A recently uncovered exploit involving Ledger hardware wallets has sparked fresh discussion in the cryptocurrency community, with many investors weighing the safety of self-custody against the use of exchange-traded funds (ETFs) for storing Bitcoin.
Analyst and industry reactions
Bitcoin analyst Plan B noted that his earlier decision to transfer Bitcoin (BTC) holdings to ETFs in 2025 proved prudent in light of the latest Coldcard and Ledger security incidents. Through an X post, he stated that he had “zero regrets” regarding this move, citing the heightened risks highlighted by the hardware wallet vulnerabilities.
Ophelia Snyder, co-founder of 21Shares, emphasized in an email that major asset holders have for years been opting to place coins into ETFs to benefit from the enhanced security these vehicles provide. She remarked that the recent exploits involving hardware wallets have further propelled this migration into public discussion.
Large holders have been converting self-custodied assets to ETFs for “enhanced security” for years, which is one of the main “selling points” for ETFs, 21Shares co-founder Ophelia Snyder stated, adding that the recent exploits made this phenomenon part of the “public discourse.”
Blockchain security researchers have reported that the latest exploit involved a Ledger wallet compromised by an unauthorized hardware implant. Investigations indicate that losses attributable to similar devices could exceed $86 million, amplifying concerns about the ability of cold storage wallets to safeguard assets from sophisticated attacks.
| Custody Option | Security Model | Main Risks |
|---|---|---|
| Hardware Wallet | User-managed, device-based | Physical compromise, user setup errors |
| ETF | Institutional custody | Centralized failure, regulatory issues |
Ongoing trust in hardware wallets, industry opinions
Despite increased awareness of hardware vulnerabilities, some experts maintain that hardware wallets can remain a secure method for crypto storage when used properly. Adam Back, chief executive of Blockstream and inventor of Hashcash, pointed out that manufacturers must improve their threat modeling to keep pace with evolving attack strategies.
Surprisingly few manufacturers understood the generic attacks, or so it seemed from their marketing and design choices, for the last decade. Time to catch up with threat-modelling, Adam Back wrote in a statement.
Snyder further stated that self-custodial wallets place much of their security burden on users’ technical proficiency and the specific security measures individuals implement.
Jameson Lopp, a researcher and prominent cypherpunk, noted that while self-custody options can provide strong security, sudden and broad shifts away from them could create new vulnerabilities if too many holders act simultaneously.
The discussion underscores the cryptocurrency industry’s ongoing challenge in balancing security, user autonomy, and convenience across rapidly evolving technology platforms.
Mini dictionary: Ledger, a leading French company in digital asset security, manufactures hardware wallets that allow individuals to store cryptocurrencies offline, providing what is widely considered a secure way to manage private keys and prevent online hacking attempts. However, these devices are still susceptible to certain attacks, especially if they are physically tampered with before use.
