When Exchanges Fail: Why Trezor Suite Custody Is Better Than Keeping Bitcoin on Coinbase, Kraken, or FTX
Between 2022 and 2024, three major cryptocurrency exchanges collapsed or faced severe regulatory action, collectively affecting millions of users and billions of dollars in assets. FTX filed for bankruptcy in November 2022, wiping out customer deposits through mismanagement and fraud. Celsius and BlockFi followed similar paths, while Coinbase faced enforcement actions and Kraken agreed to exit certain markets. Each event demonstrated a recurring pattern: centralized custody creates a single point of failure that can eliminate user assets regardless of market conditions or the user’s own security practices. For anyone still holding significant Bitcoin, Ethereum, or other cryptocurrencies on an exchange, the question is not whether the next failure will occur, but whether your assets will be inside or outside the blast radius when it does.
The operational answer lies in understanding the difference between exchange risk and custody risk. An exchange holds your private keys on its servers and controls your ability to withdraw funds. That arrangement creates convenience—a user can trade instantly and move money quickly—but it also creates total dependence on the exchange’s solvency, internal controls, and regulatory standing. A non-custodial hardware wallet like Trezor removes that intermediary entirely by keeping private keys isolated on a physical device that never exposes them to the internet. The user becomes the sole custodian, which shifts responsibility but also eliminates the counterparty risk that destroyed deposits at FTX, Celsius, and countless smaller platforms.
How exchange insolvency destroyed customer assets
FTX’s collapse offers the clearest example of centralized custody failure. The exchange commingled customer deposits with corporate treasury funds, then loaned those deposits to Alameda Research, FTX’s affiliated trading firm. When Alameda’s positions deteriorated and the collateral they posted proved fraudulent, FTX had no way to repay customers. Users who had deposited Bitcoin, Ethereum, or other assets had no direct claim on any physical wallet or blockchain address. Their assets existed only as entries in FTX’s database, and once that database was frozen and the company filed bankruptcy, creditors entered a queue that would take years to resolve. Many customers never recovered their full balances.
Celsius and BlockFi operated with slightly different mechanisms but identical core risk. Celsius accepted deposits and paid high interest rates by lending those assets to risky counterparties, including Three Arrows Capital, a hedge fund that later defaulted. BlockFi followed a similar model. When borrowers failed, neither platform had sufficient collateral to honor customer withdrawals. Again, deposits existed as accounting entries rather than as assets under the user’s control. The bankruptcy process revealed that funds had been transferred between entities, invested in illiquid securities, and exposed to counterparties that themselves became insolvent.
The pattern is consistent across failures: centralized custody means the exchange controls the private keys, deposits are pooled, and that pooling creates operational flexibility for the platform but total exposure for the user. When regulatory pressure, market collapse, or internal fraud disrupts the exchange, customer assets become claims against an insolvent estate rather than withdrawable property. The user has no recourse because they never controlled the keys. Recovery, if it occurs at all, may return 10 to 50 cents on the dollar after years of litigation.
Kraken’s regulatory challenges illustrate a subtler risk. The exchange faced enforcement for operating an unregistered securities business and agreed to pay substantial fines and cease certain activities. Users’ assets remained technically accessible, but the threat of regulatory seizure, forced liquidation, or operational shutdown created genuine uncertainty. A user dependent on Kraken for custody could not move funds without the exchange’s permission. That vulnerability—being unable to withdraw one’s own property because a platform is under regulatory stress—represents a form of counterparty risk that many users failed to recognize until it was imminent.
The mechanics of hardware wallet custody and why private keys matter
A Trezor hardware wallet stores private keys on an isolated microprocessor that never connects directly to the internet. When a user creates a wallet, the device generates a recovery seed—typically 12 or 24 random words—that can recreate all private keys. That seed never leaves the device unless the user deliberately extracts it for backup purposes. Instead, the device stores the seed in encrypted memory and uses it to sign transactions without exposing the key material. The user approves each transaction by pressing a button on the physical hardware, confirming the destination address and amount on the device’s small screen.
