Self-custody, exchange custody or off-exchange custody: where $1 million or more in crypto sits while you sell it

What it changes

• Timing. Nothing moves until you sign. You pick the day, the amount and the counterparty, and a quote can be requested before any coin leaves the device.
• No retail deposit step. A counterparty that transacts from self-custody takes the coins for the single transaction. There is no exchange account to open, no inbound review of a seven-figure deposit from an unfamiliar address, and no fiat withdrawal limit between the sale and the wire. The published exchange limits never apply because there is no exchange balance.
• Ownership is proven cryptographically, not by statement. You sign a message with the key that holds the balance, or send a small test transfer from it. Ledger describes a signature request as having no interaction with the blockchain and no gas; it proves control of the key (Ledger Academy). Trezor Suite’s Sign and Verify does the same for Bitcoin, Bitcoin-like and EVM accounts, though not for Taproot accounts (Trezor guide). RealOpen’s help centre walks through both methods: signature versus test transfer, Ledger, Trezor.
• Counterparty exposure is bounded to the transaction. The counterparty holds your coins between the moment your transfer confirms and the moment it executes and settles, not for the weeks or months a deposit sits in an exchange account. That window is short, but it is not zero: choose the counterparty, and verify the deposit instructions, with the care the amount deserves.

Signing a transaction is not the same as pairing a wallet app

Three actions get called “signing” and they do different things. Signing a message produces a proof of control and moves nothing. Signing a transaction authorises one transfer of a stated amount to a stated address, which you read and approve on the device. Approving a token allowance, the kind of prompt a decentralised application raises after you pair a wallet with it, is an on-chain permission that lets a smart contract move a set amount of a token without further signatures, often until revoked (Ledger Academy). Ledger and Trezor both ship with blind signing, approving a transaction whose details the device cannot display, turned off by default, and both now decode supported contracts into readable text on the device (clear signing). A large sale needs the first two actions and never the third. A counterparty that asks you to pair a wallet application or approve an allowance in order to sell is asking for more than the sale requires.

What it does not change

• Screening and provenance. The business you sell to is a regulated money services business or its equivalent and will verify your identity, screen the sending address with blockchain analytics and, at this size, ask for source of funds and source of wealth. FinCEN’s 2019 guidance draws the regulatory line at who controls the value: a host with total independent control over a customer’s funds is a money transmitter, while the owner of an unhosted wallet transacting for their own account is not (FIN-2019-G001, section 4.2.1). That makes your wallet unregulated and your counterparty regulated; it does not exempt the sale from the counterparty’s obligations. Assemble the file before you need it: how to document crypto as a source of funds.
• Execution. Your wallet does not sell anything. A desk, an exchange or a conversion service executes the trade through its own liquidity, and the quality of that execution is its, not yours.
• Fiat settlement. Dollars move through banks. The counterparty wires to an account verified in your name, or to a destination such as escrow that it has verified, and the receiving bank applies its own review. No wallet changes that.
• Key security is yours. Loss of the device and recovery phrase, a mis-typed address, a transfer sent on the wrong network: none of these has a support desk. The cost of not depending on a custodian is being the custodian.
• Tax. The IRS treats digital assets as property; a sale for U.S. dollars is a reportable disposition from whichever custody model it happens in (IRS, digital assets). Custody changes who sends you the 1099-DA, not whether the gain exists.

• Coinbase (U.S. user agreement, last updated October 21, 2026): title to supported digital assets remains with the customer and the assets are held for the customer’s benefit, not as Coinbase’s property or subject to its creditors; Coinbase retains control of the private keys; it may hold customer and corporate assets in shared blockchain addresses with separate internal ledgers and has no obligation to create a segregated address; and it may suspend, restrict or terminate access for any reason at its sole discretion (sections 2.7.1, 2.7.3, 2.7.4 and 6.10).
• Kraken (global terms, last updated November 6, 2026): title stays with the customer and the assets are not Kraken’s property, with the candid caveat that a court could disagree and that the assets are subject to the claims of Kraken’s creditors; shared blockchain addresses that Kraken controls; the right to suspend, restrict or terminate access without prior notice and to suspend withdrawals for legal or regulatory reasons (sections 2, 3 and 15).
• Gemini (Gemini Trust Company user agreement, dated November 4, 2026): the customer retains full title at all times and the assets are not treated as Gemini’s general assets; outside the separate Custody Account, digital assets are held in an omnibus account; Gemini may suspend an account and freeze the assets in it on suspected violations or regulatory order, and terminate at any time (Your Digital Assets; Account Suspension).

