How Safe Is Your Money?

Money in the bank? Money on an exchange? Money in a cold wallet? Or money in a hot wallet?

We often assume our money is safe simply because it is stored somewhere we trust. But recent events around the world show that every storage method comes with its own risks.

Banks get hacked. Exchanges lose control of their wallets. Hardware wallets can have vulnerabilities. Mobile wallets can be compromised.

Let's look at some real-world examples.

1. Money in the Bank

We deposit money in banks because we expect it to be safe and accessible whenever we need it. But banks are not immune to cyberattacks, insider fraud and technical failures.

Consider these incidents:

Taiwan: NT$41.76 million (approximately $1.3 million) withdrawn without authorisation from 419 SinoPac customer accounts. The bank traced the incident to compromised security settings at a technology supplier. Source: Focus Taiwan.
🇰🇷 South Korea: 37 financial companies suffered data breaches, exposing more than 470,000 records. Source: Yonhap News.
Brazil: 99 cyber incidents reported at the central bank in just nine months, 68 classified as fraud. Source: Folha de S.Paulo.
USA: Fourteen people indicted in a bank-account takeover conspiracy involving SIM swapping and allegedly corrupt banking and telecom insiders. Their targets collectively held more than $373 million. Source: US Department of Justice.
Indonesia: 6,609 Bank Jambi customer accounts compromised, with approximately $8.8 million stolen. Source: Indonesian National Police.
France: Crédit Mutuel Arkéa suffered a major cyberattack involving fraudulent transactions. The bank confirmed the attack but disputed the reported $133 million loss figure. Source: Reuters.

Your bank account may show your balance, but you don't personally control the systems protecting it.

2. Money on an Exchange

Leaving your Bitcoin on a centralised exchange means someone else controls the private keys.

You see a balance on your screen, but you depend on the exchange to safeguard the underlying assets and honour your withdrawal requests.

Two recent incidents illustrate the risks:

Binance (October 29, 2026): Binance reported that approximately $6.34 billion in digital assets were affected by a sophisticated attack involving its internal wallet-signing service and hot wallets. The exchange says it will cover the losses and reported that approximately $2.85 billion had been frozen or intercepted. Source: Binance's incident report.
Bitget (September 24, 2026): Unauthorised transfers drained approximately $351.6 million from some of the exchange's hot wallets. Bitget subsequently reported a revised on-chain figure of $387.5 million. It said its cold wallets and separate self-custodial wallet product were unaffected. Source: Reuters.

Even large exchanges with substantial security resources can experience serious breaches.

And hacking isn't the only risk. Withdrawals can be suspended, accounts frozen and access restricted.

3. Money in a Cold Wallet ❄️

Cold storage keeps private keys offline, reducing exposure to internet-based attacks.

But offline doesn't automatically mean invulnerable.

Consider the August 2026 Coldcard incident:

A vulnerability in firmware released in March 2021 weakened the randomness used to generate certain wallet seeds.
Attackers exploited the weakness without physically accessing the devices.
Approximately 1,816 BTC, valued at around $116 million at the time, was reportedly stolen from more than 5,200 addresses.

The problem was particularly serious because simply updating the firmware did not fix seeds that had already been generated using the vulnerable version. Affected users needed to create new seeds and move their funds.

Source: TRM Labs – The $116 Million Coldcard Exploit.

Cold storage remains an important security practice, but hardware vulnerabilities, compromised devices, exposed recovery phrases and poor backup practices can still put funds at risk.

4. Money in a Hot Wallet

Hot wallets are connected to the internet, making them convenient for everyday transactions.

However, that connectivity introduces additional risks:

Malware and spyware targeting mobile devices.
Fake wallet applications and browser extensions.
Phishing websites stealing recovery phrases.
Malicious transaction approvals.
Compromised phones and computers.
Users accidentally exposing their private keys.

The Bitget incident is also a useful reminder that even professionally managed hot wallets can be compromised.

Source: The Block – Bitget's $387.5 Million Wallet Breach.

A self-custodial hot wallet gives you control of your keys, but you are responsible for protecting your device and wallet credentials.

So, Where Is Your Money Actually Safe?

There is no perfect storage solution. Each comes with different risks.

But there is an important distinction between having a balance somewhere and actually having control over your money.

In a bank, you depend on the bank.
On an exchange, you depend on the exchange.
In a custodial wallet, you depend on the custodian.
In a self-custodial wallet, you control your private keys and take responsibility for securing them.

Bitcoin doesn't eliminate theft, scams or technical vulnerabilities. But it gives individuals the ability to hold and transfer their own money without asking a bank or exchange for permission.

Perhaps the bigger question isn't simply where is your money safest?

It's this:

Who actually controls your money, and what happens when that third party fails?

Not your keys, not your coins.

Trust less. Verify more.

Bitcoin: Be Your Own Bank