Coinbase allegations highlight corporate Bitcoin custody governance gap
Coinbase allegations raise corporate custody concerns
BlockTower Capital founder Ari Paul has accused Coinbase of losing about $25 million of his firm’s assets and hiding hacks that total more than $1 billion across a dozen institutions. Coinbase has denied the claims, and Paul says ongoing litigation prevents him from sharing his evidence. The dispute has sparked a wider discussion about how companies can verify Bitcoin held on their balance sheets.
Key takeaways
- Ari Paul alleges $25 M loss and $1 B+ concealed hacks at Coinbase.
- Coinbase rejects the allegations and cites active litigation.
- The case underscores a lack of external verification for Bitcoin custody.
- Corporate boards struggle to answer who can move Bitcoin, who approves it, and whether the assets remain intact.
- Current custody models—self‑custody, single‑custodian services, and proof‑of‑reserves—do not fully address these governance questions.
- Multi‑signature solutions could provide named users, approval rules, and audit trails similar to traditional bank accounts.
Governance questions companies face
When a business holds cash in a bank, the account has named users, defined roles, approval rules for withdrawals, and an audit trail. A Bitcoin account often reduces to a single exchange login or a hardware wallet, leaving boards without clear answers to three core questions: who can move the asset, who approves the movement, and what happens if the key holder leaves, is phished, or dies. Past incidents such as the 2018 QuadrigaCX collapse and the 2021 Prime Trust wallet access issue illustrate these risks.
Why current custody solutions fall short
Self‑custody puts all risk on one person, requiring key‑handing ceremonies at every hire or departure. Single‑custodian services, like most exchanges, give clients no direct view of the assets and rely on audits and SOC reports that do not show who can move the funds. Proof‑of‑reserves attestations only confirm a snapshot of holdings, not ongoing control or withdrawal policies. These approaches concentrate risk rather than distribute it.
Multi‑signature custody as a potential fix
Bitcoin’s protocol supports multi‑signature (multi‑sig) addresses, allowing independent institutions to hold separate keys. With this setup, no single party can move the funds alone. Companies can assign named users, set approval policies for each withdrawal, and maintain an audit trail that boards can read. Morgan Stanley’s proposed Bitcoin ETF custody model, which names two custodians, hints at growing industry interest in splitting custody.
Implications for corporate Bitcoin adoption
Until custody arrangements can answer the three governance questions, many boards will hesitate to place Bitcoin on their balance sheets. The Coinbase dispute illustrates how a lack of external verification can stall corporate adoption, even as the asset’s underlying technology promises transparency.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.
Related Posts
France Delays Budget Vote on Stablecoin Swap Tax to Nov. 3
