A newly discovered exploit involving Ledger hardware wallets has ignited an industry-wide debate over whether self-custodied Bitcoin is safer than holding the asset through exchange-traded funds (ETFs).

Custody has long been one of the most contested questions in Bitcoin, as holders weigh the independence of self-custody the professional infrastructure behind regulated products such as spot Bitcoin ETFs, which began trading in the United States in January 2024. The recent exploit has pushed that trade-off back to the center of the industry conversation.

Plan B: "Zero regrets" on the ETF move

Bitcoin analyst Plan B said his then-controversial decision to move his Bitcoin (BTC) holdings into ETFs in 2025 proved to be the right call in light of the recent Coldcard and Ledger exploits. "Zero regrets" about the ETF decision, the analyst wrote in a Monday X post.

ETF custody pitched on "enhanced security"

Large holders have been converting self-custodied assets into ETFs for years in pursuit of "enhanced security," long one of the main "selling points" of the products, 21Shares co-founder Ophelia Snyder told Cointelegraph in an email on Monday. The recent exploits have pushed the phenomenon into the "public discourse," she added.

In an ETF structure, investors hold shares backed by Bitcoin managed by specialist custodians rather than keys stored on a device they control themselves — a distinction that has moved to the forefront as the implant findings spread.

The remarks follow the discovery of a compromised Ledger wallet containing an unauthorized hardware implant. Some blockchain investigators have estimated that losses tied to such implants could top $86 million, raising fresh questions about the security of self-custodial cold wallets.

Hardware wallets "still safe," but threat modelling lags: Adam Back

Hardware wallets can still serve as secure custodial options, but providers need a better understanding of the emerging threat landscape, according to Blockstream CEO and Hashcash inventor Adam Back.

"Surprisingly few manufacturers understood the generic attacks, or so it seemed from their marketing and design choices, for the last decade. Time to catch up with threat-modelling," Back wrote in a Saturday X post.

How quickly wallet manufacturers respond with updated threat models and security guidance is likely to be a focal point for the industry following the implant findings.

Snyder, meanwhile, argued that the core weakness of self-custodial wallets is that their security depends on each investor's technical expertise and individual setup. "Without taking the time and rigor to set up properly, self-custody will always be less secure than handing over the assets to a specialist firm whose job it is to manage those protocols for you," she said.

Bitcoin security researcher and cypherpunk Jameson Lopp also said that self-custodial wallets can be a robust option, but urged investors to avoid a mass migration that could create new central points of failure during rushed transactions.

: Cointelegraph