> ## Content Index
> Fetch the complete content index at: https://blog.era-wallet.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Custodial vs. Non-Custodial Wallets: Who Really Controls Your Crypto?
- URL: https://blog.era-wallet.com/custodial-vs-non-custodial-wallets/
- Published: 2026-10-23T10:15:00.000Z
- Updated: 2026-10-23T10:15:00.000Z
- Description: Your exchange balance shows how much crypto you have. But who actually controls it? Discover how crypto custody works and why it matters.
- Author: ERA WALLET
- Tags: Crypto Security, Self-Custody, Crypto Wallets, Crypto Exchanges

Imagine buying 1 ETH on a crypto exchange.

You open the app, check your balance, watch the price move, and sell whenever you want. It feels like your crypto is sitting in your own wallet, ready whenever you need it.

But there is something the interface rarely explains: seeing crypto in your account and directly controlling it on the blockchain are two different things.

When you keep assets on a centralized exchange, the platform typically controls the private keys, signs on-chain transactions, and processes withdrawals. You control your exchange account. The exchange controls the infrastructure that moves the crypto.

Most of the time, that distinction is invisible. Until something goes wrong.

## **What Happened With CoinDCX in October 2026?**

On October 21, 2026, [approximately 15.99 million USDT moved from 40 TRON addresses](https://bitquery.io/investigations/coindcx-hack?ref=blog.era-wallet.com) linked to Indian crypto exchange CoinDCX. Blockchain analytics firm Bitquery characterized the transfers as unauthorized outflows and traced subsequent movements through other addresses.

[CoinDCX disputed the suggestion of a new breach](https://bitquery.io/investigations/coindcx-hack?ref=blog.era-wallet.com). It said the relevant addresses had been compromised in 2025, that an older deposit-sweeping process had failed, and that customers’ credited balances were protected. Bitquery, however, reported activity consistent with continued deposit processing through some of those addresses.

As of October 23, 2026, the public blockchain record did not independently establish how access was obtained or who owned all the transferred funds. The two interpretations remained in dispute. This is not proof that customer balances were lost.

But the episode raises a useful question for anyone keeping crypto on an exchange: what happens after you send assets to an exchange deposit address?

## **What Happens When You Deposit Crypto on an Exchange?**

Let’s say you deposit 100 USDT. The exchange gives you an address. You send the tokens, wait for confirmations, and see 100 USDT in your account.

It might look as though those tokens are sitting in a wallet reserved for you. In reality, many exchanges use automated deposit-processing systems. After a deposit arrives, the platform may sweep it into a shared wallet. Hot wallets support frequent transactions; other assets may be held in cold storage, where signing keys are separated from continuously connected systems.

Meanwhile, the 100 USDT displayed in your account is generally a record in the exchange’s internal ledger. It does not necessarily correspond to funds held at an individual blockchain address under your control.

![](https://storage.ghost.io/c/ce/8d/ce8db2a5-44fe-4b14-a909-c806ae2eb88e/content/images/2026/10/What-Happens-When-You-Deposit-Crypto-on-an-Exchange.png)

Transfers between users of the same exchange may be recorded internally without an on-chain transaction. An external withdrawal is different: the exchange must process the request and authorize an on-chain transfer.

That is why controlling an exchange account is not the same as controlling private keys. If you want a closer look at [how private keys, seed phrases, and addresses relate](https://blog.era-wallet.com/what-is-a-crypto-private-key/), read our earlier explainer:

## **Custodial vs. Non-Custodial Wallets: What’s the Difference?**

### **Custodial wallets: a provider controls the keys**

In a custodial arrangement, a third party holds or controls the private keys on your behalf. A centralized exchange is a familiar example.

You can buy, sell, and request withdrawals through the platform. The exchange manages the signing infrastructure and processes transactions. The benefits include a familiar account experience, trading tools, support, and sometimes account recovery options. You do not have to manage the exchange’s seed phrase yourself.

The trade-off is reliance on the provider. Withdrawals may be delayed or suspended due to maintenance, security incidents, compliance requirements, or operational problems. Your own login credentials can remain secure while the exchange’s infrastructure faces an incident.

### **Non-custodial wallets: you control the keys**

A non-custodial wallet lets you control the private keys needed to authorize transactions. It might be a software wallet on your phone or a hardware wallet that signs on a separate device.

