Counterparty Risk in Crypto: Who Can Lose Your Money
Counterparty risk is the chance that whoever holds your crypto fails to give it back. Here is every counterparty a large holder is exposed to, and how to cut each one.
Counterparty risk is the chance that the party holding, borrowing, or controlling your crypto fails to give it back. In crypto it comes in five flavors: the exchange, the lender, the fund, the manager, and the smart contract. Each one can be measured, and most can be removed outright. The ones that remain should be chosen deliberately, not inherited by accident.
Three exchanges announced they were shutting down in the space of six weeks. Bit.com went first, BitMEX said on 23 July 2026 that it would close on 23 September after eleven years of operation, citing a strategic business review, and BitMart began winding down on 26 July (Finance Magnates). Nobody defaulted. No funds were reported missing. Every one of those venues still became a counterparty problem for the people with balances sitting on them, because a solvent wind-down still means deadlines, queues, and compliance checks between a holder and their own money.
This is the risk that sits underneath every yield decision a serious holder makes. It gets discussed as an abstraction and priced as an afterthought. What follows is the concrete version: who your counterparties actually are, what each of them can do to you, what the last cycle proved about the cost, and which of these exposures you can delete rather than manage. If you want the structural comparison first, our guide to crypto SMAs, funds, and managed accounts covers how each wrapper distributes these risks.
What is counterparty risk, and what does it mean for crypto holders?
Counterparty risk is the possibility that the other side of an arrangement does not perform. In traditional finance it usually means a bond issuer missing a payment or a trading partner failing to settle. In crypto it takes a sharper form, because the thing at stake is usually the asset itself rather than a payment on top of it.
The distinction that matters is between owning an asset and holding a claim on someone who owns it. When Bitcoin sits in a wallet you control, there is no counterparty. When it sits on an exchange, in a yield product, or with a lender, you hold an entitlement. Your balance is a database row backed by a promise, and the quality of that promise is the quality of your counterparty.
That difference is invisible during normal operation. Balances display the same way whether they are backed by segregated assets or by an unsecured claim in a future bankruptcy. It becomes visible on exactly one day, and by then your position is set.
Which counterparties actually hold your crypto risk?
Five parties can stand between a holder and their assets. Most portfolios are exposed to three or four at once without anyone having decided that on purpose.
| Counterparty | What they can do with your assets | What failure looks like |
|---|---|---|
| Exchange or custodian | Hold, freeze, rehypothecate, or lose them in insolvency | Withdrawals halted, balance becomes a claim |
| Lender or yield platform | Lend them onward to borrowers you never see | Borrower defaults, platform absorbs the loss, then you do |
| Fund or pooled vehicle | Commingle them with other investors’ assets | Gated redemptions, NAV written down, exit blocked |
| Manager with full account access | Trade them and move them off the venue | Funds withdrawn to an address you do not control |
| Smart contract or protocol | Execute whatever the code says, forever | Exploit, oracle failure, or a bug drains the pool |
Rehypothecation deserves a plain description, since it is the mechanism most holders underestimate. A platform that takes your coins and lends them to a third party has created a chain: you are exposed to the platform, and the platform is exposed to its borrowers. Losses travel back up that chain. Yield advertised as coming from “institutional lending” is usually the visible end of it, which is why our rundown of realistic crypto passive income treats the source of a yield as more informative than its size.
