The discovery of an unauthorized hardware implant in Ledger devices has intensified industry debate over the security of self-custodial hardware wallets compared to Bitcoin exchange-traded funds (ETFs).
Bitcoin analyst Plan B stated his decision to move his Bitcoin holdings to ETFs in 2025 was the right call in light of recent exploits affecting hardware wallets like Coldcard and Ledger. "Zero regrets" about my ETF decision, the analyst posted on X.
Large holders have been converting self-custodied assets to ETFs for "enhanced security" for years, which is one of the main "selling points" for ETFs, 21Shares co-founder Ophelia Snyder told Cointelegraph via email. She added that the recent exploits have brought this trend into "public discourse."
The remarks follow the discovery of a compromised Ledger wallet containing an unauthorized hardware implant. Some blockchain investigators estimated that losses from these implants could top $86 million, raising questions about the security of self-custodial cold wallets.
Blockstream CEO and Hashcash inventor Adam Back commented that hardware wallets can still be secure, but providers need a better understanding of the emerging threat landscape. "Surprisingly few manufacturers understood the generic attacks, or so it seemed from their marketing and design choices, for the last decade. Time to catch up with threat-modelling," Back wrote on X.
Snyder highlighted that a key issue with self-custodial wallets is that their security relies heavily on investors’ technical expertise and individual setup. "Without taking the time and rigor to set up properly, self-custody will always be less secure than handing over the assets to a specialist firm whose job it is to manage those protocols for you," she said.
Bitcoin security researcher Jameson Lopp also noted that self-custodial wallets can be robust, but cautioned against mass migrations that could create new central points of failure.