Key Takeaways
- • Anthony Pompliano says a spot bitcoin ETF is "the single most secure thing" for holders of $10,000 to $10 million in BTC, putting him at odds with the self-custody "not your keys, not your coins" ethos.
- • Critics note BlackRock's IBIT relies on Coinbase as sole custodian for about 815,000 BTC, which Onekey founder Yishi Wang called a single point of failure after the Binance hack.
- • U.S. spot bitcoin ETFs posted $1.28 billion in outflows last week, the largest weekly drain in about four months, as the custody debate runs into Tuesday's CPI print.
- • Recent hardware wallet security incidents, including Trezor's malicious implant warning, Keystone's destruction of 18,835 devices, and a Foundation customer data breach, have intensified the debate over custody.
Summary
Anthony Pompliano, investor and podcast host, said a spot bitcoin exchange-traded fund is "the single most secure thing" for people holding between $10,000 and $10 million in bitcoin. Responding to a question about how to store a meaningful amount of bitcoin, he said, "If you're just optimizing for security, probably the ETF is the single most secure thing for people to do." His remarks run counter to the long-standing bitcoin community principle of self-custody, under which holders control their own private keys. An ETF instead places keys with a regulated custodian and gives the investor a brokerage share.
The timing of Pompliano's comments follows a difficult period for hardware wallet makers. According to the report, Trezor warned customers about a malicious hardware implant found in a Safe 5 bought from a former reseller, a case tied to a $93 million Ledger security scandal involving the same distributor. Keystone said it would destroy a total of 18,835 hardware wallets after attackers stole the key used to verify its devices as genuine, and Passport maker Foundation disclosed a customer data breach. The report also cites investor Evan Luthra, who described being forced into his car by five masked men in Oxford, assaulted, and robbed of more than $2 million in crypto within 30 minutes, an incident linked to leaked buyer data.
Critics point to concentration risk in ETFs. Following Binance's $6.3 billion hack, Onekey founder Yishi Wang warned that North Korean hackers could target BlackRock's iShares Bitcoin Trust (IBIT), which held about 815,000 BTC with Coinbase as its sole custodian. Coinbase has said more than 99% of customer assets sit in cold storage and that its institutional custody vault runs entirely offline. ETF holders also cannot move bitcoin onchain, use it for payments, or sell outside market hours; Peter Schiff highlighted this limitation in October, warning that ETF investors "can't sell until Monday" during a weekend slide. U.S. spot bitcoin ETFs recorded $1.28 billion in outflows last week.
The debate ultimately centers on trade-offs between security and sovereignty. Pompliano's argument rests on protection against loss, while a regulated fund reduces risks such as lost seed phrases, phishing, and counterfeit devices but introduces custodian, counterparty, and market-hours risk. Self-custody advocates emphasize control, noting that assets held through a broker can be frozen, delayed, or restricted.
The timing of Pompliano's comments follows a difficult period for hardware wallet makers. According to the report, Trezor warned customers about a malicious hardware implant found in a Safe 5 bought from a former reseller, a case tied to a $93 million Ledger security scandal involving the same distributor. Keystone said it would destroy a total of 18,835 hardware wallets after attackers stole the key used to verify its devices as genuine, and Passport maker Foundation disclosed a customer data breach. The report also cites investor Evan Luthra, who described being forced into his car by five masked men in Oxford, assaulted, and robbed of more than $2 million in crypto within 30 minutes, an incident linked to leaked buyer data.
Critics point to concentration risk in ETFs. Following Binance's $6.3 billion hack, Onekey founder Yishi Wang warned that North Korean hackers could target BlackRock's iShares Bitcoin Trust (IBIT), which held about 815,000 BTC with Coinbase as its sole custodian. Coinbase has said more than 99% of customer assets sit in cold storage and that its institutional custody vault runs entirely offline. ETF holders also cannot move bitcoin onchain, use it for payments, or sell outside market hours; Peter Schiff highlighted this limitation in October, warning that ETF investors "can't sell until Monday" during a weekend slide. U.S. spot bitcoin ETFs recorded $1.28 billion in outflows last week.
The debate ultimately centers on trade-offs between security and sovereignty. Pompliano's argument rests on protection against loss, while a regulated fund reduces risks such as lost seed phrases, phishing, and counterfeit devices but introduces custodian, counterparty, and market-hours risk. Self-custody advocates emphasize control, noting that assets held through a broker can be frozen, delayed, or restricted.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.