Casa chief security officer Jameson Lopp has urged Bitcoin holders to retain self-custody despite recent wallet security breaches. In an October 22 open letter, he warned that shifting funds to Bitcoin ETFs or custodians transfers control rather than removing security risks. He called for stronger key management, including multisignature setups, separate storage locations and clear inheritance plans.
The warning follows incidents involving weak recovery seeds, compromised devices and thefts linked to security failures. Lopp also cited hackers using AI to find security flaws. He said those cases had unsettled holders, even though security specialists had long known about several of the underlying attack methods.
Lopp Challenges ETF Custody After Wallet Attacks
Lopp said investors might prefer institutions after reading accounts of drained cold wallets and sophisticated scams. Yet he argued that financial firms introduce different dependencies because clients no longer manage the private keys behind their holdings.
Bitcoin ETFs offer price exposure without direct ownership control over the coins, according to his letter. Fund investors instead rely on issuers, custodians and other service providers to protect the underlying assets.
He also warned that holders may have little say when authorities freeze or seize assets held through intermediaries. For Lopp, Bitcoin's fixed supply, public rules and permissionless access distinguish the network from conventional financial products.
Does moving Bitcoin into an ETF solve the custody problem, or does it shift control to someone else? Lopp framed the distinction as central to how holders assess their security choices.
Coldcard and Ledger Incidents Raise Wallet Concerns
An August 3 report detailed a Coldcard hardware wallet flaw tied to firmware settings from March 2021. A configuration error weakened the randomness used to create recovery seeds for some devices.
The report linked the issue to suspected Bitcoin thefts worth nearly USD 90 million at the time. Attackers could reconstruct affected private keys without holding the device or knowing its recovery phrase.
Coldcard later corrected the firmware, but vulnerable seeds still required users to create new wallets and move their funds. Kraken security chief Nick Percoco called for independent testing of wallet seed generation.
After that incident, crypto.news reported record OKX inflows as holders moved assets toward centralized platforms. OKX linked the inflows to growing interest in managed custody.
Separately, an October 13 investigation found a hardware implant in a Ledger wallet distributed through Southeast Asian reseller CryptoBilis. Ledger confirmed an implant in one device but reported no established compromise of its systems or direct sales channels.
On October 18, Qubic reported the loss of about 2.94 trillion QU tokens, valued at USD 1.4 million, from 1,404 wallets. Developers linked the thefts to weak randomness in certain seeds and corrected the software.
Read More: Bitcoin Price Slides Below USD 82K as Nasdaq Futures Retreat
Multisignature Wallets and Inheritance Planning
Lopp urged holders to strengthen self-custody rather than treat managed custody as the automatic answer. He argued that effective security must account for both user mistakes and failures in individual safeguards.
His preferred approach uses multisignature wallets, which require authorization from more than one private key. Such arrangements can stop an attacker with one compromised key from accessing the entire balance.
Still, he cautioned that multisig alone cannot eliminate every threat. He advised separating keys by geography and hardware supply chain, reducing reliance on one device, seller or location. He also urged holders to review their current setups.
He also raised inheritance planning, asking what would happen if a holder could no longer access or manage their Bitcoin. The question makes recovery arrangements part of long-term wallet security.
Casa offers assisted self-custody services to help customers manage these arrangements without taking possession of their private keys. Lopp warned that malicious actors and legitimate intermediaries could ultimately gain control over another holder's Bitcoin.
Conclusion
Lopp's letter argues that recent wallet breaches call for stronger self-custody safeguards rather than an automatic shift to ETFs. Coldcard, Ledger and Qubic incidents exposed distinct weaknesses in key generation and hardware distribution. He recommends multisignature controls, separated keys, and inheritance plans while acknowledging that no arrangement removes every risk.