You can hold the seed phrase, keep the hardware wallet in a drawer and still have plenty of uncertainty when the coins start moving. Self-custody starts with holding keys, but control extends into recovery methods, exchange rates, network conditions and security incidents. Each of these factors shapes what actually happens after you click "send."

Our recent self-custody guide starts with a deceptively simple test: who can move the money? In a self-custody wallet, the user controls the credentials used to authorize transactions. The assets themselves stay on the blockchain. The wallet connects to the network, displays the balance and signs transactions.

Seth For Privacy, COO at Cake Wallet, put it more directly:

It is super simple. It is just who has access to move money. That is who the custodian is. If it is just you, that is great. You are the custodian.

The interesting part comes when access is lost. A seed phrase can recreate a wallet in another compatible application. A passkey can depend on a particular service, domain or stored file. The choice can sit unnoticed for months, then become the first thing that matters when a phone disappears.

Cold storage looks like a straightforward next step. Our cold wallet safety guide points out why it helps: private keys stay offline, cutting off remote malware and many phishing attacks. Then comes the uncomfortable Coldcard example. If the device generates a weak key, the exposure starts before the owner even writes down the seed phrase. Coinkite estimated that affected older-model seeds had around 40 bits of entropy. Losses topped $115 million across more than 5,000 addresses in under a week.

That makes the next item in this digest surprisingly relevant. Control can also mean deciding when a swap should happen.

With Limit Orders, users choose a target exchange rate and a timer of 4 hours, 24 hours or 7 days. When the market reaches the selected price, the swap executes automatically. The short below shows the whole idea in a few seconds.

Of course, setting the terms of a swap does not determine everything that happens afterward. Our recent article on receiving less crypto than expected starts with a familiar situation: you send 1 ETH to buy USDC and the amount you receive looks smaller than expected. The usual explanations are a network fee or a rate movement while the transaction confirms. A block explorer can show which one affected the final amount. Fixed mode locks the terms, while Classic mode lets the payout move with the market during confirmation.

We also looked at our swap results over the previous three months: 98% of swaps completed at or within 0.5% of the original estimated rate. That number is useful precisely because it leaves room for the cases that require a closer look.

Then the subject gets much less theoretical. On August 9, wallets linked to Coinsbuy were drained of more than $8 million across Ethereum and TRON. Part of the stolen funds was moved toward Monero through several exchange services. The exact attack details circulating in the media had not been officially confirmed, so our coverage of the hack keeps that distinction clear. It also looks at the security measures businesses can put around custody, including multisig, cold storage, withdrawal limits and real-time monitoring.

A separate case shows why monitoring can matter after a wallet has already been compromised. A victim installed a spoofed tax application and lost 497,000 HBAR from a HashPack wallet. We received intelligence on the related addresses, blocklisted them and identified a transfer worth about $44,498.90. We secured the funds, then transferred them to the FBI after a formal seizure request and the required compliance checks.

The final question is harder to see in a wallet interface. How much of your financial life can other people reconstruct?

Our joint research with CoinRabbit, covered by Decrypt, looks at privacy from several very practical angles: protection against physical coercion, corporate confidentiality and access to financial services under sanctions. The report argues that privacy tools can serve legitimate protective functions while enforcement pressure can remain concentrated at fiat off-ramps.

Walter Barrett, Chief Strategy & Growth Officer at CoinRabbit, described the personal side of public blockchain data:

Privacy is a basic expectation in everyday life, but public blockchains leave all transactions in the open. Finding a balance here is simply about making digital capital safe to use.

Coinpedia's coverage of the same research gives the report a second industry perspective and focuses on its findings around legitimate and illicit uses of privacy-preserving technology.

So, Who Controls What?

A private key gives you the authority to sign. A recovery method can determine whether you can regain that authority. A swap order can set the conditions for execution. Network fees, confirmation times, security incidents and public transaction records bring other variables into the picture.

That is where the idea of crypto control gets interesting. You can follow each point where your decision ends and something else starts.