bitcoin custody self-custody security multisig

BlockFills Frozen Assets Show Why 'Not Your Keys, Not Your Coins' Still Matters in 2026

Bitcoin Index · · 9 min read
BlockFills Frozen Assets Show Why 'Not Your Keys, Not Your Coins' Still Matters in 2026

On March 3, 2026, a federal judge in New York froze 70.6 Bitcoin worth roughly $5 million held by BlockFills, a Chicago-based institutional crypto trading platform. The freeze came after creditor Dominion Capital filed a lawsuit alleging that BlockFills misappropriated customer assets, commingled funds, and concealed approximately $75 million in losses during the recent market downturn.

BlockFills isn’t some fly-by-night operation. The platform is backed by major trading firm Susquehanna, served around 2,000 institutional clients including hedge funds and asset managers, and processed $60 billion in trading volume in 2025 alone. Yet customers have been locked out of their funds since February 11, when BlockFills suspended withdrawals citing “recent market and financial conditions.”

The case is a textbook example of why the Bitcoin community’s foundational principle still holds: not your keys, not your coins.

What Happened to BlockFills

The timeline tells a familiar story:

February 11, 2026: BlockFills halted customer deposits and withdrawals as Bitcoin dropped to $60,000. The company said it needed to “protect clients and restore liquidity” while allowing users to continue trading existing positions.

February 25: Co-founder and CEO Nicholas Hammer stepped down amid reports of $75 million in lending losses.

February 27: Dominion Capital, a New York investment firm, filed suit alleging BlockFills unlawfully retained customer crypto, commingled funds with operational capital, and refused to return Dominion’s 70.55 BTC despite repeated requests.

March 3: Judge Mary Kay Vyskocil issued a temporary restraining order freezing the contested bitcoin and barring BlockFills from moving assets outside the United States. The court found evidence of “immediate and irreparable injury” to Dominion.

Insolvency experts expect BlockFills to file for bankruptcy soon. Thomas Braziel of 117 Partners told CoinDesk: “After something like this, no serious institution is touching the platform. They are going to have to file for bankruptcy.”

The Custody Risk No One Talks About

When you deposit bitcoin on an exchange or trading platform, you don’t own bitcoin. You own an IOU. The exchange controls the private keys. You have an account balance. There’s a big difference.

In most jurisdictions, exchange-held crypto is considered a general creditor asset. If the platform goes bankrupt, you become an unsecured creditor competing with everyone else for whatever’s left. There’s no FDIC insurance. No SIPC protection. Just you, the bankruptcy court, and however many years it takes to sort things out.

FTX customers are still waiting. Celsius users waited years for partial recoveries. Mt. Gox creditors waited over a decade.

The pattern repeats: credible platform, institutional branding, sudden withdrawal freeze, frozen assets, bankruptcy, years of uncertainty.

Institutional credibility doesn’t eliminate counterparty risk. It just makes the marketing more polished.

The Custody Spectrum: Three Models

Understanding your custody options is the single most important security decision you’ll make as a Bitcoin holder.

1. Exchange Custody (Highest Risk)

How it works: You deposit bitcoin to a platform. They control the keys. You get an account balance.

Legal status: If they fail, you’re an unsecured creditor. No insurance. No guarantees.

Risks:

  • Insolvency (BlockFills, FTX, Celsius)
  • Hacking (Mt. Gox lost 850,000 BTC in 2014)
  • Fraud (FTX’s Sam Bankman-Fried misused customer funds)
  • Regulatory seizure (courts can freeze exchange wallets)
  • Commingling (customer deposits mixed with operational funds)

When it makes sense: Active day trading with small amounts. Daily spending money. Users who lack technical skills for self-custody.

Rule of thumb: If you’re not actively trading it, get it off the exchange.

2. Qualified Custody (Middle Ground)

How it works: Assets held by a regulated custodian like BitGo, Coinbase Custody, or Fidelity Digital Assets. Custodian must segregate client assets from company funds, carry insurance, and submit to third-party audits.

Legal protections:

  • Bankruptcy-remote accounts designed to survive custodian insolvency
  • Regulatory oversight (SEC/OCC requirements)
  • Segregation mandates (your bitcoin isn’t on their balance sheet)
  • Crime insurance and crypto-specific coverage

Operational features:

  • Cold storage in geographically distributed vaults
  • Multi-signature authorization for withdrawals
  • SOC 2 Type II audits and proof-of-reserves attestations

Trade-offs:

  • Withdrawal delays (hours to days for cold storage)
  • Fees (typically 0.10% to 0.50% annually on assets under custody)
  • KYC/AML requirements

When it makes sense: Institutional investors with regulatory requirements. Large holdings where professional management and insurance justify costs. Estate planning scenarios where third-party verification helps heirs.

3. Self-Custody (Full Sovereignty)

How it works: You generate and control your own private keys. No third party can freeze, seize, or block access.

Types:

  • Hot wallets (software on phones/computers): Convenient for small amounts, vulnerable to malware
  • Hardware wallets (Ledger, Trezor, Coldcard): Private keys never leave the device, immune to computer viruses
  • Multi-signature (2-of-3 or 3-of-5 setups): Requires multiple keys to authorize transactions, eliminates single points of failure

Legal status: In most jurisdictions, self-custodied crypto is personal property you fully own. Cannot be seized in someone else’s bankruptcy. Can only be taken via court judgment against you personally.

Risks:

  • User error (lost seed phrases, wrong addresses, phishing)
  • Physical theft or loss
  • Death without recovery plan for heirs
  • No insurance or customer service to call

When it makes sense: Long-term holdings. Anyone holding more than they can afford to lose to exchange failure. Users comfortable with technology and willing to learn key management basics.

