Celsius ran a programme called Earn that paid a return on deposited crypto. Hundreds of thousands of people used it, and they thought of the number on the screen as their balance.
The Terms of Use said that account holders granted Celsius all right and title to those assets, including ownership rights, and the right to pledge, re-pledge, hypothecate, rehypothecate, sell, lend or otherwise transfer or use them.
After Celsius filed for bankruptcy, Judge Martin Glenn of the US Bankruptcy Court for the Southern District of New York ruled on 4 January 2023 that the Terms formed a valid, enforceable contract and unambiguously transferred title. About $4.2B across roughly 600,000 Earn accounts was property of the bankruptcy estate, not of the customers. The court left open that individuals might rebut the presumption on their own facts.
Read what is absent from that.
There was no fraud in the ruling. No hidden clause, no forged document, no misappropriation to be proven. The terms said what they did, the customers agreed, and a judge read them as written.
What the depositors thought they had was a balance. What they legally had was an unsecured claim against a company they had granted permission to lend their assets out.
Nobody in F102-01's Cyprus autopsy had signed anything agreeing to that. These people had.
This is the decision that determines what every other lesson in F103 and F104 is for. Almost everyone makes it by accident, on the day they open an account, and never revisits it.
One question, not a product category
Forget the labels. Exchange, wallet, app, vault, neobank, DeFi. The words are marketing and several products deliberately blur them.
Ask one thing: who can produce the signature?
If the private key is under your control, it is self-custody. You can transact without anybody's cooperation, and nobody can transact without yours.
If somebody else holds the key and acts on your instruction, it is custodial. Your balance is a database row at their institution, backed by a legal claim, and their willingness and ability to honour it.
That is the whole taxonomy, and it maps directly onto F102-01: a custodial balance is a deposit, and a deposit is a loan you made.
The blurred middle is worth naming. A wallet app that holds your keys in a way it can recover for you is custodial in the sense that matters, whatever it calls itself. Multi-party computation arrangements split the key so no single party holds it, which changes the shape of the risk without removing the question, and you should ask who can reconstruct a signing key and under what conditions. Smart accounts with a recovery guardian are self-custodial with a named exception, which is F103-04.
Test any product with a single sentence: if this company disappeared overnight with no notice, could I still move my funds? If the answer needs a paragraph, you are custodial.
The tradeoff, stated honestly
| Custodial | Self-custodial | |
|---|---|---|
| Lost password | Recoverable, support flow exists | Unrecoverable, no exceptions |
| Phishing | Often reversible by the provider | Irreversible, funds gone |
| Provider insolvency | You are an unsecured creditor | Unaffected |
| Provider freezes you | You cannot transact | Unaffected |
| Your own error | Frequently absorbed | Entirely yours |
| Ongoing cost | Their fees and spread | Gas, hardware, your attention |
| Failure mode | Slow, legal, partial | Instant, total, final |
| Who you call | Them | Nobody |
Read the last two rows together, because they are the honest core of it.
Custodial failures are slow and partial. Celsius took years and creditors received something. FTX creditors received 119 percent of a November 2022 dollar claim, which F102-02 shows was a large loss in the asset and was not zero.
Self-custodial failures are instant and total. A signed transaction clears in seconds and there is no queue to join.
Neither column is safe. The 35 percent access-loss figure that opens this course is mostly people in the left-hand column locked out of accounts, and the biggest individual losses in this Academy are people in the right-hand column who were talked into signing. They fail differently, and the correct question is which failure mode you are equipped to survive.
Read the ownership clause
The Celsius ruling gives you a concrete, transferable skill, and it takes ten minutes.
Open the terms of any custodial service holding real value for you and search for these words: title, ownership, lend, pledge, hypothecate, rehypothecate, segregated, commingle.
What you are looking for:
- "You retain title" or "assets are held for you as custodian" is the answer you want. It suggests the assets remain yours and are not the provider's to lend.
- "You grant us all right and title" is Celsius. Whatever the interface shows, you have sold them the asset in exchange for a promise.
- "Segregated" is better than silence, and is a legal question in your jurisdiction rather than a guarantee.
- Different terms for different products at the same company. This is the trap. The plain holding account and the yield product frequently have different ownership treatment, and moving a balance between them changes what you own without any warning on the screen.
If a custodian pays you a return, ask F102-04's question and then this one.
To pay you, they must do something with the asset. Lending it out is the honest version, and lending it out generally requires them to have the right to it, which is why the yield product is where the title transfer usually lives.
You may decide that trade is worth it. Make it a decision. The Celsius depositors overwhelmingly did not know they had made one, and the difference between the two products at the same company was a checkbox and a paragraph nobody read.
Set the line with a number
"Anything you cannot afford to lose belongs in self-custody" is the standard advice and it is not a rule, because it has no number in it and no trigger.
Make it operational instead. Pick the form that matches how you actually think:
- A fixed amount. "More than $2,000 moves to self-custody within a week."
- A proportion. "No more than 20 percent of holdings sits with any single custodian."
- A purpose test. "Custodial holds only what I intend to trade or spend within 30 days."
Then add the part people forget: what triggers a review. A balance moving by half. A new job. A custodian changing its terms, which they do by email you will not read. An amount crossing a threshold where the counterparty risk stops being theoretical for you.
And be honest in both directions. Moving to self-custody before you have done F104 and F106 is not an upgrade. You have swapped a counterparty risk you understand for an operational risk you do not, and the failure mode you swapped into is the instant and total one. The sequencing matters more than the destination.
Self-custody is objectively safer, so more of it is always better.
This is the industry's default advice and it is not supported by where losses actually occur.
The largest individual thefts in this Academy are self-custody losses: $282M and $243M, both conversations, in F106. The Milk Sad and Profanity victims were self-custodying. Every case in F110 is a self-custody holder whose funds died with them.
Meanwhile the survey opening this course found the most common access failures are forgotten passwords and lost two-factor access, which are custodial problems with a recovery flow, and which usually end in an inconvenience rather than a loss.
Self-custody removes exactly one category of risk, counterparty risk, and it is a real category that took $4.2B in the autopsy. It replaces that with a category whose failures are unrecoverable and which requires ongoing competence from you specifically.
The defensible position is not maximum self-custody. It is a deliberate split, sized to what you are equipped to operate, moving the line as your competence and your holdings grow. That is what F104's three-tier architecture is, and it is why it has three tiers rather than one.
Ask who can sign, not what the product is called: if someone else holds the key, your balance is a claim on an institution and F102-01 already told you what that is. Celsius made it concrete, with terms that granted title and a court that read them as written, turning $4.2B across 600,000 accounts into estate property with no fraud involved. So read the ownership clause, and check it separately for the yield product, which is usually where the title transfer lives. Then set your line with a number and a review trigger, and remember that custodial failures are slow and partial while self-custodial ones are instant and total, which makes the question not which is safer but which failure you are equipped to survive.