Self-Custody and Security
Holding your own keys removes one risk, the platform that holds your coins on your behalf, and hands you several new ones. You become responsible for the seed backup, for checking every address before you send, for every contract permission your wallet has ever granted, and for knowing which bridge or exchange you are trusting when you move funds between chains. Most losses in self-custody come from one of a short list of mistakes, and this pillar walks through each of them.
The guides follow the order in which a reader usually meets the problems. First, what a wallet actually stores and how a recovery phrase rebuilds it. Then the device: the criteria that matter when choosing a hardware wallet, and the checks that show a new one has not been tampered with before it holds a single coin. Then the move itself: withdrawing from an exchange to an address you control, choosing the right network, adding memos or tags where the destination needs them, and sending a small test first. After that come the ongoing risks: token approvals and permit signatures that let a contract spend your tokens long after you forgot about them, bridges that hold pooled collateral, and the reserve checks worth running on any exchange you still use.
These pages sell nothing. They name no favourite wallet and carry no affiliate links, and product details come from maker documentation with a check date. When a step depends on a particular wallet or exchange interface, the guide describes what to look for rather than where to click, because interfaces change faster than the underlying rules.
Where to start
Moving coins off an exchange for the first time? Read the withdrawal guide, then the seed backup checklist before the wallet holds anything you cannot afford to lose. If you have used decentralized apps, run the token approval review next, since old permissions are the risk most self-custody users never check.
Guides in this topic (10)
- Learn guideWhat Is a Crypto Wallet? Keys, Seed Phrases, Custody, and SigningWhat a crypto wallet actually does: key pairs and addresses, BIP39 seed phrases and derivation, custodial vs self-custody, hot and cold storage, multisig, signing risks, and a backup checklist.
- CustodyHow to Move Crypto From an Exchange to Your WalletMove crypto off an exchange without losing it: address checks, network matching, memo rules, a test-transfer routine, allowlists, fees and IRS treatment.Reviewed 2026-10-22
- CustodyCrypto Wallet Recovery and Seed Backup ChecklistA safety-first wallet recovery guide covering seed phrases, passphrases, descriptors, multisig backups, recovery drills, inheritance, incident triage, and scam resistance.Reviewed 2026-07-11
- SecurityHow to Choose a Hardware Wallet: 10 Criteria to CheckA pre-purchase checklist for hardware wallets: firmware, chips, connections, backups, passphrase, multisig and authenticity checks, from maker docs.Reviewed 2026-10-22
- SecurityIs My Hardware Wallet Genuine? How to Check for TamperingA vendor-neutral checklist for confirming a hardware wallet is genuine and untampered: purchase channel, seals, attestation, seed generation, first use.Reviewed 2026-10-22
- SecurityHow to Revoke Token Approvals and Stop DrainersHow ERC-20 approvals, permit signatures, Permit2 and NFT operator approvals work, how drainers abuse them, how to revoke, and what revoking can't fix.Reviewed 2026-10-22
- EducationCrypto Bridge Hacks Explained: How Bridges FailWhy cross-chain bridges get drained: Ronin, Wormhole and Nomad from post-incident sources, a failure-mode table, wrapped-token math, and a checklist.Reviewed 2026-10-22
- Exchange RiskCrypto Exchange Proof of Reserves: A Solvency and Liquidity Audit ChecklistAudit crypto exchange reserves, customer liabilities, encumbrances, legal segregation, Merkle proofs, liquidity, assurance scope, and withdrawal risk with worked coverage ratios.Reviewed 2026-07-11
- SecurityAddress Poisoning Scam: How It Works and the FixHow address poisoning scams work, why lookalike addresses are cheap to make, three variants, what research found and a copy-and-verify routine that stops it.Reviewed 2026-10-23
- SecurityCrypto Wallet Drained: Find the Cause Before You ActWallet drained? Check who signed the draining transactions, then match the fix: approval, signature, exposed key, malware or exchange login. Official channels.Reviewed 2026-10-23
Other topics
CryptosEyes publishes general educational research, not investment, tax or legal advice. See the methodology and disclaimer.