Section 4 — Wallets, Transactions, Custody, and Safety
Lesson 13 compares third-party custody with self-custody across control, convenience, recovery, counterparty risk, and personal responsibility.
Estimated time: 65–100 minutes
Educational and safety boundary: This lesson provides general education about digital-asset custody, access, recovery, and risk. It does not provide individualized financial, investment, legal, or tax advice. It does not recommend a wallet, custodian, exchange, device, network, company, or financial product. You do not need internet access, an account, a wallet, or a digital asset to complete the lesson. Never place a real password, private key, seed phrase, authentication code, account number, wallet address, balance, or transaction record in a course response.
In Lesson 12, we used the public Prison Professors community treasury as an example of the difference between public observation and private authority. The independent community that organized the PP token made a BNB Smart Chain address visible so people could inspect activity through BscScan. The public record may show what reaches or leaves that address. It does not show who holds the private credentials, how many people must approve an action, or what recovery plan exists.
I have described the treasury arrangement as cold storage. That description is helpful, but it answers only one kind of question. Cold storage generally describes keeping signing credentials away from routine internet-connected use. It does not, by itself, tell us whether one person, several people, or a third-party service has custody. It also does not prove that the backup, approval, or succession plan is adequate.
This lesson adds a second question to the first. Lesson 12 asked what information is public and what information must remain private. Lesson 13 asks who has practical authority to use the private credentials and who carries the responsibility when something goes wrong.
I encourage you to study that question even if your present circumstances do not allow you to create an account or use a wallet. A person can develop judgment before gaining access to technology. Learning how to compare control, convenience, recovery, and risk is part of preparing responsibly.
Lesson 13 compares third-party custody and self-custody without presenting either approach as universally correct. It explains how different arrangements move control, convenience, recovery duties, and risk among users, organizations, and service providers.
Essential question: How should a careful person weigh convenience, control, recovery, access, counterparty risk, and personal responsibility when evaluating a custody arrangement?
After completing this lesson, you should be able to:
Definition: The practical arrangement for controlling access to an asset or the credentials that can authorize actions involving it. In blockchain systems, custody often turns on who controls the private keys or signing process. Legal definitions may vary by jurisdiction and context.
Sample sentence: The public ledger showed the treasury activity, but it did not reveal the complete custody arrangement.
Definition: A person, company, or service that holds assets or controls access to them on behalf of another person or organization. A custodian may manage private keys, account access, transaction approvals, records, or recovery procedures.
Sample sentence: Before relying on a custodian, the learner wanted to understand how the service protected keys and what would happen if the service failed.
Definition: A wallet service or account in which a third party controls the private keys or signing authority for the user. The user normally signs in and gives instructions to the provider rather than signing every blockchain transaction with a key the user alone controls.
Sample sentence: The custodial wallet offered password recovery, but the user depended on the provider to honor withdrawal instructions.
Definition: An arrangement in which a person or organization directly controls the private keys or other signing credentials. Self-custody reduces dependence on a custodian but places more security, backup, recovery, and operating responsibility on the key holder.
Sample sentence: Self-custody gave the organization direct signing authority and required a careful plan for backup and continuity.
Definition: The possibility that another person or organization involved in an arrangement will fail, be unable to perform, misuse authority, suffer a security breach, block access, or not honor an agreement.
Sample sentence: A custodial account created counterparty risk because the user depended on the provider to safeguard assets and process valid requests.
Definition: The process for regaining authorized access after a password, device, key, or other credential is lost, damaged, compromised, or unavailable. Recovery options depend on the custody arrangement and system design.
Sample sentence: The team tested its recovery plan without exposing any real credential or moving an asset.
Blockchain assets remain recorded on a blockchain. A custody arrangement concerns the authority used to interact with that record. The central question is not who can see a balance. It is who can create or cause the valid signature needed to authorize an action.
That authority can be organized in several ways:
These arrangements do not all fit perfectly into two boxes. “Custodial” and “self-custodial” are useful starting categories, but real systems may combine elements of both. A careful learner asks exactly who can sign, who can block a request, who can recover access, and what evidence supports the answer.
In a third-party custody arrangement, a provider controls the keys or signing system. The customer normally has an account with the provider. A username, password, authentication code, identity check, or customer-support process may allow the customer to request an action.