Read together: the exchanges say the coins are yours, hold them in shared addresses under their keys, and reserve the right to stop you moving them. The unresolved part is what a U.S. court would make of that in an exchange insolvency. Coinbase said so itself in its quarterly report for the first quarter of 2022, under a risk factor on safeguarding customer assets: it held $256 billion of customer fiat and crypto in custody, and because custodially held crypto may be considered the property of a bankruptcy estate, customers could be treated as its general unsecured creditors (Form 10-Q, May 2022). In the Celsius case the bankruptcy court held on January 4, 2023 that assets in that platform’s Earn accounts had become the debtor’s property because the terms of use transferred title, leaving those account holders as unsecured creditors; the court expressly did not decide ownership of assets in the platform’s Custody program (In re Celsius Network, Doc. 1822). The lesson is not that exchanges are unsafe. It is that an exchange balance is a contract, and the contract’s wording decides what you own.

What exchange custody does well, and where the friction is

The exchange gives you an order book, often an OTC desk, and fiat rails in one account, and a verified customer with raised limits can sell and withdraw seven figures. Several U.S. venues publish their OTC minimums, fiat limits by rail and the account tiers that unlock higher ones; the cornerstone’s exchange tables carry those figures with dates. The friction is structural rather than a flaw: a first-time seller arrives at the entry fee tier and the default limits; a large deposit from an address the exchange has never seen is reviewed; a sale credits the exchange balance and the dollars leave under per-rail limits, holds and a bank-account verification that may require a test deposit in the exact account name; and the account can be restricted while any of that is examined. Each step is reasonable on its own. Together they are why selling $5 million is not the same as receiving $5 million.

Exchange-held crypto also cannot be verified on-chain as yours, because the deposit address belongs to the exchange. That is why RealOpen’s standard wallet verification is built for self-custody and why exchange balances are handled by a coordinated process instead (buyer FAQ).

Segregation is operational; protection is legal, and the two are not the same claim

Every provider above says the assets never sit on the exchange. That is a statement about operations: where the keys are and when transfers happen. Whether the assets are protected if the exchange, the custodian or the client fails is a statement about law, and it depends on the structure, the jurisdiction and the paperwork. Copper and Zodia point to trust structures; Komainu to segregated wallets and a tri-party agreement whose enforceability it says varies by jurisdiction; Fireblocks to the fact that nobody can move a jointly controlled wallet alone, which it explicitly distinguishes from legal protection; BitGo to a national trust bank charter. None of the pages read on November 8, 2026 publishes a jurisdiction-by- jurisdiction insolvency analysis, and the unsettled gain from the current cycle sits with the exchange until the cycle runs. Treat “assets never leave custody” as a description of the mechanism, and ask the provider for the legal opinion that goes with it. Do not assume two providers’ structures are interchangeable because the marketing sounds alike.

How it differs from your own cold storage

• Someone else holds the keys. In every model above, the custodian holds the keys or a controlling share of them. In Fireblocks’ design the client co-controls the vault; in the others the client instructs and the custodian signs. Your hardware wallet has one keyholder, you.
• The purpose is continuous trading, not one sale. Off-exchange custody exists so a fund can trade all day without pre-funding exchanges. A holder who wants to turn one position into dollars does not need a settlement network; they need one counterparty and one wire.
• It is institutional. Every provider describes institutional clients and most say so exclusively. Family offices appear by name only in Bitget’s eligibility list; individuals appear nowhere.
• It does not produce dollars in your bank. The products settle crypto, and in BitGo’s case U.S. dollars, between network participants. None of the pages read describes settling the proceeds of a sale to the client’s own bank account; that step still runs through the venue’s or custodian’s fiat arrangements, and the receiving bank’s review.

Route A suits a holder who already has a verified exchange account with raised limits and a bank on file; for them it is routine, and often the cheapest in dollars. Route B suits an entity that trades continuously and wants market access without leaving balances on exchanges; it is heavy for one sale, and the products are not offered to individuals. Route C suits the holder in this scenario: one conversion, no exchange account, control kept until a quoted transfer, and one party accountable for execution, documentation and the wire. What C does not do is remove intermediaries. The service, its liquidity provider and its banks are regulated counterparties with their own obligations, and the receiving bank or escrow agent decides for itself whether to accept the wire.

Before any of the three, know four things about the counterparty: where your Bitcoin will be held at each step, the moment you lose the ability to reverse course, who executes the sale and at whose price, and the exact account the dollars land in. If a provider cannot answer those in writing, the custody model is the least of your problems.