This design pattern eliminates several attack vectors that plague online wallets and exchange custody. A compromised computer cannot steal the private keys because they are not stored there. An exchange hack cannot drain a hardware wallet because the keys are not on the exchange’s servers. Malware cannot intercept transactions because the device itself validates and signs them. Regulatory action or platform insolvency cannot freeze the wallet because no central authority controls it. The user’s ability to move their Bitcoin, Ethereum, Cardano, or other supported assets depends entirely on their possession of the hardware device and knowledge of their PIN, not on any external platform’s operational status.
Trezor Suite is the official non-custodial software interface designed to work with Trezor hardware wallets across Windows, macOS, Linux, Android, and iOS. The Suite displays portfolio values, facilitates transactions, and manages thousands of cryptocurrencies—including Bitcoin, Ethereum, Litecoin, Cardano, and Solana—without storing private keys on the computer or phone. When a user sends funds, the transaction details are prepared on the connected device and then sent to the hardware wallet for signing. The signed transaction is then broadcast to the blockchain. Throughout this process, private key material remains isolated on the hardware device. The Suite does not have the ability to move funds or sign transactions without explicit, physical approval from the user on the device screen.
The security implication is profound: a user’s ability to access and move their assets survives any failure of Trezor the company, any compromise of the Suite software, or any disruption of Trezor’s servers. As long as the user possesses the hardware device and retains their recovery seed in a secure location, they can recreate their wallet using alternative software or hardware wallets from other manufacturers if necessary. This is not theoretical. Users who held Bitcoin on FTX in November 2022 had no recovery path whatsoever. Users who held Bitcoin in a Trezor wallet had options regardless of what happened to any external platform.
Why non-custodial wallets create different security obligations
The shift from exchange custody to hardware wallet custody does not eliminate risk; it redistributes it. An exchange takes custody risk—they hold your keys and can lose them through mismanagement or fraud—but offloads security responsibility onto themselves. A hardware wallet transfers security responsibility entirely to the user. If a user loses their recovery seed, there is no recovery. If a user forgets their PIN, the device can be permanently locked. If a user stores the recovery phrase in cloud storage and that account is compromised, an attacker can recreate the wallet and drain the funds. The exchange’s failure is no longer your problem, but your own failure becomes absolute.
This is not a defect in the Trezor model. It is a necessary trade-off. User sovereignty—the ability to control one’s own assets without dependence on any external authority—requires that the user accept responsibility for security. That responsibility includes several specific practices. First, the recovery seed must be written down and stored offline, away from photographs, cloud services, and digital copies. Second, the recovery seed must be stored securely against theft or loss, which typically means multiple redundant physical copies kept in separate locations. Third, the PIN and any passphrases used with the Trezor must be remembered or stored securely, not written next to the recovery seed.
Additionally, a user managing a non-custodial wallet must verify addresses carefully before sending funds. Because transactions on the blockchain are irreversible, sending to a wrong address—whether through typos, phishing attacks, or malware—results in permanent loss. Trezor Suite displays the receiving address on the device screen before transaction approval, which mitigates risks from computer-level malware that might intercept or change address information. However, this protection only works if the user actually verifies that the address shown on the device matches the intended recipient. For a user accustomed to exchanging through interfaces, this additional responsibility can feel burdensome, but it also reinforces the reality that control over assets requires attention to detail.
Understanding the operational advantages of hardware wallet management
For long-term holders, the advantages of non-custodial hardware wallet storage extend beyond catastrophic failure protection. A user holding Bitcoin or Ethereum on Coinbase is subject to the exchange’s trading hours, withdrawal limits, and operational status. If Coinbase experiences downtime, the user cannot move their funds. If the user wants to stake Ethereum or earn yield elsewhere, they must trust the exchange’s staking implementation or move funds to another platform, each involving counterparty risk. A user with a Trezor wallet can access their assets any time of day, move them to any destination, participate in staking through protocols and platforms of their own choosing, and maintain complete visibility of their private keys throughout.
