Ownership of a digital asset ultimately comes down to who controls the private key. Whether that is the holder or a platform determines what is actually owned and what can go wrong.
An exchange balance is a claim, not a coin
When assets sit on a trading platform, the platform holds the keys and records a balance in its internal ledger. The customer holds an entitlement against the company.
Most transfers between customers of the same platform never touch the underlying network. They are database entries adjusted internally, which is why they settle instantly and carry no network fee.
That arrangement is efficient and fast, but the asset backing the entry depends on the platform actually holding what its records say it holds.
Self-custody moves control and responsibility together
A wallet where the holder controls the private key allows transactions to be signed without permission from anyone. No intermediary can freeze or delay them.
The same property removes every recovery mechanism. A lost key cannot be reset, and a transaction signed in error cannot be reversed by an appeal.
Control and irreversibility are the same feature described from two directions, which is why key management becomes the central operational problem.
The failure modes are structurally different
Platform custody fails through insolvency, mismanagement of customer assets, or a breach of the platform's own security. The holder's own precautions do not prevent it.
Self-custody fails through key loss, device failure, backup errors, or a holder being deceived into signing something they did not understand.
Neither eliminates risk. They relocate it from an institution the holder cannot inspect to a process the holder must run correctly every time.
Custodial arrangements vary more than they appear
Some platforms use qualified custodians and segregate customer assets. Others hold assets with far less separation from the company's own balance sheet.
Terms of service, not marketing language, define what the customer holds and where their claim sits if the company fails. The distinction between segregated assets and general obligations is made in that document.
Multi-signature and shared custody models sit between the extremes, splitting key control so that no single party or single failure can move funds alone.
Recovery design is what distinguishes serious setups
Because keys cannot be reissued, any self-custody arrangement is only as durable as its backup, which must survive fire, theft and the holder's own forgetfulness.
Institutional custody addresses this with procedures, geographic distribution and access controls rather than with a single secret held in one place.
The general principle transfers regardless of scale: the question is not where an asset is stored but what specific event would make it permanently unreachable.