What Is Rehypothecation? How Collateral Reuse Puts Your Assets at Risk

A guide to how financial institutions reuse your collateral and why it matters for Bitcoin holders.

Key Takeaways:

• Rehypothecation is the practice where a broker, lender, or custodian takes collateral you have pledged and reuses it for its own borrowing, trading, or lending activity. The same collateral backs multiple obligations at once.
• In the United States, SEC Rule 15c3-3 limits broker-dealer rehypothecation to 140% of a client's debit balance. Many other jurisdictions have no statutory cap, and most crypto platforms that collapsed in 2022 operated without comparable constraints.
• The 2022 failures of Celsius, BlockFi, Voyager, and FTX were all connected to the misuse and rehypothecation of customer assets. The combined crypto lending market declined 82% from its peak as a result.
• Rehypothecation risk is uniquely dangerous for Bitcoin because Bitcoin is a bearer asset with a hard-capped supply. Unlike traditional securities, rehypothecated Bitcoin that is lost through insolvency cannot be reconstructed or reversed.
• The most important questions for any Bitcoin holder: Does your platform rehypothecate? Are your holdings in segregated or omnibus wallets? What happens to your Bitcoin in an insolvency?

Rehypothecation is the practice where a financial institution takes collateral you have pledged and reuses it for its own purposes. Your broker, lender, or custodian takes the assets you posted to secure a loan or margin account and pledges them again to fund its own borrowing, trading, or lending activity. The same collateral now backs multiple obligations at once.

In traditional finance, rehypothecation is legal, regulated, and widespread. In Bitcoin and digital assets, the practice has operated with far less oversight, and the consequences have been catastrophic. The 2022 collapses of Celsius, BlockFi, Voyager, and FTX were all connected, directly or indirectly, to the misuse and rehypothecation of customer assets.

If you hold Bitcoin with a custodian, lend it out for yield, or borrow against it, understanding rehypothecation is not optional. It determines whether the assets you think you own are actually there when you need them.

Hypothecation vs. Rehypothecation: The Basics

Before rehypothecation makes sense, hypothecation has to be clear first.

Hypothecation is the initial act of pledging an asset as collateral for a loan. When you take out a mortgage, your house serves as collateral for the bank. When you open a margin account with a brokerage, the securities in that account serve as collateral for the margin loan. In both cases, you retain ownership of the asset, but the lender holds a claim against it. If you default, they can seize and sell it.

Rehypothecation is what happens next. The institution holding your collateral takes those same assets and pledges them again to secure its own borrowing or fund its own operations. Your collateral is now doing double duty. It backs your loan and it backs theirs. In some cases, the chain extends further, with the same asset pledged through multiple layers of transactions.

The distinction matters because rehypothecation introduces a new category of risk. In a simple hypothecation arrangement, your risk is straightforward: if you default, you lose your collateral. With rehypothecation, your collateral can be lost even if you do everything right, because the institution that rehypothecated it made bad bets, became insolvent, or simply could not retrieve the asset when you needed it back.

How Rehypothecation Works in Traditional Finance

Rehypothecation is one of the basic mechanisms of the modern financial system. It is deeply embedded in how prime brokerages, banks, and securities dealers operate.

The most common example involves margin accounts. When an investor opens a margin account with a broker, the securities in that account collateralize the margin loan. Under SEC Rule 15c3-3, the broker is permitted to rehypothecate those margin securities, but only up to 140% of the client's outstanding debit balance. Anything above that threshold, defined as "excess margin securities," must remain segregated and under the broker's control for the client's benefit.

This 140% limit is a distinctly American guardrail. In many other jurisdictions, including the United Kingdom, there is no statutory cap on how much collateral a prime broker can rehypothecate. The regulatory patchwork means that the same asset, held by the same global institution, may be subject to vastly different protections depending on which legal entity holds it.

The repo market is the other major arena where rehypothecation and collateral reuse operate at enormous scale. The U.S. repo market averaged approximately $12.6 trillion in daily exposures in the third quarter of 2025, according to the Office of Financial Research. In a repo transaction, one party sells securities to another with an agreement to repurchase them later at a slightly higher price. The buyer, now temporarily holding the securities, can use them in their own transactions. This collateral reuse is the fundamental plumbing of short-term funding markets, and it is how the same Treasury bond can effectively support multiple layers of financing simultaneously.

The scale of this activity is difficult to overstate. The same pool of high-quality collateral, primarily U.S. Treasuries, circulates through multiple transactions, with each reuse creating a new layer of financing. Research from the European Central Bank and others has documented collateral "velocity" effects where a single Treasury bond effectively supports multiple layers of borrowing simultaneously. This is not a bug in the system. It is the system. Modern short-term funding markets could not function at their current scale without collateral reuse.

When this system works, it provides liquidity and lowers borrowing costs across the entire financial system. When it breaks down, the consequences are severe.

