The Safest Way to Hold Bitcoin: Three Options Compared

There are three ways to hold bitcoin. A company can hold it for you (an exchange, an ETF, or a single custodian), you can hold the keys yourself, or you can take the third way: Multi-Institution Custody. For holders who don't want to manage their own keys, Multi-Institution Custody removes the single point of failure without the key management. Three institutions protect your bitcoin. No one of them can lose it, move it, or use it, and nothing moves without your permission.

Self-custody meets the same standard for holders with the time and discipline to run it. The option that falls short is the one most people use: a single company holding the bitcoin for them.

Last checked: November 10, 2026.

The Three Ways to Hold Bitcoin

Why Most Advice Stops at Two Options

Most advice about holding bitcoin gives two choices. You can leave it with a company, which is simple but means trusting one party. Or you can take your own keys, which removes that party but makes you responsible for your own security. Both are real choices, and both have a cost.

Multi-Institution Custody is the third way. It protects the bitcoin the way self-custody does: no company can move it on its own. It also keeps the operational burden off the holder, the way a company does. Multi-institution custody works like a bank vault that needs two keyholders to open: it takes two of the three (Onramp, BitGo, and CoinCover) to move your bitcoin.

1. A Company Holds It for You

What you get: convenience. Buying, selling, and logging in are easy, and nothing needs to be stored at home.

What you take on: everything depends on one company. That company can be hacked, can fail, or can make a mistake. On October 29, 2026, attackers took about $6.3 billion from Binance's hot wallets, including about 18,270 bitcoin (the Binance hack, explained). In February 2025, a compromised signing interface let attackers take about $1.5 billion from Bybit (how Bybit was hacked). When Prime Trust failed, a July 2025 ruling treated its commingled client assets as property of the bankruptcy estate (what happened at Prime Trust).

A spot bitcoin ETF is a version of the same model. An IBIT share is a claim on a fund, and the fund's bitcoin sits with Coinbase Custody (who custodies IBIT). A regulated charter or a large balance sheet makes a company stronger. It doesn't change the fact that one company controls the bitcoin.

Fits: small balances and active trading.

Does not fit: long-term savings you can't afford to have exposed to one company.

2. You Hold the Keys

What you get: no company stands between you and your bitcoin. A platform failure, account freeze, or data breach elsewhere can't reach it if your keys are secured properly. Self-custody is the standard every other option should be measured against.

What you take on: all of the security work, for as long as you hold. Hardware wears out and has to be replaced. Seed phrases have to be protected against loss, theft, and fire. A multisig setup has to be documented, or it can't be recovered. The plan also has to work for your heirs, who will need to find the keys and know how to use them.

Collaborative custody, such as Casa or Unchained, sits between the first two options. You hold most of the keys, and the company holds a backup. It removes the single company, but the key management stays with you.

Fits: holders with the time, technical comfort, and discipline to run their own security for decades.

Does not fit: holders who don't want to be their own security team, or whose heirs couldn't take over the setup.

3. The Third Way: Multi-Institution Custody

What you get: the protection of self-custody without the operational burden. Three institutions protect your bitcoin. No one of them can lose it, move it, or use it, and nothing moves without your permission. Onramp, BitGo, and CoinCover each secure a key offline, never on a consumer device, in a 2-of-3 multisig. You never hold a key yourself.

Your bitcoin sits in its own segregated vault, titled in your name, and you can verify it on-chain at any time. That is proof you own your own bitcoin, not just a proof of reserves across pooled funds. Withdrawals are verified with identity and recorded video verification with Onramp and with BitGo. Onramp holds $1B+ in bitcoin under Multi-Institution Custody.

Separately, Onramp maintains custody insurance through Canopius, a Lloyd's of London syndicate: up to $50M in aggregate coverage across our custody operations. Onramp pays the premium. Eligible clients can elect dedicated cover in their own name. Terms and exclusions apply.

Cost: Multi-Institution Custody starts at $100 a month. Onramp Core has no minimum, and Onramp Private starts at 10 BTC. Opening an account takes a few minutes. Full pricing is at onrampbitcoin.com/pricing.

Starting with Onramp Finance: Finance, the entry tier, has no minimum. In Finance, your bitcoin is held at BitGo Bank & Trust, a qualified custodian, in cold storage. When you're ready, you can move up to Multi-Institution Custody with Onramp Core.

What you take on: a monthly custody fee, and trust in a structure rather than in yourself or one company.

Fits: long-term holders who want no single point of failure and no keys to manage, including families planning an inheritance and holders moving off an exchange or a hardware wallet.