Instead of asking an exchange to move assets, you authorize transactions yourself. An unrelated trading platform pausing withdrawals does not, by itself, prevent you from using keys you control.

But independence comes with responsibility. Losing access to your keys and all valid backups can mean losing access to funds. Revealing a recovery phrase or authorizing a malicious transaction can have irreversible consequences. Self-custody does not eliminate risk. It changes who manages it.

![](https://storage.ghost.io/c/ce/8d/ce8db2a5-44fe-4b14-a909-c806ae2eb88e/content/images/2026/10/Custodial-vs.-Non-Custodial.png)

## **Why Can an Exchange Incident Affect Access to Funds?**

CoinDCX is not the only recent case showing the complexity of custodial infrastructure.

On September 24, 2026, Bitget reported unauthorized transfers affecting its exchange wallet environment. The platform [initially estimated the impact at approximately $351.6 million](https://www.bitget.com/support/articles/12560603896390?ref=blog.era-wallet.com) and later revised its estimate to approximately $387.5 million following further asset reconciliation. It temporarily suspended withdrawals and said it would cover losses through its protection fund.

According to Bitget, attackers gained access to its wallet infrastructure through compromised backend systems. In a September 30 update, Bitget said independent [investigations by Mandiant and SlowMist](https://www.bitget.com/support/articles/12560603896305?ref=blog.era-wallet.com) had identified compromised third-party security products as part of the attack path.

The distinction matters: a custody system can be compromised through its operational or authorization infrastructure, not only through a publicly confirmed theft of private keys. A secure password and an uncompromised personal account are not the whole security picture.

That does not mean every exchange is unsafe or every incident results in customer losses. It means custodial storage introduces dependencies outside the customer’s direct control.

## **Does That Mean You Should Stop Using Crypto Exchanges?**

Not necessarily. Exchanges and non-custodial wallets serve different purposes. Exchanges make it convenient to buy crypto with traditional currencies, trade assets, and use platform services. Self-custody gives you direct control over keys and reduces dependence on a centralized provider to authorize transfers.

The more useful question is not “Which option is always safer?” It is “Which custody model fits what I am trying to do?”

For frequent trading, keeping some assets on an exchange may be practical. For long-term holding, non-custodial storage may be worth considering if you want to avoid depending on an exchange’s withdrawal infrastructure.

There are differences within self-custody, too. A software wallet is convenient for daily transactions, but its security depends partly on the device and software environment. A hardware wallet separates private-key operations from the phone or computer used to prepare transactions.

For example, ERA Wallet keeps private keys on a dedicated device and supports air-gapped signing via QR codes. ERA Lens can decode supported transactions offline so users can review what they are authorizing before signing.

This separation does not remove the need to safeguard your recovery backup or review transaction details carefully. It gives you another way to manage those risks.

## **Who Actually Controls Your Crypto?**

With exchange custody, you rely on a provider to safeguard keys, run its infrastructure, and process withdrawals. With self-custody, you control the keys and take responsibility for protecting and using them.

Both approaches can be useful. Both involve trade-offs. CoinDCX and Bitget show why it is worth looking beyond the balance displayed in an app and asking who can authorize movement of assets on the blockchain.

Before choosing where to store crypto, ask yourself: If the service I use stopped working tomorrow, could I still access and move my assets independently?

[![CTA Image](https://storage.ghost.io/c/ce/8d/ce8db2a5-44fe-4b14-a909-c806ae2eb88e/content/images/2026/07/5773904739-3.webp)](https://era-wallet.com/?utm%5Fsource=era%5Fblog&utm%5Fmedium=referral&utm%5Fcampaign=custodial%5Fvs%5Fnon%5Fcustodial%5Fwallets&utm%5Fcontent=article%5Fend%5Fcta) 

Keep your private keys on a dedicated device and review supported transactions before signing with ERA Wallet. 

Code ****ERABLOG20** for 20% off.

[Explore ERA Wallet ](https://era-wallet.com/?utm%5Fsource=era%5Fblog&utm%5Fmedium=referral&utm%5Fcampaign=custodial%5Fvs%5Fnon%5Fcustodial%5Fwallets&utm%5Fcontent=article%5Fend%5Fcta)