Is a non-custodial swap completely risk-free?

No. Non-custodial swaps remove counterparty and custody risk, but not all risk. Smart contract bugs in HTLC implementations can be exploited if improperly coded, and the process generally requires more technical care from the user. This is why BOB’s code is audited by top security experts. See BOB audits here.

Why did Mt. Gox and FTX happen if custodial exchanges have security measures in place?

Security measures reduce but don't eliminate the structural risk created by custody concentration. Mt. Gox failed due to security breaches and mismanagement over several years. FTX failed because customer funds were misappropriated by the platform's own leadership, a risk no amount of cold storage or two-factor authentication can prevent, because the threat came from inside the organization holding the keys.

Is Wrapped Bitcoin (WBTC) custodial or non-custodial?

WBTC's underlying mechanism is custodial. While the trading and DeFi usage of WBTC happens on decentralized infrastructure, the Bitcoin backing every WBTC token is held by a centralized custodian, a useful example of why a decentralized trading layer and a non-custodial asset are not the same thing

Do non-custodial Bitcoin swaps require identity verification?

Generally no. Because atomic swaps, intents-based RFQ protocols, and similar non-custodial mechanisms don't require an intermediary to hold or process funds, they typically don't require the identity verification custodial platforms need for regulatory compliance. BOB Gateway does not require ID verification. Onchain transaction details, including wallet addresses and amounts, remain publicly visible regardless of custody model.

Which model is safer for large Bitcoin holdings?

For amounts where losing access would be financially significant, the historical record favors non-custodial methods. The billions lost across Mt. Gox, FTX, and Celsius all involved custodial arrangements. A correctly executed non-custodial swap removes that specific failure mode entirely, because there is no third party positioned to lose, freeze, or misappropriate the funds.

How does BOB Gateway fit into the non-custodial category?

BOB Gateway is a non-custodial BTC swap protocol that verifies Bitcoin transactions directly through an on-chain light client rather than trusting a custodian's attestation. It charges zero protocol fees and settles in roughly 10 minutes. See What Is a Native Bitcoin Swap for the technical mechanism.

Custodial vs. Non-Custodial Bitcoin Swaps

Key Takeaways

• The core question in any Bitcoin swap is who controls the private keys at the moment of trade: a platform, or the user.

• Custodial failures have cost the industry tens of billions: Mt. Gox lost over 800,000 BTC in 2014, FTX misappropriated roughly $8 billion in 2022.

• Centralized exchanges accounted for 79% of all reported crypto security breaches in 2025, including the $1.5 billion Bybit hack, the largest in crypto history.

• Non-custodial swap protocols like BOB Gateway remove custody risk entirely by verifying the Bitcoin transaction itself rather than trusting an asset issuers platform's database.

The difference between a custodial and a non-custodial Bitcoin swap comes down to one question: at the moment of the trade, who has control of the Bitcoin?

In a custodial swap, the user hands BTC to a platform that executes the trade on their behalf and holds the resulting asset until withdrawal. In a non-custodial swap, the Bitcoin never leaves the user's control. The trade settles directly between wallets, often through a smart contract or cryptographic protocol, with no intermediary ever taking possession of the funds.

That single distinction determines almost everything else that matters: what happens if the platform is hacked, what happens if it goes bankrupt, whether the user needs to trust anyone besides themselves, and how exposed they are to a single point of failure.

This guide breaks down how each model works, what the historical record shows about the risks of each, and how to evaluate which type of swap fits a given transaction.

What “Custody” Actually Means in a Bitcoin Swap

Custody refers to who holds the private keys controlling an asset. The prime difference between custodial and non-custodial cryptocurrency services is that the private key is managed by third parties in the former case, and by users themselves in the latter. Private keys are not a technical footnote. They are the actual mechanism of ownership in Bitcoin. Whoever controls the private key controls the coins, regardless of whose name is on an account statement.