<circle cx="140" cy="196" r="52" fill="#2B7FFF" fill-opacity=".13"/>
<rect x="28" y="150" width="224" height="92" rx="12" fill="#16161A" stroke="#2B7FFF" stroke-width="1.5"/>
<circle cx="140" cy="180" r="5" fill="#7FA8FF" filter="url(#cpr1gl)"/>
<text x="140" y="211" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="16" font-weight="700" fill="#FFFFFF">Your coins</text>
<text x="140" y="231" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11.5" fill="#8B8881">every claim below is on someone</text>
<g font-family="Inter, 'Inter Fallback', system-ui, sans-serif">
<path d="M252 196 C 274 196, 276 71, 300 71" fill="none" stroke="#2A2A2B" stroke-width="1.5" marker-end="url(#cpr1ar)"/>
<rect x="300" y="46" width="372" height="50" rx="10" fill="#16161A" stroke="#242425"/>
<text x="316" y="68" font-size="13.5" font-weight="600" fill="#DDDBD5">Exchange or custodian</text>
<text x="316" y="85" font-size="11.5" fill="#8B8881">holds, freezes, or loses them in insolvency</text>
<text x="660" y="72" text-anchor="end" font-size="10" font-weight="600" letter-spacing=".05em" fill="#8B8881">STRUCTURAL</text>
<path d="M252 196 C 276 196, 278 134, 300 134" fill="none" stroke="#2A2A2B" stroke-width="1.5" marker-end="url(#cpr1ar)"/>
<rect x="300" y="109" width="372" height="50" rx="10" fill="#16161A" stroke="#242425"/>
<text x="316" y="131" font-size="13.5" font-weight="600" fill="#DDDBD5">Lender or yield platform</text>
<text x="316" y="148" font-size="11.5" fill="#8B8881">lends them onward to borrowers you never see</text>
<text x="660" y="135" text-anchor="end" font-size="10" font-weight="700" letter-spacing=".05em" fill="#7FA8FF">REMOVABLE</text>
<path d="M252 196 L 300 196" fill="none" stroke="#2A2A2B" stroke-width="1.5" marker-end="url(#cpr1ar)"/>
<rect x="300" y="172" width="372" height="50" rx="10" fill="#16161A" stroke="#242425"/>
<text x="316" y="194" font-size="13.5" font-weight="600" fill="#DDDBD5">Fund or pooled vehicle</text>
<text x="316" y="211" font-size="11.5" fill="#8B8881">commingles them, gates the exit</text>
<text x="660" y="198" text-anchor="end" font-size="10" font-weight="700" letter-spacing=".05em" fill="#7FA8FF">REMOVABLE</text>
<path d="M252 196 C 276 196, 278 259, 300 259" fill="none" stroke="#2A2A2B" stroke-width="1.5" marker-end="url(#cpr1ar)"/>
<rect x="300" y="235" width="372" height="50" rx="10" fill="#16161A" stroke="#242425"/>
<text x="316" y="257" font-size="13.5" font-weight="600" fill="#DDDBD5">Manager with full access</text>
<text x="316" y="274" font-size="11.5" fill="#8B8881">trades them, and can move them off the venue</text>
<text x="660" y="261" text-anchor="end" font-size="10" font-weight="700" letter-spacing=".05em" fill="#7FA8FF">REMOVABLE</text>
<path d="M252 196 C 274 196, 276 322, 300 322" fill="none" stroke="#2A2A2B" stroke-width="1.5" marker-end="url(#cpr1ar)"/>
<rect x="300" y="298" width="372" height="50" rx="10" fill="#16161A" stroke="#242425"/>
<text x="316" y="320" font-size="13.5" font-weight="600" fill="#DDDBD5">Smart contract</text>
<text x="316" y="337" font-size="11.5" fill="#8B8881">executes the code, with no bankruptcy process</text>
<text x="660" y="324" text-anchor="end" font-size="10" font-weight="600" letter-spacing=".05em" fill="#8B8881">STRUCTURAL</text>
</g>
<text x="28" y="380" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11.5" fill="#8B8881">Three of the five can be deleted by structure. The other two get chosen and sized.</text>
What did FTX and Celsius prove about crypto counterparty risk?
Both cases are now resolved enough to read as data rather than as news, and they proved two different things.
FTX proved that recovering your dollars is not the same as recovering your position. The estate began a fifth distribution of roughly $900 million on 31 July 2026, bringing total returns to creditors close to $10 billion. Cumulative recoveries reached 105% for Dotcom and US customer entitlement claims, 103% for general unsecured and digital asset loan claims, and 120% for convenience claims (Crypto Briefing). By the standards of bankruptcy, that is an excellent outcome, and the headline number is above par.
The catch is in the valuation date. Claims were fixed using November 2022 market values, when Bitcoin and other assets traded far below current levels (The Crypto Times). Bitcoin traded around $16,664 in the days after FTX filed (Bitcoin.com News), against roughly $63,900 on 31 July 2026 (Fortune). A customer with one bitcoin on the platform received about 105% of its 2022 dollar value, near $17,500, while the asset they had chosen to hold is worth about 3.8 times that today. The dollars came back. The bitcoin did not.
Celsius proved something harder. On 4 January 2023, Judge Glenn of the US Bankruptcy Court for the Southern District of New York ruled that under the platform’s terms of use, title to and ownership of all Earn assets had transferred to the debtors, making them property of the bankruptcy estate. Earn represented 77% of assets on the platform, with a market value of approximately $4.2 billion at filing, and the holders became unsecured creditors (Morrison Foerster). Six hundred thousand accounts discovered that the ownership question had been settled years earlier, in a document they clicked through.
