The Coinbase allegations expose Bitcoin's corporate governance gap
BlockTower Capital founder Ari Paul alleges Coinbase lost about $25 million of his firm’s assets and concealed more than $1 billion in hacks; Coinbase denies the claims, and Paul says litigation prevents him from sharing evidence. The dispute highlights how clients cannot independently verify assets or control practices at many custodians. The piece argues that weak custody governance—not bitcoin itself—impedes corporate adoption, citing risks from lost keys, physical attacks, data breaches and increasingly sophisticated phishing. It criticizes single-login self-custody, reliance on one exchange and proof-of-reserves snapshots, which do not establish who can authorize transfers or whether controls remain effective. It advocates multisignature custody across independent institutions, with named users, withdrawal approvals, client visibility and audit trails, while acknowledging the operational complexity. Boards should demand clear answers about asset control, movement approvals and resilience if any individual or custodian departs.