The provider may record many customer balances in its own database. A customer’s balance on the provider’s screen may not correspond to a separate public blockchain address controlled only for that customer. The provider may combine assets, use several wallets, or settle transfers internally. The exact structure depends on the provider and agreement.
Third-party custody may offer useful features:
Those benefits come with dependence. The user must rely on the custodian’s security, records, finances, policies, legal compliance, and willingness or ability to process requests. Access may be delayed or limited because of an investigation, technical failure, identity check, account dispute, sanctions screening, court order, provider policy, bankruptcy, or other event.
The word custodian does not guarantee that every provider offers the same legal protections. Insurance, segregation of assets, regulatory status, complaint rights, and bankruptcy treatment can differ. A person should not assume that a crypto account has the same protection as a bank deposit or a traditional securities account. Those questions require current, jurisdiction-specific verification.
In self-custody, the user or organization directly controls the keys or signing credentials. No custodian needs to approve an ordinary transaction. This arrangement may give the key holder more direct access and reduce some forms of counterparty risk.
Direct control also creates direct responsibility. A self-custody user may need to:
A provider may not be able to reset a lost private key. If the only usable credentials disappear, access may disappear with them. If an attacker obtains the credentials, the attacker may be able to sign actions that the network treats as valid.
Self-custody therefore removes one kind of dependency while increasing operational responsibility. It does not remove blockchain risk, software risk, smart-contract risk, device risk, physical risk, coercion, human error, or legal obligations.
People often combine two different comparisons:
A self-custody wallet may be hot or cold. A custodian may also use hot wallets for routine operations and cold storage for longer-term protection. Calling a wallet “cold” does not prove that it is self-custodial, well backed up, or governed responsibly. Calling a wallet “hot” does not prove that a third party controls it.
The Prison Professors community treasury helps make this distinction practical. When I describe the treasury as cold storage, I am describing how the signing credentials are kept relative to online use. The public BNB Smart Chain record does not disclose the full custody design, backup plan, number of authorized people, or internal approval rules. Those controls should not be published casually, but responsible stewards should still document and test them privately.
The phrase “not your keys, not your coins” reminds people that an account balance shown by a provider is not the same as direct control of a blockchain key. If the provider controls the keys, the user depends on that provider to recognize the account and carry out valid requests.
That warning is useful, but it has limits.
First, controlling a key does not automatically prove legal ownership. A key holder may be an employee, trustee, agent, custodian, thief, or unauthorized person. Outside records and agreements may determine who is entitled to the asset.
Second, direct control does not guarantee good security. A person can lose a seed phrase, approve a harmful transaction, use compromised software, or fail to make a recovery plan.
Third, some people or organizations may reasonably value recovery support, shared controls, recordkeeping, or legal safeguards more than sole key control. A carefully evaluated custodian may fit some needs, while self-custody may fit others.
Fourth, the word “coins” can hide technical and legal complexity. A user may hold a contractual claim against a provider rather than direct control over a specific on-chain unit. The agreement, provider records, blockchain record, and applicable law may each answer a different question.
A more complete principle is: know who controls the keys, know what rights the records and agreement provide, know how recovery works, and know which risks remain.
In a custodial account, recovery may resemble recovery for another online service. The provider might reset a password after identity verification. That convenience depends on the provider’s procedures and continued operation. A criminal who defeats the recovery process may also gain access.
In self-custody, recovery may depend on a seed phrase, backup, secondary device, shared-signature arrangement, or another technical design. No customer-service representative may be able to restore access. A backup must be protected from theft while remaining available after loss or damage.
Recovery should be planned before a crisis. A sound plan asks:
This course will never ask a learner to design a real recovery scheme or disclose a credential. The purpose is to develop the questions that responsible planning requires.
Custody is not only a technical choice. A person may lack reliable device access, a safe place for a backup, acceptable identification, or permission to use an account. An incarcerated learner may be prohibited from possessing a device, creating a financial account, receiving authentication messages, or using a digital-asset service.
Those limitations are not a failure to learn. The learner can still compare arrangements, recognize unsafe claims, build vocabulary, and prepare for future decisions. No activity in this course requires violating a facility rule, opening an account, asking another person to act as a substitute account holder, or handling an asset.
