BLOCKCHAIN & WEB3 FUNDAMENTALS - Chapter 7, Exercise 2 Solution ========================================================== Why an Exchange's Security Quality Doesn't Solve the Custodial Problem PROBLEM ------- Using the real Mt. Gox case, explain specifically why holding coins on an exchange is structurally different from holding them in a non-custodial wallet, even if the exchange itself has excellent security practices. SOLUTION -------- The structural difference isn't really about how good any particular exchange's security is at a given moment - it's about who actually holds the private keys, and therefore who actually has the final, independent ability to move the funds. In a non-custodial wallet, you hold your own private key. Nobody else can move your coins without your signature, and nobody else's own security failure - a hack, an internal fraud, a bankruptcy - can directly take your coins away from you, because they were never actually inside anyone else's system to begin with. On an exchange, your balance is really just an entry in the exchange's own internal database, or IOU, backed by coins the exchange itself holds in its own wallets (often, as with Mt. Gox, a hot wallet). Whatever security level the exchange maintains, the fundamental structure is the same: your actual claim on those coins depends on the exchange remaining solvent, honest, and operationally secure - not on your own private key, since you don't hold the one that actually controls the funds. This is exactly why the Mt. Gox case is a real, structural example rather than just "bad luck" - Mt. Gox was, at the time, the largest and most established bitcoin exchange in the world, handling over 70% of global trading. Its scale and prominence didn't change the underlying structural fact that customers didn't hold their own keys. Investigators later found the theft had actually been happening gradually since late 2011, years before it was discovered - meaning even a security failure inside a seemingly reputable, established custodian can go completely undetected by its own users for a long time, precisely because those users have no independent way to verify their funds are actually safe. ANSWER: Even with excellent security, an exchange holding your coins custodially means your actual claim on those funds depends entirely on that exchange's own solvency, honesty, and continued operational security - not on cryptography you control directly. Mt. Gox illustrates this concretely: its real-world scale and reputation didn't change the underlying structural risk, and its own internal theft went undetected by customers for years, exactly the kind of exposure a non-custodial wallet - where you alone hold the private key - simply doesn't have. ---- WHY THIS WORKS AS AN ANSWER This isolates the real structural distinction (who holds the private key) from the surface-level distraction of "how good is this particular custodian's security," using Mt. Gox's own real, documented prominence and multi-year undetected theft to show why the structural risk exists regardless of a custodian's apparent reputation.