Non-Custodial vs Custodial Wallet: Why Self-Custody Wins

Сustodial Wallet: Pros and Cons

Custodial wallets remove the hardest part of crypto for a beginner — there's nothing to back up, and if something goes wrong, support is there to help, the same way it is with a regular bank account. The catch is what that convenience costs – you don't own the assets directly, you hold a claim against the platform, and that claim is only as solid as its security and solvency.

That risk isn't hypothetical. In February 2025, Bybit lost roughly $1.5 billion in Ethereum after attackers compromised the process used to move funds from cold to hot storage, injecting malicious code through a third-party tool. Bybit users didn't do anything wrong – they simply held assets on a platform that turned out to be vulnerable.

ChangeNOW was among the platforms that helped in the aftermath, blocklisting flagged addresses at Bybit's request as part of the industry-wide effort to track the stolen funds. Law enforcement then reached out to ChangeNOW about three exchanges tied to the case, and in cooperation with the team, funds worth $24,682, $31,373, and $9,020 were seized.

As Catalin Iordache, Backend Engineer at xPortall put it during ChangeNOW's X Space dedicated to self-custody:

"People saw exchanges collapse, freeze withdrawals, or get hacked. So 'not your keys, not your coins' became something people actually believe."

Listen to the full conversation on X Space.

Benefits of a Non-Custodial Wallet

Full Ownership

Your assets aren't tied to any company's solvency or policy. If you hold the seed phrase, you're the only one who can authorize a transaction – full stop.

No Counterparty Risk

If a platform collapses or gets hacked, a non-custodial wallet is unaffected – the keys never leave your device. That removes counterparty risk, but not risk altogether: it just moves to your side, in the form of basic digital hygiene. We'll get into exactly what that means below, including recent cases where the storage tool itself, not a platform, was the target.

Direct Access to DeFi

You interact with dApps, swaps, and staking directly, without withdrawing from an exchange first – and transfers move on-chain, with no withdrawal caps or platform-specific geographic restrictions.

The Trade-Off of Self-Custody

None of this comes free. With a non-custodial wallet, you take on responsibility a provider used to carry: storing your seed phrase, recognizing phishing, checking what you're signing. As Catalin from xPortal described it:

"Self-custody still means write down 12 or 24 random words, store them somewhere safe, never lose them, never show anyone. Mess that up once and your money is gone forever. No customer support, no one to bother."

Hot vs Cold Non-Custodial Wallets

Hot wallets (mobile/desktop, like NOW Wallet) are built for everyday use and DeFi. Cold wallets store keys offline and suit long-term storage of larger amounts. Neither format is automatically safe by default – both have already been the source of major losses.

Starting July 30, 2026, an attacker exploited a five-year-old firmware flaw in Coldcard hardware wallets to systematically drain bitcoin from affected devices. The issue traced back to weak random number generation introduced in a 2021 firmware release; by the latest estimates, losses topped $116 million.

The software layer around hardware can be a weak point too. In December 2023, an attacker injected malicious code into Ledger Connect Kit, a library dApps use to connect to Ledger devices, tricking users into signing transactions that drained their wallets. The attack traced back to a phishing compromise of a former employee's account, not a flaw in the hardware itself – but it still cost users hundreds of thousands of dollars.

The takeaway: both hot and cold wallets reduce specific risks, but neither removes the need to verify your firmware source and what exactly you're signing.

How to Keep a Non-Custodial Wallet Secure

• Store your seed phrase offline – never enter it on a website or in a chat.
• Keep multiple physical backup copies in separate locations.
• Use a PIN and biometrics wherever available.
• Update firmware and apps only from official sources.
• Double-check what you're signing before confirming any transaction, especially when connecting to unfamiliar dApps.

Using Both Wallet Types Together

Many users keep part of their funds on a custodial platform for active trading and move the rest into a non-custodial wallet for long-term storage. That's a workable approach if it's a deliberate one – but for preserving capital and staying independent of a third party's decisions, self-custody remains the stronger default.

Getting Started With Self-Custody

Choosing self-custody is one decision. Choosing a wallet that makes it painless is another. NOW Wallet is built around exactly that — full control over your keys, Face ID for secure and quick daily access, AML screening before you send, and a recovery flow that doesn't depend on remembering exactly how everything was set up the first time.

Try NOW Wallet

Sources

1. Ledger, Security Incident Report
2. FBI, North Korea Responsible for $1.5 Billion Bybit Hack
3. BBC, North Korean hackers cash out hundreds of millions from $1.5bn ByBit hack
4. TRM Labs, The Largest Hardware Wallet Exploit of 2026
5. Is a Cold Wallet Safe? Cold Wallet Safety Tips
6. ChangeNOW X Spaces, "Self-Custody Survived the Hacks. Can It Survive Being Easy?"