Coinbase Case Exposes Weak Bitcoin Custody
The case is about more than a dispute with BlockTower: governance, audit trails, and multi-sig custody for bitcoin reserves are also under pressure.
Key Takeaways
- The allegations against Coinbase make it clear that companies often cannot properly show who controls bitcoin, who approves transactions, and how that is monitored.
- The text points to earlier incidents at QuadrigaCX and Prime Trust and highlights bigger risks from hacks, phishing, and AI-driven fraud.
- Multi-sig custody is mentioned as a possible solution, especially for European firms that demand more governance and accountability.
The accusations from BlockTower founder Ari Paul against Coinbase expose a bigger problem: companies that put bitcoin on their balance sheets often cannot clearly show who controls the money, who approves transfers, and whether the coins are still there. Coinbase denies the allegations, while Paul says ongoing lawsuits prevent him from publishing his evidence. For the crypto market, the case is therefore not just about guilt or innocence, but mainly about how control over bitcoin is set up in practice.
Why Boards Get Stuck
According to Paul, Coinbase allegedly lost about $25 million (€22.3 million) in assets from his firm and also hid hacks that together would have affected more than $1 billion (€0.9 billion) across a dozen institutions. Outside the two parties, that cannot be verified, and that is exactly what makes the case so uncomfortable for companies that want to hold bitcoin. A bank account or brokerage account has fixed roles, approval rules, and an audit trail. With bitcoin, that often disappears once a company chooses a single exchange login or a hardware wallet held by one person.
That weakness is not theoretical. The text mentions QuadrigaCX, where after the CEO’s death an estimated $190 million (€169 million) in customer assets was stuck, and Prime Trust, which later could not even access its own legacy wallets. The author also points to a Deloitte survey, in which CFOs cited the complexity of accounting and controls almost as often as price volatility as a reason to avoid putting bitcoin on the balance sheet. That fits into the broader debate over corporate reserves, where Strategy previously warned that custody mistakes and forced liquidations remain serious risks.
More Pressure on Custody
According to the text, the risks have also grown. On the physical side, more than 360 known attacks on bitcoin holders have been recorded since 2014, including 86 in 2025 and more than 60 this year. Coinbase itself dealt with a data breach last year in which criminals bribed support staff and stole customer data, which the company said could cost hundreds of millions of dollars. At the same time, phishing, deepfakes, and other AI-driven tricks make it harder for finance teams to tell who is really giving the order.
The text also points to a possible way out: multi-sig custody, where multiple parties share control over the assets. That spreads out power and lowers the chance that one mistake, one departure, or one compromised key opens everything up. Institutional players have been looking at this for a while, precisely because a single custodian may be simple, but it is not automatically easier to control.
Why This Matters for Europe
For European companies and investors, this matters because the question of bitcoin custody is not just about storage, but also about governance and accountability. Especially now that more professional firms want to hold crypto, a setup with multiple approvals and clear roles may matter more than just an audit report or proof of reserves. The debate around Coinbase shows that trust in a custodian is not enough if a company cannot verify for itself who can move what.
