on your own practices rather than someone else's honesty.

The objection to self-custody is usually about difficulty. "It is too technical." "I might lose my keys." "The exchange is more convenient." These are legitimate concerns, and they deserve serious answers. Self-custody does require learning. It does require careful backup practices. But the difficulty is finite and manageable, while the risk of exchange custody is open-ended and uncontrollable. Learning to hold your own keys takes hours. Recovering from an exchange failure takes years, if recovery is even possible. The Bitcoin Security Checklist provides a step-by-step approach to getting your security practices right.

Lessons the Industry Should Learn

The FTX collapse was not the first exchange failure. Mt. Gox. QuadrigaCX. Celsius. The pattern repeats because the incentive structure does not change. When an entity holds large amounts of other people's money, the temptation to use that money for other purposes is constant. Some companies resist. Others do not. The customer has no reliable way to know which is which until it is too late.

The call for better regulation is understandable but incomplete. Regulation can improve transparency and create consequences for fraud. It cannot eliminate the fundamental risk. Regulated financial institutions have failed throughout history. Banks with full regulatory oversight have collapsed. Insurance companies have gone insolvent. The existence of regulators reduces risk but does not remove it. Only self-custody removes counterparty risk entirely.

Proof of reserves, a practice where exchanges publish cryptographic evidence of the assets they hold, is a step in the right direction. But proof of reserves does not prove the absence of liabilities. An exchange can demonstrate it holds a billion dollars in Bitcoin while owing two billion dollars to creditors. The proof proves less than it appears to.

What You Should Do

If you have Bitcoin on an exchange, make a plan to move it to self-custody. This does not have to happen overnight. It should happen deliberately, with proper preparation. Get a hardware wallet. Learn how it works. Practice with a small amount. Verify your backup. Then transfer your holdings. The Self-Custody First Steps guide walks through this process in detail.

If you are not ready for full self-custody, consider reducing your exchange exposure. Keep only the amount you need for active trading on the exchange, if you trade at all. Move the rest. The goal is to minimize the amount of Bitcoin exposed to counterparty risk while you build the knowledge and infrastructure for full self-custody.

Review your security practices. Use strong, unique passwords. Enable two-factor authentication. Do not store seed phrases digitally. Do not share them with anyone who does not need access. Treat your Bitcoin security with the same seriousness you would apply to any valuable asset, because that is exactly what it is.

The Real Lesson

FTX did not prove that Bitcoin is flawed. It proved that trusting intermediaries with Bitcoin defeats the purpose of Bitcoin. The protocol worked perfectly throughout the collapse. Every block was mined on schedule. Every transaction settled as designed. Every self-custodied wallet remained intact. The only people who lost Bitcoin were those who had given control of it to someone else.

This is the lesson that should survive long after the legal proceedings fade from memory. Bitcoin gives you the ability to be your own bank. That ability comes with responsibility. Learning to exercise that responsibility is not optional for anyone serious about holding Bitcoin for the long term. The cost of learning is small. The cost of not learning has been demonstrated, repeatedly, at scale.