The Lehman Brothers Lesson

The collapse of Lehman Brothers in September 2008 remains the most prominent example of rehypothecation risk materializing at scale. Lehman's prime brokerage unit rehypothecated client assets to finance its own operations and investments. When the firm filed for bankruptcy, clients discovered that their collateral had been pledged onward into a web of transactions they had no visibility into. Operational procedures for tracking rehypothecated assets were inadequate, and clients faced years of legal proceedings to recover what they could.

The lesson was not that rehypothecation itself is inherently destructive. The lesson was that when a firm engaging in rehypothecation fails, the clients whose collateral was reused become unsecured creditors standing behind secured creditors in a bankruptcy process. Your assets can end up backing someone else's failed bets, and you may be last in line to get anything back.

How Rehypothecation Works in Bitcoin and Crypto

The same mechanics exist in Bitcoin and digital asset markets, but historically with far less regulatory protection.

During the 2020-2021 cycle, crypto lending platforms offered high yields on customer deposits. Platforms like Celsius, BlockFi, and Voyager attracted billions of dollars in customer assets by offering interest rates that traditional finance could not match. The business model behind those rates depended heavily on rehypothecation. Customer deposits were lent out to institutional borrowers, deployed into DeFi protocols, or used as collateral for the platform's own trading and borrowing activity.

In Celsius's case, the terms of service for its "Earn" accounts explicitly transferred ownership of deposited assets to Celsius. Customers who thought they were depositing Bitcoin into something resembling a savings account were, in legal terms, making unsecured loans to a highly leveraged trading operation. Celsius rehypothecated, loaned, and exchanged those assets as its own, per its own terms of use. When market conditions deteriorated, the firm could not meet withdrawal demands.

BlockFi faced separate issues. The SEC charged BlockFi with making misleading statements about the risk profile of its institutional loan book, and the platform ultimately entered bankruptcy after exposure to both Three Arrows Capital and FTX.

FTX's failure involved customer funds being used to cover losses at its affiliated trading firm, Alameda Research, without customer knowledge or consent. The Richmond Federal Reserve noted that when customer assets are rehypothecated by a crypto platform, the typical response is to suspend withdrawals, leaving customers with no access to their funds and no recourse.

The domino effect was striking. Three Arrows Capital collapsed, creating losses for Voyager, Celsius, FTX, BlockFi, and Genesis, all of which had lending exposure to one another. Galaxy Research estimated the combined crypto lending book peaked at roughly $34.8 billion in early 2022 and bottomed at $6.4 billion after the cascade of bankruptcies, an 82% decline.

The critical difference between traditional finance and crypto in this context is regulatory protection. In the U.S., broker-dealers operating under SEC oversight face the 140% rehypothecation cap, daily or weekly reserve computations, and customer asset segregation requirements. Most crypto platforms that collapsed in 2022 operated without comparable constraints. There were no mandated caps on collateral reuse, no standardized reserve requirements, and in many cases, no transparent disclosure that rehypothecation was occurring at all.

Why Rehypothecation Risk Is Different for Bitcoin

Bitcoin introduces unique considerations that make rehypothecation risk more consequential than it is for traditional securities.

Bitcoin is a bearer asset. Whoever controls the private keys controls the Bitcoin. Unlike a stock, which exists as an entry in a centralized ledger that can be reconstructed if records are corrupted, Bitcoin that leaves a wallet is gone. There is no issuer to call, no transfer agent to contact, and no regulatory body that can reverse a transaction. When a custodian rehypothecates your Bitcoin and then becomes insolvent, the recovery process looks nothing like reclaiming shares from a failed brokerage under SIPC protection.

Bitcoin is also scarce in a way that traditional collateral is not. There will only ever be 21 million Bitcoin, with over 20 million already mined and an estimated 3.7 million permanently lost or inaccessible. When the same Bitcoin is pledged across multiple obligations through rehypothecation chains, the apparent supply of Bitcoin in the system exceeds the actual supply. This creates a form of synthetic leverage that is invisible until a stress event forces all parties to settle their claims simultaneously.

This is the fundamental tension. Bitcoin custody is about protecting access to a scarce, irreversible, bearer asset. Rehypothecation is about reusing that asset to generate additional economic activity. These two objectives are in direct conflict, and when they collide, the custody side always loses.

There is also a philosophical dimension that matters to long-term holders. Many people buy Bitcoin specifically because it exists outside the traditional financial system's web of claims, counterparty risk, and fractional reserve practices. Rehypothecation reintroduces exactly those dynamics. If your Bitcoin is being rehypothecated, you have not exited the system you thought you were leaving. You have recreated it with a different asset and fewer protections.

This is why the question of how your Bitcoin is held matters more than most people realize, and why the distinction between platforms that rehypothecate and those that do not is one of the most important decisions a Bitcoin holder can make.