Using another person’s account can create additional problems involving ownership, taxes, access, consent, reporting, and trust. A family member should not create or control an account merely to complete a course activity. Learning can remain fully offline.
An organization faces questions that differ from those of an individual. If only one person can authorize treasury activity, illness, loss, departure, coercion, or misconduct may create a single point of failure. If too many people can act independently, accountability may weaken.
A responsible organizational process may consider:
These controls can exist in custodial, self-custodial, or shared arrangements. Technology cannot replace governance. A public address may support transparency, but it does not explain whether internal authority is appropriate or whether every transfer followed the mission.
The independent PP token community sends community-generated fees to a public treasury address associated with the Prison Professors mission. Observers can use BscScan to inspect the public ledger. I have said that the resources are intended to remain visible while being reserved in the treasury for a stated period. This example is educational and does not promote the token or any digital asset.
Imagine that a new volunteer sees the address and says:
Claim: “Because the address is public and the funds are described as cold storage, BscScan proves that the treasury is completely safe, that Prison Professors alone controls it, and that the funds can always be recovered.”
The claim goes beyond the evidence.
Reasoned response: The public record supports a limited kind of transparency. It can help observers verify on-chain activity associated with the published address. A complete custody assessment would require additional evidence about authority, safeguards, recovery, governance, and applicable agreements. Sensitive credentials should remain private even while organizational policies and accountability standards are documented.
The lesson for a participant is broader than Web3. Credibility grows when a person distinguishes what the evidence proves from what the evidence does not prove. That habit strengthens critical thinking and responsible communication.
Estimated time: 25–30 minutes
Materials: Separate paper and a pencil.
Draw six headings across the top of a page or use six labeled sections:
Read each hypothetical learner profile. For each one:
Jordan is incarcerated. Facility rules do not permit a personal smartphone, wallet, financial account, or authentication device. Jordan wants to understand Web3 and prepare for future decisions.
Renee has reliable internet access but does not have a safe, stable place to store a physical backup. She values a recovery process and is concerned about forgetting credentials.
Luis has technical experience, secure device access, and time to maintain backups. He wants direct signing authority but has not made a plan for illness or incapacity.
A small nonprofit receives digital assets for a mission. One director currently controls the only usable signing credential. The board wants transparency, continuity, and protection against one person acting alone.
Conclude with a paragraph explaining why the same custody arrangement may be reasonable for one situation and inappropriate for another.
Important limitation of the exercise: Every profile is hypothetical. Do not create an account, ask another person to create one, copy a real service’s terms, disclose a credential, or handle an asset. The correct work is the comparison and reasoning.
A. The user alone controls every private key and no provider can affect access
B. A provider controls the keys or signing process and the user depends on the provider to carry out authorized requests
C. The blockchain automatically guarantees reimbursement for every loss
D. A public address reveals every internal approval rule
A. Cold storage always means that one individual controls the keys
B. Self-custody always requires an internet-connected wallet
C. Cold storage concerns how credentials are kept relative to online use, while self-custody concerns who controls them
D. The two terms always mean exactly the same thing
A. The possibility that another party may fail, misuse authority, block access, or not honor an agreement
B. The guarantee that a provider will recover every lost credential
C. The process of reading a public address on a blockchain explorer
D. The mathematical creation of a public key
The practical responsibility is to understand where control sits, what recovery requires, which other parties must be trusted, and which risks remain after the arrangement is chosen.
Write one coherent journal entry of approximately 300–400 words. Do not submit a disconnected list of answers. Use the prompts below to organize a beginning, middle, and conclusion:
Your response should demonstrate reasoning. Do not create, copy, request, or include any real password, private key, seed phrase, authentication code, account number, wallet address, balance, transaction information, or other sensitive credential.
Write your response on separate paper or in an approved institutional messaging system. Include your name or approved Profile identifier, Lesson 13: Custody and Self-Custody, and the date you completed the entry.
Use one of the established Prison Professors Profile methods, subject to your facility’s rules:
Keep a copy when circumstances permit. Never include passwords, private keys, seed phrases, authentication codes, account numbers, real wallet addresses, balances, transaction details, or other sensitive credentials.
