Key Takeaways
- Pompliano said ETFs are the most secure option for holders of $10,000 to $10M in bitcoin.
- Blackrock’s IBIT relies on Coinbase as sole custodian for 815,000 BTC, a single point of failure to critics.
- U.S. spot bitcoin ETFs lost $1.28B last week, so the custody debate now runs into Tuesday’s CPI print.
“Optimizing for Security”
The investor and podcast host made his case when he was asked how someone should store a meaningful amount of bitcoin. Pompliano pointed away from cold storage devices that bitcoiners have pushed for years, instead stating:
“If you’re just optimizing for security, probably the ETF is the single most secure thing for people to do.”
Being a longtime BTC advocate, the remark lays in stark opposition to the “not your keys, not your coins” ethos that has been the bitcoin community’s mantra from day one.
Self-custody solutions let an owner hold the private keys that control their funds, but an ETF hands those keys to a regulated custodian and gives the investor a brokerage share instead.
A Bad Few Weeks for Hardware Wallets
His timing was not random, as over the past month alone, several hardware wallet makers have been dealing with a myriad of security problems. Trezor, for instance, warned customers about a malicious hardware implant found inside a Safe 5 bought from a former reseller, a case tied to a $93 million Ledger security scandal involving the same distributor.
Similarly, Keystone said it would be destroying a total of 18,835 hardware wallets after attackers stole the key used to verify its devices as genuine. Passport maker Foundation also disclosed a customer data breach.
In fact, leaked buyer data has introduced a heavy physical risk component as well, with investor Evan Luthra recently describing how five masked men forced their way into his car in Oxford. They subsequently assaulted him and took over $2 million in crypto (all within a span of just 30 minutes).
The Case Against Pompliano
ETFs have their own concentration problem because shortly after Binance’s $6.3 billion hack, Onekey founder Yishi Wang warned that North Korean hackers could target Blackrock’s iShares Bitcoin Trust (IBIT) next. He noted that the fund held about 815,000 BTC with Coinbase as its sole custodian, and he called that a single point of failure.
Coinbase has pushed back on that kind of worry after the Binance breach, as the exchange said more than 99% of customer assets sit in cold storage, and its institutional custody vault runs entirely offline.
There are trade-offs beyond hacking, as ETF shareholders cannot move their bitcoin onchain, cannot use it for payments, and can only sell when markets are open. Peter Schiff highlighted that limitation in October, warning that ETF investors “can’t sell until Monday” during a weekend slide.
ETF investors have also been heading for the exit, with U.S. spot bitcoin ETFs posting $1.28 billion in outflows last week, the largest weekly drain in about four months.
Security Versus Sovereignty
Pompliano’s entire argument rests on one variable, i.e. protection against loss. For many investors, the bigger danger is not a nation-state hacker but a lost seed phrase, a phishing link or a fake device bought from the wrong seller. A regulated fund removes those failure points and replaces them with custodian, counterparty, and market-hours risk.
On the other hand, self-custody advocates measure something else, à la control, because bitcoin held through a broker can be frozen, delayed, or restricted by the institutions bitcoin was built to bypass.
