What Happened
When the SEC approved U.S. spot Bitcoin ETFs in January 2024, it created a regulatory pathway that made Bitcoin accessible through traditional brokerage accounts. What it also did, quietly, was concentrate custody. Coinbase Prime — the institutional arm of Coinbase — was appointed custodian for BlackRock's iShares Bitcoin Trust (IBIT) and went on to become the primary custodian for the majority of competing products. By early 2026, analysts estimate Coinbase holds custody for roughly 90% of all U.S. spot Bitcoin ETF assets.
BlackRock's IBIT alone held over 570,000 BTC as of February 2026, worth approximately $54 billion at the time, all custodied at Coinbase. Fidelity's Wise Origin Bitcoin Fund uses its own custody infrastructure, making it the notable exception. Nearly every other issuer runs through Coinbase Prime, which now reports $245 billion in institutional assets under custody.
How the Concentration Happened
This wasn't accidental. SEC guidance, including the now-contested SAB 121, and 'qualified custodian' requirements created a regulatory environment that favored large, U.S.-regulated entities. Coinbase was the only crypto-native institution that fit the profile institutional issuers needed to pass SEC scrutiny. The result is a market structure where regulatory compliance and operational convenience produced the exact single point of failure the underlying asset was designed to prevent.
The U.S. government's own Bitcoin holdings compound the concern. Reporting on the federal crypto stockpile, worth over $20 billion in seized assets, shows that federal agencies rely on a small circle of contractors and exchange-linked infrastructure. A 2025 scandal involving Marshals Service contractor CMDSS, where an alleged insider siphoned more than $40 million from wallets tied to seized government assets, illustrated how fragile that arrangement is.
What This Means for You
If you hold Bitcoin through an ETF, you do not hold Bitcoin. You hold a claim on a fund that holds Bitcoin through a custodian. That custodian can be hacked, frozen by regulators, sanctioned, or simply fail. The 2022 FTX collapse is the most recent proof that 'institutional-grade' is not the same as 'safe.' Coinbase is a publicly traded, U.S.-regulated company — but that regulatory status is also what makes it a uniquely high-value target for legal action, government pressure, and adversarial attention.
The response isn't to avoid Bitcoin. It's to hold it correctly. Self-custody via a hardware wallet puts your keys outside any custodian's failure domain. A Coinbase collapse, legal freeze, or government seizure order cannot touch coins you control with your own keys. That's not theoretical. That's the technical guarantee the network provides.
If you're holding Bitcoin for wealth preservation specifically, as a hedge against institutional and government overreach, holding it through the institution most deeply embedded in the regulated financial system is a structural contradiction worth examining.
What to Watch
Watch for any regulatory action targeting Coinbase specifically. A freeze, a DOJ investigation, or an SEC enforcement action would have immediate ETF implications. Also watch whether competing custodians gain market share as issuers reassess concentration risk. Fidelity's self-custody model may look more attractive as the systemic risk argument matures.