The Spectrum of Custodial Risk

Not every custodial arrangement carries the same rehypothecation exposure. The risk exists on a spectrum.

At the highest-risk end are platforms that take custody of your Bitcoin and explicitly or implicitly use it to generate yield, make loans, or fund operations. If your custodian is earning money on your Bitcoin beyond charging you a custody fee, the question of whether your specific Bitcoin is still there, unencumbered, becomes critically important.

In the middle are traditional single-custodian platforms that do not engage in rehypothecation but still hold your Bitcoin in pooled or omnibus wallets. Your Bitcoin is not being reused, but it is commingled with other clients' holdings, which introduces its own set of risks during an insolvency event. The concept of "not your keys, not your coins" captures this concern.

At the lower-risk end are custody models that hold Bitcoin in segregated, client-titled wallets with no rehypothecation, no lending activity against client assets, and structural protections that prevent any single institution from unilaterally accessing the Bitcoin. Multi-institution custody is one such model, where keys are distributed across multiple independent institutions in a multisig arrangement, and no single entity can move the Bitcoin without authorization from the others.

The lowest-risk option from a rehypothecation perspective is self-custody, where you hold your own keys and no institution has access to your Bitcoin at all. The tradeoff is that you assume full responsibility for key management, backup, and inheritance planning.

How to Evaluate Rehypothecation Risk

When choosing where to hold your Bitcoin or where to borrow against it, a few questions cut through the noise.

The first question is whether the platform rehypothecates client assets. This should be clearly stated in the terms of service, not buried in legal language. If the platform is vague about whether it lends, pledges, or otherwise uses your Bitcoin for its own activities, treat that ambiguity as a red flag.

The second question is how your Bitcoin is held. Segregated wallets, where your holdings are identifiable on-chain and separate from the platform's operational funds, provide a different level of protection than omnibus wallets where client assets are pooled together. On-chain proof of reserves adds another layer of verifiability.

The third question is what happens in an insolvency. If the platform fails, are you a secured creditor with a claim to specific, identifiable Bitcoin? Or are you an unsecured creditor standing in line with everyone else? The answer depends largely on whether your Bitcoin is held off the company's balance sheet in a bankruptcy-remote structure. If your Bitcoin sits on the custodian's balance sheet, it becomes an asset of the estate in a bankruptcy proceeding, available to satisfy creditor claims that have nothing to do with you. If it is held in a segregated, client-titled structure that is legally separate from the company's operations, your claim is fundamentally stronger. The 2022 crypto bankruptcies demonstrated that the difference between those two positions can mean the difference between getting your Bitcoin back and getting pennies on the dollar years later.

The fourth question, specific to borrowing, is whether the lender uses your collateral solely to back your loan or whether it re-lends, stakes, or pledges your Bitcoin elsewhere. A Bitcoin-backed loan where your collateral sits in cold storage, unencumbered, is a fundamentally different product than one where your collateral enters a chain of rehypothecation. The crypto lending failures of 2022 demonstrated what happens when this distinction is ignored. Platforms that promised attractive yields were funding those returns by putting client collateral to work in ways that clients neither understood nor consented to. The platforms that have rebuilt trust in Bitcoin-backed lending since then are the ones that hold collateral in segregated cold storage with verifiable proof and no reuse.

Final Thoughts

Rehypothecation is not inherently evil. It is a core mechanism of modern finance that provides liquidity and lowers costs across the system. But it operates on trust, transparency, and regulation, and all three were absent in the crypto lending platforms that collapsed in 2022.

For Bitcoin holders, the lesson is structural. Bitcoin's properties as a bearer asset, its irreversibility, and its hard-capped supply mean that rehypothecation risk is not just a financial concern. It is an existential one for your holdings. The Bitcoin that backs multiple obligations cannot be in two places at once, and the person who discovers that fact last is the person who loses.

Understanding whether your Bitcoin is being rehypothecated, how it is held, and what legal protections exist if something goes wrong is not paranoia. It is the baseline of responsible custody. The platforms that survived 2022 and continue to earn trust are the ones that can answer these questions clearly, transparently, and verifiably.

If rehypothecation risk is shaping how you think about where to hold your Bitcoin, Onramp's multi-institution custody is built around the opposite model: segregated, client-titled wallets with no rehypothecation, no lending against client assets, and insurance coverage up to $100 million per incident through Lloyd's of London. Schedule a consultation to walk through how the custody structure works, or if you are ready to get started, sign up here.

Related Reading:

What Is Bitcoin Custody? A Complete Guide for Long-Term Holders

Bitcoin Custody 101: Self-Custody vs. Third-Party Custody Explained

What Is Multi-Institution Bitcoin Custody? A Bitcoin Custody Explainer

Not Your Keys, Not Your Coins: What It Really Means for Bitcoin Holders

What Happens to My Bitcoin if Onramp Goes Away?

Is Multi-Institution Bitcoin Custody Safe? Collusion Risk Explained