Public companies now disclose this directly. Coinbase’s 10-Q language, added under the SEC’s SAB 121 requirement, states that because custodially held crypto assets may be considered property of a bankruptcy estate, customers could be treated as general unsecured creditors (Loeb & Loeb). The risk is not hidden. It is written down, in the filings, in advance.
<line x1="28" y1="300" x2="672" y2="300" stroke="#242425" stroke-width="1"/>
<line x1="28" y1="240" x2="672" y2="240" stroke="#242425" stroke-width="1" stroke-dasharray="3 5"/>
<line x1="28" y1="170" x2="672" y2="170" stroke="#242425" stroke-width="1" stroke-dasharray="3 5"/>
<rect x="120" y="245" width="150" height="55" rx="5" fill="#1A1A1B" stroke="#2E2E2F"/>
<text x="195" y="232" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="26" font-weight="800" fill="#C9C7C1">~$17,500</text>
<text x="195" y="322" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="13" font-weight="600" fill="#DDDBD5">Claim paid at 105%</text>
<text x="195" y="341" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11.5" fill="#8B8881">fixed at November 2022 value</text>
<rect x="430" y="95" width="150" height="205" rx="5" fill="url(#cpr2lg)" fill-opacity=".85"/>
<text x="505" y="82" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="26" font-weight="800" fill="#FFFFFF" filter="url(#cpr2gl)">~$63,900</text>
<text x="505" y="322" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="13" font-weight="600" fill="#DDDBD5">One bitcoin, 31 Jul 2026</text>
<text x="505" y="341" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11.5" fill="#8B8881">the asset the customer chose to hold</text>
<rect x="288" y="150" width="74" height="26" rx="6" fill="#0E0E0F" stroke="#2B7FFF"/>
<text x="325" y="168" text-anchor="middle" font-family="'IBM Plex Mono', monospace" font-size="13" font-weight="700" fill="#7FA8FF">3.8x</text>
Why is an orderly exchange wind-down still a counterparty event?
Because access has a timetable that is not yours. BitMart stopped new registrations, deposits, and new trading activity on 26 July 2026, moved futures accounts to reduce-only, scheduled the end of spot and futures trading for 26 August, and set formal closure for 31 January 2027. Withdrawals stay available through the wind-down, and the exchange stated that some requests may require identity verification, security checks, sanctions screening, source-of-funds reviews, or other compliance procedures before completion (Bitcoin.com News).
Read that list again as a holder with a seven-figure balance and a strategy running on the venue. Every item is reasonable. Together they mean the date your assets come home is a function of someone else’s queue. A holder who wanted to exit a position on their own schedule instead exits on the exchange’s schedule, in a month when everyone else on the platform is doing the same thing. Bit.com and BitMEX put the same clock on their users in the same quarter.
Three wind-downs in six weeks also says something about venue selection. Finance Magnates framed the cluster as evidence of how difficult it has become for offshore trading venues to compete against the largest exchanges under tighter regulatory requirements. Venue concentration is a counterparty decision, and it is one of the few in this list you make before any capital is at stake.
How do you mitigate counterparty risk without giving up yield?
The useful frame is subtraction. Each exposure is either removable, reducible, or structural, and treating a removable risk as structural is how portfolios end up carrying risks nobody is being paid for.
Remove the lender. Yield that requires transferring ownership of your coins converts a market decision into a credit decision. Strategies that generate income from your own positions, such as selling options against assets you already hold, need no borrower on the other side. The mechanics are in our walkthrough of the wheel strategy for crypto, and the hedging layer that sits above them is covered in delta-neutral crypto strategies.
Remove the manager. A manager needs the ability to trade. Nothing about running a strategy requires the ability to withdraw. On Deribit those are separate API scopes, so a key granted trade:read_write and denied wallet:read_write can place and cancel orders while withdrawal calls are rejected by the exchange itself. The full setup is in our trade-only sub-account guide. This turns manager risk from a trust question into a permissions question.
Remove the pool. Assets in a segregated account cannot be gated by another investor’s redemption or written down by a shared NAV. Commingling is what makes one participant’s problem everyone’s problem.
Reduce the exchange. This one does not go to zero for anyone trading on a venue. It shrinks through venue choice, position sizing across more than one exchange, keeping only working capital on-venue, and moving the rest to storage you control.
Price the protocol. If a strategy touches smart contracts, the code is a counterparty with no bankruptcy process and no phone number.
Which counterparty risks does a non-custodial managed account remove, and which stay?