The buy-and-hold strategy becomes substantially lower-friction. Instead of maintaining accounts at multiple exchanges, users can transfer assets to a hardware wallet and retain them there indefinitely. Trezor Suite supports asset management and portfolio tracking without requiring active trading, so users can monitor their positions while keeping assets in isolation. For Bitcoin particularly, this eliminates the recurring security question of “which exchange is safest?” The answer becomes “none—use a hardware wallet instead.” For Ethereum holders interested in staking or decentralized finance participation, Trezor Suite integrates with protocols and applications, allowing direct interaction with smart contracts while maintaining private key isolation on the hardware device.
The operational simplicity of that model is often underestimated. Users who lived through FTX’s collapse and then spent months checking bankruptcy court filings and creditor portals learned an expensive lesson about operational burden. A user with a Trezor wallet and a 24-word recovery seed has a complete security model that fits on a piece of paper. That seed, stored securely, is the total backup necessary. It does not depend on any platform remaining solvent, operational, or honest. The user can verify independently whether assets still exist on the blockchain at the associated addresses using any public blockchain explorer.
Privacy tools and advanced features in Suite
Beyond basic security, Trezor Suite provides privacy controls that are typically unavailable on exchanges. Bitcoin users can employ coin control to select precisely which pieces of Bitcoin to spend, avoiding inadvertent address linking that can occur when an exchange automatically combines funds. Silent Payments support can reduce address reuse exposure by generating unique receiving addresses without publishing them. Tor integration routes network traffic through the Tor network, preventing direct observation of the user’s IP address in association with specific transactions or balance queries. These tools are meaningful specifically because the user has control over their own wallet architecture rather than depending on an exchange’s privacy policies.
For users interested in learning about or managing their Trezor crypto wallet ecosystem and support, these privacy features integrate naturally into regular wallet operations rather than appearing as separate products. Staking functionality for Cardano, Solana, Ethereum, and other supported protocols is available directly through Suite, eliminating the need to trust an exchange’s staking implementation or staking platform. Buy, sell, and swap functionality connects to regulated partners and decentralized protocols, providing liquidity without requiring users to maintain accounts at multiple services.
The desktop version of Trezor Suite offers comprehensive features for power users and serious holders, while the mobile application on Android and iOS prioritizes send-and-receive functionality for users who need access on the go. This dual strategy reflects the recognition that security requirements differ between devices. A desktop with more security oversight is appropriate for wallet initialization and large transactions; a mobile device is appropriate for spending transactions and checking balances. The hardware wallet itself remains the single point where private key signing occurs, whether initiated from desktop or mobile application.
Comparing the long-term economics of custody models
The financial case for hardware wallet custody grows stronger over longer time horizons. A user maintaining Bitcoin on Coinbase pays trading fees, withdrawal fees, and implicitly bears the cost of exchange insolvency insurance—which exchanges do not explicitly price but certainly do not provide. A user holding Bitcoin in a Trezor wallet has a one-time hardware cost (typically between $60 and $150), no ongoing platform fees, and no dependence on any platform’s financial stability. For someone holding $10,000 or more for five years or longer, the hardware cost is trivial compared to trading fees and the implicit insurance cost of counterparty risk.
The bankruptcy process at FTX revealed that many customers had lost not only their deposit balances but also years of accumulated trading history and tax records. Reconstructing those records proved difficult and expensive, adding professional fees to the direct asset loss. A user holding assets in a Trezor wallet maintains complete transaction history under their own control. All transactions occur directly on public blockchains and can be reviewed at any time without depending on a centralized platform to maintain records. Tax compliance and auditing are simpler because the user has direct access to all transaction data without needing to negotiate with a platform for historical records.
For institutional or high-net-worth users, the economics shift even more dramatically toward non-custodial custody. A fund manager holding $10 million or more in cryptocurrency typically faces institutional custody requirements anyway, which often means multi-signature hardware wallet arrangements managed by specialized firms. But those arrangements also mean no dependence on any single exchange. For individuals, Trezor hardware wallet custody provides a simpler version of the same principle: direct asset control without intermediary risk.