How Multi-Signature Custody Works

Multi-sig is the most robust form of self-custody. Instead of one private key controlling your bitcoin, you create multiple keys and require a threshold (say, 2 out of 3) to authorize transactions.

Example 2-of-3 setup:

  1. Key 1: Hardware wallet (Coldcard) in your home safe
  2. Key 2: Hardware wallet (Trezor) at your office or second location
  3. Key 3: Held by a service like Unchained or Swan Bitcoin or stored at a third location

Security properties:

  • Theft resistant: Attacker must compromise TWO keys, not one
  • Loss resistant: If one key is destroyed, funds remain accessible via the other two
  • Coercion resistant: Even under duress, a single keyholder can’t move funds alone
  • Inheritance-friendly: Heirs can access funds if they locate any two of three keys

How transactions work:

  1. Create unsigned transaction in wallet software
  2. Sign with first hardware wallet (verifies details on device screen)
  3. Export partially signed transaction to second hardware wallet
  4. Sign with second wallet
  5. Broadcast fully signed transaction to network

No single device or location ever holds all keys. Even if someone steals one hardware wallet, they can’t move your bitcoin.

Collaborative custody services like Unchained offer a hybrid model: you control two keys, they hold one. For normal spending, you use both your keys (company isn’t involved). If you lose a key, they can countersign for recovery after identity verification. They can’t unilaterally move funds, so you maintain sovereignty.

For technical details, Trezor’s guide and the Bitcoin Wiki entry on multi-sig are excellent starting points.

Practical Custody Guidance

There’s no one-size-fits-all answer. The right custody model depends on how much you hold, your technical comfort level, and how often you need access.

Suggested tiers:

AmountCustody ModelWhy
Under $1,000Mobile hot walletConvenience beats security risk for small amounts
$1,000 to $10,000Hardware walletSingle-sig cold storage, one-time device cost justified
$10,000 to $100,000Multi-sig or collaborative custodyWorth the complexity to eliminate single points of failure
$100,000+Multi-sig (3-of-5) or qualified custodianMaximum security, consider insurance and estate planning
InstitutionalQualified custodianRegulatory compliance, audit requirements

For active traders: Keep only working capital on exchanges. Move long-term holdings to cold storage immediately after purchase.

Essential practices:

For self-custody:

  • Backup seed phrases on paper or metal, store in fireproof safe or safety deposit box
  • Test recovery before depositing large amounts
  • Distribute keys geographically (defeats fire, flood, theft at single location)
  • Verify addresses before sending (malware can swap clipboard contents)
  • Small test transactions before large sends
  • Estate plan: Document seed phrase locations for heirs

For exchange use:

  • Enable 2FA with hardware keys (Yubikey) or authenticator apps, never SMS
  • Withdrawal allowlisting if available
  • Regular withdrawals to self-custody
  • Monitor red flags: sudden withdrawal freezes, leadership changes, opacity about reserves
  • Check proof-of-reserves: Prefer platforms publishing third-party audited PoR

The Pattern That Keeps Repeating

BlockFills joins a long list of custody failures:

  • Mt. Gox (2014): 850,000 BTC lost to hacking, customers waited over a decade for partial recovery
  • Celsius (2022): Withdrawal freeze, bankruptcy, ongoing proceedings
  • FTX (2022): $8+ billion in customer funds missing, founder convicted of fraud
  • Voyager (2022): Insolvency from exposure to failed hedge fund Three Arrows Capital

Common patterns:

  1. Commingling customer funds with operational capital or trading bets
  2. Lack of transparency (no real-time proof of reserves)
  3. Sudden withdrawal freezes without warning
  4. Lengthy bankruptcy proceedings with uncertain recovery
  5. Institutional branding that didn’t prevent the same failure modes

The lesson: counterparty risk is existential. If you don’t control the private keys, you don’t control the bitcoin. No amount of credibility, backing, or marketing eliminates that risk.

Key Takeaways

  1. Exchange-held crypto is an IOU, not possession. If the platform fails, you’re an unsecured creditor with no insurance protection.

  2. Custody risk is the #1 risk factor. More bitcoin has been lost to exchange failures than to well-secured self-custody setups.

  3. Institutional branding doesn’t equal safety. BlockFills had Susquehanna backing and 2,000 institutional clients. FTX was the second-largest exchange globally. Both failed.

  4. Self-custody has a learning curve, but it’s worth it. Hardware wallets and multi-sig eliminate the existential risk of third-party failure.

  5. For large holdings, multi-sig is the gold standard. A 2-of-3 setup removes single points of failure while keeping you in control.

  6. Qualified custodians offer a middle ground for institutions. If regulations mandate third-party custody, choose audited, insured custodians with bankruptcy-remote structures.

  7. Match custody to use case. Cold storage for long-term holdings, hot wallets for spending money. Don’t keep $100,000 in a mobile wallet or $50 in a multi-sig vault.

  8. Withdrawal freezes signal insolvency. When platforms halt withdrawals, assume the worst. History shows it’s rarely temporary.

  9. Estate planning is essential for self-custody. Your heirs can’t access bitcoin without your seed phrase or multi-sig recovery plan.

  10. There is no FDIC for crypto. Bankruptcy proceedings are your only recourse, and they take years with uncertain outcomes.

The BlockFills case is still unfolding. BlockFills must respond to the court by March 17, when the temporary restraining order expires. But the broader lesson is already clear: if someone else holds your keys, you’re taking a bet on their solvency, honesty, and competence. In 2026, that bet has failed too many times to ignore.

Sources