A restricted, trade-only arrangement changes three of the five lines and leaves two intact. Claiming more than that would be marketing.
| Counterparty | Custodial lender or fund | Non-custodial managed account |
|---|---|---|
| Manager can withdraw your assets | Yes, by design | No, withdrawal scope withheld |
| Assets commingled with other clients | Usually | No, your own segregated account |
| Your coins lent to third-party borrowers | Often, as the yield source | No, income comes from your own positions |
| Exchange holds the assets | Yes | Yes, this risk stays with you |
| Exit requires someone’s approval | Yes, a withdrawal request | No, revoke the key |
The two lines that stay are the ones worth saying out loud. Assets in a restricted exchange sub-account are still on an exchange, which holds the keys, so venue insolvency, venue wind-down, and venue outages all remain live. We work through that specific concession in what “not your keys, not your coins” means for managed accounts. And strategy risk is untouched by any custody arrangement: a manager who cannot take your money can still lose it on bad trades, which is why yield targets belong next to their risks and never on their own.
<circle cx="140" cy="150" r="56" fill="#2B7FFF" fill-opacity=".12"/>
<rect x="30" y="92" width="220" height="130" rx="12" fill="#16161A" stroke="#2B7FFF" stroke-width="1.5"/>
<circle cx="140" cy="126" r="5" fill="#7FA8FF" filter="url(#cpr3gl)"/>
<text x="140" y="158" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="15" font-weight="700" fill="#FFFFFF">Your sub-account</text>
<text x="140" y="178" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11.5" fill="#8B8881">segregated, never commingled</text>
<text x="140" y="203" text-anchor="middle" font-family="'IBM Plex Mono', monospace" font-size="11" fill="#9FC0FF">BTC ETH USDC</text>
<rect x="472" y="76" width="196" height="66" rx="10" fill="#16161A" stroke="#242425"/>
<text x="570" y="106" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="14" font-weight="600" fill="#DDDBD5">Manager</text>
<text x="570" y="126" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11.5" fill="#8B8881">restricted, trade-only key</text>
<line x1="472" y1="109" x2="258" y2="109" stroke="#2B7FFF" stroke-width="2.5" marker-end="url(#cpr3ar)"/>
<circle cx="365" cy="109" r="13" fill="#0E0E0F" stroke="#2B7FFF" stroke-width="1.5"/>
<path d="M359 109 l4 4 l8 -8" fill="none" stroke="#2B7FFF" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
<text x="365" y="90" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="10.5" font-weight="600" letter-spacing=".04em" fill="#7FA8FF">PLACE AND CANCEL ORDERS</text>
<rect x="472" y="172" width="196" height="66" rx="10" fill="#16161A" stroke="#242425"/>
<text x="570" y="202" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="14" font-weight="600" fill="#8B8881">Withdrawal attempt</text>
<text x="570" y="222" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11.5" fill="#8B8881">rejected by the exchange</text>
<line x1="472" y1="205" x2="258" y2="205" stroke="#8B8881" stroke-width="2" stroke-dasharray="5 4"/>
<circle cx="365" cy="205" r="13" fill="#0E0E0F" stroke="#C2453A" stroke-width="1.5"/>
<line x1="359" y1="199" x2="371" y2="211" stroke="#C2453A" stroke-width="2"/>
<line x1="371" y1="199" x2="359" y2="211" stroke="#C2453A" stroke-width="2"/>
<text x="365" y="234" text-anchor="middle" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="10.5" font-weight="600" letter-spacing=".04em" fill="#8B8881">SCOPE NOT GRANTED</text>
<text x="28" y="286" font-family="Inter, 'Inter Fallback', system-ui, sans-serif" font-size="11" font-weight="600" letter-spacing=".07em" fill="#8B8881">STILL YOURS TO MANAGE</text>
<g font-family="Inter, 'Inter Fallback', system-ui, sans-serif">
<rect x="28" y="300" width="204" height="58" rx="10" fill="#1A1A1B" stroke="#242425"/>
<text x="130" y="325" text-anchor="middle" font-size="13" font-weight="600" fill="#DDDBD5">Exchange risk</text>
<text x="130" y="344" text-anchor="middle" font-size="11" fill="#8B8881">assets still sit on a venue</text>
<rect x="248" y="300" width="204" height="58" rx="10" fill="#1A1A1B" stroke="#242425"/>
<text x="350" y="325" text-anchor="middle" font-size="13" font-weight="600" fill="#DDDBD5">Strategy risk</text>
<text x="350" y="344" text-anchor="middle" font-size="11" fill="#8B8881">bad trades are still possible</text>
<rect x="468" y="300" width="204" height="58" rx="10" fill="#1A1A1B" stroke="#242425"/>
<text x="570" y="325" text-anchor="middle" font-size="13" font-weight="600" fill="#DDDBD5">Venue concentration</text>
<text x="570" y="344" text-anchor="middle" font-size="11" fill="#8B8881">your sizing decision, not ours</text>
</g>
How should a large holder size counterparty exposure across venues?