When a user swaps Bitcoin on a custodial platform, they first deposit BTC into an address the platform controls. The platform's systems execute the trade, on an internal order book or through liquidity providers, and credit the user with the resulting asset, which it also holds until withdrawal. Throughout this process, the user holds no private keys to either asset, only a claim against the platform, recorded in its database.

A non-custodial swap works differently. Bitcoin moves directly from one wallet to a counterparty's wallet or into a smart contract the user controls the conditions of, without ever passing through an intermediary's custody. BOB Gateway is one production example of this model. See What Is a Native Bitcoin Swap for the technical breakdown of how it verifies transactions without a custodian.

How Non-Custodial Bitcoin Swaps Actually Work

The most established non-custodial mechanism is the atomic swap, built on a Hash Time-Locked Contract (HTLC). First proposed on BitcoinTalk in 2013, it addresses a specific problem: how two strangers can exchange assets on different blockchains without either easily cheating the other.

Step 1. Alice generates a secret random number, computes its cryptographic hash, and shares the hash with Bob.
Step 2. Alice locks her coins in a contract unlockable only by whoever produces the secret, or by Alice as a refund after a time limit.
Step 3. Bob locks his coins in a parallel contract on the other chain, using the same hash.
Step 4. To claim Bob's coins, Alice reveals her secret onchain, making it publicly visible.
Step 5. Bob uses the revealed secret to claim Alice's coins.

The defining property is atomicity, a concept borrowed from database systems: the swap is indivisible, so all parts occur or none do. If either party fails to act within the time window, locked funds return to their original owner, which makes it hard for one party to end up with both assets. The cryptography is what enforces this, rather than a company's good intentions.

This is why atomic swaps are often described as trustless: the protocol relies on no trusted third party and aims to eliminate counterparty risk. They are generally less vulnerable to the hacks or theft that affect centralized exchanges holding user funds, since the HTLC executes only once all cryptographic conditions are met.

The trade-off: atomic swaps tend to win on trust and lose on user experience. They require both parties online at once, a matching counterparty for the amounts involved, and often up to six confirmations on each chain, adding meaningful latency versus an instant custodial trade.

Modern non-custodial platforms address this latency through intents-based RFQ models with aggregated solver liquidity rather than peer-to-peer HTLC matching. See How Bitcoin Swaps Actually Work for how this newer mechanism compares, while generally preserving the property that matters most: the platform itself doesn't take custody of user funds.

How Custodial Bitcoin Swaps Work

Custodial platforms solve the same problem through an entirely different architecture. The mechanics are straightforward from a user's perspective: deposit Bitcoin to an exchange-controlled address, the exchange matches the order against its book or internal liquidity, and the resulting asset appears in the account balance, controlled by the exchange, not the user. Reputable custodial exchanges implement layered protections: keeping 90-95% of user funds in offline cold storage, requiring multi-signature approval for large transactions, two-factor authentication, insurance for certain losses, and periodic Proof of Reserves attestations.

These protections meaningfully reduce risk relative to a poorly run platform. But they do not eliminate the structural issue: a custodial exchange is, by design, a single point of failure where all user funds are aggregated in one place, making it an extremely attractive target for hackers, and in some cases for the exchange's own management.

The Historical Record: What Happens When Custodial Models Fail

Custody risk in Bitcoin is not theoretical. It has a well-documented, expensive history.

Mt. Gox (2014). At its peak, Mt. Gox handled roughly 70% of all Bitcoin transactions worldwide. The Tokyo-based exchange collapsed in 2014 following a years-long hack and mismanagement, losing approximately 850,000 Bitcoin, worth roughly $480 million then and tens of billions today. The rehabilitation trust is still distributing recovered funds, with the final repayment deadline extended to October 2026.
FTX (2022). Approximately $8 billion in customer funds was found missing, and the collapse unfolded within roughly one week, with 37% of customer funds withdrawn in just two days before withdrawals froze. The Recovery Trust has since distributed roughly $10 billion back to creditors, but the process took years and many received less than their holdings' value at collapse.
Celsius (2022), much never recovered. These platforms offered instant withdrawals while assets were locked in illiquid positions, and the resulting bank runs were historic once depositors realized the mismatch.

