Recent events in the cryptocurrency landscape have highlighted significant discrepancies in security between exchanges and cryptocurrency ETFs. Notably, in September, Bitget, a prominent cryptocurrency exchange, experienced a staggering loss of approximately $352 million from its internet-connected wallets. In comparison, Bybit suffered a much larger hit of about $1.5 billion a year and a half earlier, while WazirX, an Indian exchange, froze withdrawals for an extended period after losing around $230 million in July 2024.
Despite these alarming losses in exchange security, U.S. Bitcoin ETFs have displayed remarkable resilience, now managing over $100 billion in Bitcoin holdings without reporting any losses due to hacks.
The fundamental difference in performance between these two financial vehicles lies not within Bitcoin itself, but in the operational frameworks of exchanges versus ETFs. Cryptocurrency exchanges are primarily designed for trading activities. Users expect immediate access to their assets, allowing them to buy, sell, and withdraw at any hour. Consequently, exchanges maintain a significant portion of their assets in “hot” wallets, which are online and readily accessible, thus increasing vulnerability to cyberattacks.
The nature of how exchanges operate was highlighted by Bybit’s loss, which occurred during the transfer of funds from cold storage to a warm wallet through a compromised signing interface. The attack stemmed from the exposure of exchange operations rather than weaknesses in secure storage systems.
In contrast, the primary purpose of a Bitcoin ETF is to hold assets securely. These funds adhere to a structured schedule similar to traditional stock markets, with transactions processed throughout the day and settled at a specific time. As a result, the majority of Bitcoin held in ETFs can remain in cold storage, with signing keys dispersed across multiple locations and requiring multiple verifications for any movement. This custodial model prioritizes the safekeeping of assets over immediate access, a characteristic fundamental to the safety of the investments.
This model of access versus safekeeping provides crucial insights into the risks each entity type faces. While exchanges must optimize for user accessibility—leading to greater risk—they also become susceptible to cyber crimes that target their online wallets. On the other hand, custodians of Bitcoin ETFs focus on security measures that inherently mitigate the risk of internet-connected breaches, though they may sacrifice accessibility and speed.
It’s worth noting that Bitcoin ETFs are not without risk. A significant proportion of U.S. ETF Bitcoin holdings are centralized among a few custodians, raising concerns about operational risks. Moreover, Bitcoin’s notorious price volatility remains regardless of how it is held, be it in an exchange or an ETF.
For Indian investors not opting for global ETF solutions, alternatives like BitSave offer a secure approach by retaining 100% of client assets within cold storage, managed by a specialized institutional custodian. Additionally, these platforms provide verifiable proof of reserves accessible on the blockchain, aligning more closely with the ETF model than typical exchange models.
The implication for long-term investors is clear; it is not solely about what asset to acquire, but also about how and where that asset will be stored. For those planning to hold Bitcoin for a protracted period, security should take precedence over trading convenience. Assets should be kept in a manner that minimizes the risk of theft.
Note: The above article is authored by Shiv Ram Pande, Chief Business Officer at BitSave. The opinions expressed represent the views of the author and do not necessarily reflect the official stance of LiveMint.