Five checks, done once at setup and revisited when anything material changes.
- Name every counterparty in writing. List each venue, platform, and party with access, and next to each one write what it could do on its worst day. Anything you cannot name, you cannot size.
- Read the transfer-of-title language. The Celsius ruling turned on the terms of use, not on the platform’s marketing. Search the agreement for who owns the deposited assets.
- Cap the balance on any single venue. A holder with 100% of a mandate on one exchange has made a concentrated bet on that exchange’s continued operation, separate from any bet on price.
- Separate trading rights from withdrawal rights. For every party with API access, confirm the withdrawal scope is absent rather than merely unused.
- Test the exit before you need it. Revoke a key, run a small withdrawal, and time it. An exit you have never tested is an assumption.
The checklist in our pillar on how to choose a crypto asset manager extends this into manager diligence, and the non-custodial model explains the structure these checks are testing.
The takeaway
Counterparty risk is the price of convenience, and most holders pay it without an invoice. FTX creditors recovered more than 100 cents of a 2022 dollar and still missed nearly four years of Bitcoin’s move. Celsius Earn holders learned that ownership had been transferred by a clause. BitMEX and BitMart customers are discovering that a solvent, orderly shutdown still puts a compliance queue between them and their coins.
Three of the five counterparties on the list can be deleted by structure. Packed Capital is built around that subtraction: capital stays in the client’s own exchange account, inside a restricted sub-account scoped so we can trade it and can never withdraw from it, with income generated from the client’s own positions rather than from lending them to anyone. We have been refining these hedged options-income strategies since 2018, first with our own capital, and now run them across more than $100 million in monthly trading volume. Mandates start at $100,000 for the Option Wheel and $1 million for the Hedged Grid, targeting 20-25% a year. That figure is a target rather than a promise, exchange and market risk remain yours, and any manager who tells you otherwise has just become the counterparty you should worry about most.
FAQ
What is counterparty risk in crypto? Counterparty risk in crypto is the chance that a party holding or controlling your assets fails to return them. It applies to exchanges, lenders, yield platforms, funds, managers with account access, and smart contracts. The practical test is whether you own the asset or hold a claim against someone who does. Assets in a wallet or account you control carry no counterparty; balances on a platform are claims.
How is counterparty risk different from market risk? Market risk is the price moving against you while you still own the asset. Counterparty risk is losing access to the asset regardless of price. They are independent: FTX customers suffered a counterparty failure and then watched Bitcoin appreciate roughly 3.8 times while their claim stayed fixed at November 2022 values. A portfolio can hedge market risk and still lose everything to a counterparty.
Does non-custodial crypto asset management remove counterparty risk? It removes some of it. A restricted trade-only sub-account removes the manager as a counterparty, since the exchange rejects withdrawal requests on a key that lacks the withdrawal scope, and it removes commingling and third-party lending. Exchange risk stays, because the assets still sit on a venue. Strategy and market risk stay too.
How do I mitigate counterparty risk on a crypto exchange? Keep only working capital on any single venue and hold the rest in storage you control, spread balances across more than one exchange, prefer venues with stronger regulatory standing and disclosure, grant no API key a withdrawal scope, whitelist withdrawal addresses to wallets you own, and test a withdrawal and a key revocation before committing size.
What happens to my crypto if an exchange shuts down but stays solvent? Withdrawals generally remain open on a published timetable, with trading stopping first. BitMart, for example, ended new deposits and orders on 26 July 2026, set a trading cutoff of 26 August, and warned that withdrawal requests may need identity verification, sanctions screening, and source-of-funds review before completion. Access continues, on the venue’s schedule rather than yours.
Were FTX and Celsius customers made whole? FTX creditor classes reached cumulative recoveries of 103% to 120% in dollar terms, valued at November 2022 prices, so holders received their dollars back and forfeited the asset appreciation since. Celsius Earn holders were ruled unsecured creditors after the court found title to roughly $4.2 billion of Earn assets had transferred to the estate, a materially worse outcome. To discuss a structure where no manager can put you in either position, reach us via contact.
Sources: Finance Magnates — BitMart winds down as closures pile up · Bitcoin.com News — BitMart shutdown timeline · Crypto Briefing — FTX fifth distribution · Morrison Foerster — Celsius Earn accounts are estate property · Loeb & Loeb — custodial crypto in bankruptcy · Fortune — Bitcoin price, 31 July 2026