The irreversible lesson from exchange collapses
The wave of exchange failures between 2022 and 2024 created an unambiguous empirical fact: when centralized exchanges fail, customer assets disappear. The mechanism varies—fraud at FTX, bad lending decisions at Celsius, regulatory enforcement against Kraken—but the outcome is consistent. Users without direct control of private keys have no recourse. Legal remedies through bankruptcy courts take years and rarely return full value. The probability of total loss, depending on the platform, ranges from 0 to 100 percent, and users have no visibility into which outcome will occur until the failure is already imminent or complete.
Hardware wallet custody eliminates that category of risk entirely. It does not make cryptocurrency investing safer overall. Market volatility, protocol risks, and the user’s own security practices remain. But it removes the specific risk of exchange insolvency destroying deposits. That removal is not marginal. For Bitcoin and Ethereum holders, exchange failure has proven to be one of the highest-impact risks. For users holding significant balances, the operational benefits of non-custodial custody—lower fees, complete privacy control, independence from platform uptime, asset ownership that survives regulatory action—compound over time into a substantially different security and economic profile.
The transition from exchange custody to hardware wallet custody requires initial effort: purchasing a device, understanding the recovery process, learning to manage transactions, and accepting personal responsibility for security. That effort is not trivial and should not be minimized. But it is substantially less than the effort of months-long bankruptcy proceedings attempting to recover frozen deposits. For anyone who witnessed FTX’s collapse or watched Celsius customers unable to withdraw their own funds, the operational shift becomes a clear priority rather than an optional convenience. Trezor Suite makes that transition practical by providing professional, user-friendly software without requiring users to sacrifice custody control or accept counterparty risk.
Practical migration from exchange custody to hardware wallet
The migration process is straightforward in principle but requires deliberate execution. First, acquire a Trezor hardware wallet directly from the official Trezor website or authorized retailers. Initialize the device using the official Trezor Suite application, generating the recovery seed. Write down that seed using the official recovery card or secure paper, and store it offline in a safe location, separate from the device itself. Create a strong PIN that the user will remember but is not written near the seed.
Second, verify that an address shown in Trezor Suite matches an address displayed on the hardware device screen. This confirmation ensures that the Suite application is correctly communicating with the device. Third, on the exchange, initiate a withdrawal to the Bitcoin or Ethereum address generated by the Trezor wallet. Start with a small amount as a test transaction, confirming that it arrives and appears in Trezor Suite within the expected timeframe. This reduces the risk of transferring a large balance to a wrong address or encountering an unexpected issue with the destination.
Fourth, once the test transaction confirms, gradually transfer remaining balances from the exchange to the hardware wallet. This staged approach protects against software errors, network issues, or user mistakes that might be discovered early with smaller amounts. Fifth, after all funds are transferred, disable access to the exchange account if possible, or at least enable two-factor authentication and limit API permissions if the account is still needed for future trading. Finally, retain the hardware device in a secure location and keep the recovery seed backed up and safe, recognizing that the user’s ability to recover funds depends entirely on these physical backups rather than on any platform account.
Frequently asked questions
If I hold Bitcoin on a hardware wallet, can I still sell it or trade it for other cryptocurrencies?
Yes. Trezor Suite provides buy, sell, swap, and staking functionality through integrated partners. Users retain custody of their private keys while accessing liquidity. These functions connect users to regulated exchanges and decentralized protocols without requiring the user to transfer assets to a centralized platform or forfeit key ownership. The user must approve each transaction on the hardware device itself.
What happens to my Bitcoin if I lose or damage my Trezor device?
The Bitcoin remains on the blockchain at your wallet addresses. The device itself is not irreplaceable. You can recover your wallet using your 24-word recovery seed on any compatible hardware wallet or even through other software wallets (though this is less secure). The seed, not the device, is the ultimate backup. Losing the device is not catastrophic as long as you retain the recovery seed in a secure offline location.
Why do I need to worry about losing my recovery seed if an exchange like Coinbase manages all that?
Coinbase manages the seed but also controls your assets. As FTX and Celsius demonstrated, an exchange managing customer keys creates single points of failure that can destroy deposits through insolvency, fraud, or regulatory action. Managing your own recovery seed eliminates exchange risk but requires that you protect the seed as if it were money itself. That trade-off—accepting personal security responsibility in exchange for eliminating counterparty risk—is the core security principle of non-custodial wallets.
