On July 30th, roughly 500 Bitcoin wallets were drained in twenty-five minutes. This wasn’t from phishing attacks using fake texts (which is sadly all too common). Nobody touched a single physical device. But by the end of that week, it was over 5,200 addresses and around 1,816 Bitcoin. That’s about $116 million gone… and it's still climbing.

And the worst part is that all of it was in cold storage. Hardware wallets. The thing every single one of us tells each other is the safe way to do this. Specifically, ColdCard Bitcoin wallets.

It was because of a firmware bug from 2021 in ColdCard hardware wallets that made the seed phrases those devices generated much more easily guessable than they should have been. Nobody caught the bug in 5 years. Then somebody worked it out and stole all the Bitcoin from every wallet they could find.

As a result, a lot of people have been moving their BTC to exchanges out of fear that other wallets might be affected. While I do get the fear, that is NOT the answer either.

FTX, Celsius, Voyager weren’t hacks (but exchange hacks DO happen). Those were companies using customer funds as their own and when massive crypto crashes happened, they were caught with their pants down and the coins weren't there. Those coins belonged to customers. By using an exchange instead of a wallet, you are swapping one risk for another (potentially worse risk).

But I also understand that pure self-custody isn't the right fit for everyone. If the seed phrase stresses you out, the wallet backup, the what-if-the-house-burns-down scenario, or you're just honest with yourself that you might fall for a convincing phishing attempt, there is another route you can take that I wish more people would talk about.

Your assets are held one-to-one, off balance sheet, with your name on them. All that means is that YOUR coins/tokens stay YOUR coins/tokens. iTrustCapital never mixes your funds with theirs or lends them out or has leverage against them. Your crypto has your name on it, stored through institutional custodians like Coinbase Prime and Fidelity Digital Assets, which manage trillions of dollars in assets.

The security model is also built around the most common way people actually lose crypto: someone getting into your account and draining it. On a regular exchange, if someone gets your login and info, they can simply use the big “withdraw all” button and drain your funds, and that’s the end of it. You just lose everything.

iTrustCapital's answer is that there is no button. No hot wallets, no live connection to external addresses. Someone who takes over your login cannot drain the account because there is no drain valve. Funds can only go back to your linked bank account. Period.

They've also been around since 2018, processed over $16 billion in transaction volume, and I could not find a single publicly reported breach of client crypto. More importantly, they survived 2022, which is when every platform that was doing something sketchy with customer funds collapsed. iTrustCapital came out the other side because custody and software fees were the business, not yield generated by risking your money.

I was a customer before they were ever a channel partner. Their support is genuinely good, which is rare in this space. You can also name a beneficiary, which solves the inheritance problem self-custody never does.

It's not for everyone. Active traders, DeFi users, and die-hard self-custody people will find it too slow and too restrictive by design. But if you're a long-term holder who wants institutional-grade security without managing your own keys, this is worth a serious look.

New users who open and fund an account get a $100 bonus through my link below.

I go deeper on all of this, including how the account works, fees, and who it's actually built for, in the full video. Watch it here: