On this page
Key Takeaways
- Estimates of permanently lost Bitcoin range from about 8.5% of supply to roughly 18%, and the cause is usually mismanaged keys rather than hacks or fraud.
- Legal and operational asset segregation keeps client funds separate from a custodian’s operational capital, preventing customer deposits from being used for proprietary trading or becoming unsecured creditor claims.
- Specie insurance policies cover a custodian’s physical cold storage infrastructure, whereas Digital Asset Comprehensive Crime coverage directly protects client assets against external hacking, employee theft and third-party provider breaches.
- Institutional insurance facilities underwritten by Lloyd’s of London syndicates can use dynamic policy limits that automatically adjust coverage amounts based on cryptocurrency market price fluctuations.
Comparison of Digital Asset Insurance Coverage Types
| Coverage Type | Primary Target | Covered Events | Client Recovery Path |
|---|---|---|---|
| Specie Coverage | Custodian physical infrastructure | Theft or destruction of cold storage hardware and vaults | Indirect protection for client assets |
| Digital Asset Comprehensive Crime (DACC) Coverage | Client digital assets | External hacking, internal employee theft and service provider breaches | Direct path to financial recovery |
“Not your keys, not your coins” became the standard advice after FTX collapsed and billions of dollars in customer funds vanished.
That advice is sound as far as it goes, and it leaves out the risks that come with holding the keys yourself.
Crypto asset security has moved well past the early DIY days. While the public conversation stayed on exchange failures, institutional custody, professional insurance and risk management have been reshaping how large balances get protected.
Where Self-Custody Breaks Down
Self-custody makes sense right up to the point where it concentrates every risk in one place. Blockchain transactions are irreversible, and there are no chargebacks, no customer service line and no password reset.
Estimates put permanently lost Bitcoin between about 8.5% and 18% of supply, mostly through mismanaged keys. That’s hundreds of billions of dollars in value, lost to human error more than to hacking or fraud.
Then there’s what happens when self-custody meets real life. Your health declines and you can’t communicate how to reach the accounts, a fire destroys the hardware wallet, or someone pressures you into moving funds under duress. Traditional finance has safeguards built for those situations. Pure self-custody has few of them.
Succession is the other gap. Without an inheritance plan that someone can actually follow, the keys stop working for your family once you’re no longer there to use them. A lot of people holding crypto haven’t worked that part out yet.
Your Custodian’s Balance Sheet Matters More Than Their Security
The FTX collapse taught the market a lesson that had nothing to do with blockchain technology. The exchange failed on basic financial mismanagement and alleged fraud.
FTX reportedly mixed customer funds with its own operational capital, then used those assets for high-risk trading through Alameda Research. When that trading failed, customers found they were no longer asset owners. They’d become unsecured creditors, in line with everyone else hoping to recover a fraction of what they put in.
That’s the difference between operational risk and counterparty risk. Strong cold storage doesn’t help if the custodian’s business model is unsound, because the assets are still exposed.
The defense is legal and operational: asset segregation, where client funds stay separate from the firm’s capital at all times.
What Crypto Insurance Actually Covers
A lot of exchanges advertise that they’re “insured,” and the word covers two different kinds of policy.
The first is specie coverage, which protects the custodian’s infrastructure. Think of it as insurance on the bank vault rather than on the money inside. It covers events like theft or destruction of cold storage hardware, and it protects your assets only indirectly.
The second is Digital Asset Comprehensive Crime (DACC) coverage, written to protect client assets from external hacking, employee theft and breaches at outside service providers. It gives a direct path to financial recovery if assets are stolen or misappropriated, subject to the terms and limits of the policy.
The difference matters: one keeps the custodian operating and the other is what pays you back.
How the Insurance Market Has Changed
While retail investors debate self-custody against exchanges, institutional players have been building something else. The professional insurance market has moved past treating crypto as an “uninsurable” asset class.
Major carriers, Lloyd’s of London syndicates in particular, now underwrite digital asset risks. Specialized facilities can assemble hundreds of millions of dollars in coverage capacity for a single institutional client.
Underwriters have also adapted to how crypto prices move. Some policies now include dynamic limits that adjust coverage amounts as the price of the insured assets changes, so protection tracks market swings instead of going stale.
That’s a real change in how the insurance industry treats digital assets, moving from experimental coverage to institutional products.
The Protection Gap
Even so, a lot of people holding crypto have no coverage at all. Industry surveys put the uninsured share of digital asset owners at a large majority, and the exact figure varies by survey.
Demand is there. Surveys of uninsured crypto owners find that a meaningful share would buy coverage if it were readily available, with more open to considering it.
That gap shows a market still in transition. Appetite for risk transfer has outpaced the insurance industry’s ability to underwrite retail coverage for a new and complex asset class.
The result is a “flight to quality” dynamic, where investors increasingly ask for properly structured and insured arrangements and move away from platforms that offer neither.
Contact DAG if you’d like to talk through how professional crypto custody could fit your situation.
Where Digital Asset Protection Stands Now
Crypto security has matured from a technical problem into a financial one. The DIY approach of early bitcoin made sense at the time, and it doesn’t cover everything that comes with managing significant wealth.
Professional risk management, sound legal structures and real insurance coverage now sit at the center of digital asset security. The tools to manage crypto’s risks exist, and using them takes knowing where to look and what to ask.
Our team sees this shift in work with crypto-native families and institutions. Protecting generational wealth takes more than controlling private keys. It takes the same disciplined approach to custody, insurance and legal structure that has protected significant wealth for a long time, adapted for digital assets.
Crypto keeps moving toward a professional asset class, and the security strategy around it can move at the same pace.
Frequently Asked Questions
What are the primary risks of crypto self-custody?
Self-custody creates a single point of failure because blockchain transactions are irreversible, with no customer support and no password recovery. Industry estimates of permanently lost bitcoin range from roughly eight percent to close to twenty percent of supply, mostly from mismanaged private keys. Physical wallet destruction, medical incapacity, duress and a lack of inheritance planning can also leave digital wealth permanently out of reach without the safeguards traditional finance provides.
How does asset segregation protect crypto investors from custodian failure?
Asset segregation keeps client funds separate from the custodian’s operational capital at all times. During the FTX collapse, the exchange mixed customer deposits with its own capital to fund high-risk trading. When that trading failed, customers became unsecured creditors hoping to recover a fraction of what they put in. Legal and operational segregation is designed to stop custodians from using customer assets for company operations or trading.
What is the difference between specie and DACC insurance for crypto?
Specie coverage protects a custodian’s physical infrastructure, such as cold storage hardware or the facility vault, which protects the underlying assets only indirectly. Digital Asset Comprehensive Crime (DACC) coverage protects client assets directly against external hacking, employee theft and service provider breaches. DACC insurance gives a direct path to financial recovery if customer assets are stolen or misappropriated, subject to the policy terms.
How do institutional insurance policies account for crypto price volatility?
Some institutional crypto insurance policies feature dynamic limits that automatically adjust coverage amounts based on the fluctuating prices of the insured assets. That design helps coverage keep pace with market volatility rather than leaving holdings underinsured when prices rise. Major carriers, including Lloyd’s of London syndicates, now underwrite these specialized digital asset facilities.