The pattern continues into 2025. Centralized exchanges accounted for 79% of all reported crypto security breaches in 2025, with over $3.4 billion stolen, including the single largest hack in crypto history, the $1.5 billion Bybit breach, demonstrating that even well-resourced, security-conscious custodians remain a concentrated target.

A Middle Ground Worth Understanding: Wrapped Bitcoin

Wrapped Bitcoin (WBTC) is a useful example to consider. WBTC's model generally depends on a custodian, historically and primarily BitGo, to hold the actual Bitcoin backing the tokens in circulation. Unlike Bitcoin's native trustless model, WBTC involves some degree of trust in this centralized entity. If the custodian were to fail to safeguard reserves, become insolvent, or act in bad faith, holders could face limited recourse.

The lesson may extend beyond WBTC: any wrapped or bridged representation of Bitcoin that depends on a custodian to hold the underlying BTC tends to carry some of that custodian's risk, regardless of how decentralized the trading layer built on top of it may appear. More fully non-custodial Bitcoin exposure would generally mean the swap mechanism itself doesn't require a custodian to hold the underlying asset at any stage, not simply that the trading interface is decentralized.

Factor	Custodial Swap	Non-Custodial Swap
Who holds the private keys	The platform	The user, throughout
Counterparty risk	High: insolvency, fraud, or hack directly affects funds	Minimal: no intermediary holds funds to lose
Speed	Typically instant	Slower for atomic swaps; under 10 min for intents-based protocols like BOB Gateway
Identity verification	Usually required	Typically not required
Historical failure cost	Tens of billions across Mt. Gox, FTX, Celsius	No equivalent custodial-style failures, funds never pooled

When Each Model Actually Makes Sense

Neither model is universally superior. They serve different priorities.

Custodial swaps make sense when: Speed and simplicity for small, frequent trades, or access to deep liquidity for large trades that smaller non-custodial pools can't support efficiently. Also sensible for users not yet prepared to manage their own private key security, since losing a seed phrase in self-custody typically means losing funds permanently.
Non-custodial swaps make sense when: The amount being swapped is large enough that counterparty risk becomes the dominant concern, when privacy from identity-verification requirements matters, or as a matter of principle for anyone who has internalized the lesson of Mt. Gox, FTX, and Celsius.

BOB Gateway provides non-custodial native BTC cross-chain swaps. Networks like Ethereum Mainnet, Arbitrum, Base, Optimism, Tron, Avalanche etc are supported. Assets including USDT, USDC, ETH, Tether gold etc.

For a direct comparison of the fee and speed tradeoffs across the leading non-custodial protocols, see BTC to USDT Swap Fees Compared: BOB Gateway, THORChain and Near Intents.

Questions to Ask Before Choosing a Swap Method

Does the platform ever take custody of my funds, even momentarily? Some platforms market themselves as non-custodial while still routing transactions through an intermediary wallet at some stage. Read the actual transaction flow, not the marketing language.
What happens if the platform disappears tomorrow? For a genuinely non-custodial swap, nothing happens to funds already in the user's wallet, because the platform never had them. For a custodial swap, the honest answer involves bankruptcy proceedings and uncertain timelines.
Is the swap mechanism cryptographically enforced, or dependent on a company's integrity? Atomic swaps and HTLC-based mechanisms are enforced by code that executes the same way regardless of who is involved. Custodial swaps are enforced by trust in an organization's solvency and honesty.
What is the actual settlement speed needed? If a transaction needs to settle in seconds and a small amount of counterparty risk is acceptable, custodial may be the practical choice. If the amount is large enough that risk matters more than convenience, the slower non-custodial path is usually worth it, though intents-based protocols like BOB Gateway now settle non-custodially in roughly 10 minutes, closing much of that speed gap.