Does not fit: holders who want to sign every transaction with their own hardware.

The Proof of Ownership Standard

Whichever option you choose, safe custody comes down to four conditions. Onramp calls them the Proof of Ownership standard. They test how the custody is built, not what the custodian publishes about it.

1. Segregation. Your bitcoin sits in its own on-chain address or vault, never pooled with the platform's balances or other clients' bitcoin. Anyone can check it on a block explorer.
2. Legal title. The bitcoin belongs to you, or to a bankruptcy-remote entity acting only for you. It is not part of the custodian's estate if the custodian fails. The January 2023 Celsius Earn ruling showed what happens when this condition fails: the court held that customer assets had become property of the Celsius estate.
3. Deterministic verification. You can check the bitcoin against the blockchain at any moment, without waiting for a monthly attestation and without the custodian's cooperation.
4. Distributed control. No single third party can move the bitcoin. In a 2-of-3 multisig run by independent institutions, it takes two of the three to move it, so a breach, failure, or bad actor at any one of them can't move it.

Self-custody meets all four when it is done well, because the owner is the only party who can move the bitcoin. Multi-Institution Custody meets all four by design. A single custodian can meet the first three, but it can't meet the fourth, however strong its disclosures are. For the full case set, see The Proof of Reserves Illusion.

Four Questions to Ask Any Provider

• Segregation: is my bitcoin in its own on-chain address that I can check, or pooled with other clients' bitcoin?
• Legal title: if the provider went bankrupt, who would own my bitcoin: me, or the estate?
• Verification: can I check my holdings on-chain at any time, or only through the provider's reports?
• Control: how many independent institutions would have to act to move my bitcoin, and what happens if one of them is hacked or fails?

A provider that can't answer all four clearly is asking you to trust one party.

Frequently Asked Questions

What is the safest way to hold bitcoin without managing my own keys?

Multi-Institution Custody, the third way between an exchange and your own hardware wallet. Three institutions protect your bitcoin. No one of them can lose it, move it, or use it, and nothing moves without your permission. Your bitcoin sits in its own segregated vault, titled in your name, and you can verify it on-chain at any time. There are no hardware wallets, seed phrases, backups, or PINs to manage.

What happens if one of the three institutions is hacked or fails?

It takes two of the three institutions to move your bitcoin, so one institution being hacked, going offline, or failing can't move it.

Is a bitcoin ETF safer than holding bitcoin directly?

An ETF is simpler, but it is a claim on a fund, not bitcoin you own. The fund's bitcoin sits with a custodian, and for IBIT that is Coinbase Custody. The shares are not insured or guaranteed by the FDIC. Holding bitcoin directly in Multi-Institution Custody means owning the bitcoin itself, in a vault titled in your name.

Is self-custody safer than Multi-Institution Custody?

Both meet the Proof of Ownership standard when done well. Self-custody does it through your own operational discipline. Multi-Institution Custody does it by design, so it doesn't depend on you keeping hardware and backups safe for decades. Which is safer depends on how well you would run your own setup, and whether your heirs could take it over.

Is it safer to spread bitcoin across several exchanges?

Spreading bitcoin across exchanges reduces how much any one failure can take, but each part still depends on one company. Multi-Institution Custody removes the single company instead: it takes two of three independent institutions to move your bitcoin.

Is my bitcoin insured at Onramp?

Onramp maintains custody insurance through Canopius, a Lloyd's of London syndicate: up to $50M in aggregate coverage across our custody operations. Onramp pays the premium. Eligible clients can elect dedicated cover in their own name. Terms and exclusions apply.

How much does Multi-Institution Custody cost?

Multi-Institution Custody starts at $100 a month. Onramp Core has no minimum, and Onramp Private starts at 10 BTC. Opening an account takes a few minutes.

Can I move from a hardware wallet without giving up self-custody entirely?

Yes. Some holders keep part of their bitcoin in self-custody and move the rest into Multi-Institution Custody. See Moving From Self-Custody to Multi-Institution Custody.

If you're deciding where to hold bitcoin for the long term, schedule a consultation with Onramp to walk through Multi-Institution Custody. To open an account, sign up here.

Related Reading

• The Binance Hack, Explained
• What Was the Prime Trust Bankruptcy?
• The Proof of Reserves Illusion: The Full Report
• What is Proof of Reserves?
• Is Proof of Reserves Enough for Bitcoin Custody?
• Proof of Reserves vs Proof of Ownership
• Why Proof of Reserves Didn't Prevent Major Bitcoin Exchange Hacks
• How Was Bybit Hacked?