A conversation with Adam Back at Bitcoin Park's Custody and Treasury Summit in Nashville, TN. We discuss the current state of bitcoin custody and how it applies to individuals, small businesses, and public companies.
Date: September 18, 2025
Adam on Nostr: https://primal.net/adamback
Adam on X: https://x.com/adam3us
Bitcoin Park on Nostr: https://primal.net/park
Bitcoin Park: https://bitcoinpark.com/
(00:00) Teaser
(01:07) Not your keys, not your coins
(01:49) Why self custody matters: seizure and asset protection
(03:06) Early Bitcoin legal fears and Obama’s Swiss bank quote
(03:54) Individuals adopt self custody; shift to business treasuries
(04:22) Custody advice for small businesses and dentists
(05:34) Multisig basics, redundancy, and vendor diversity
(06:45) Single sig vs multi sig usability and learning curve
(07:32) Practical setups: single sig cold storage and backups
(08:24) Keeping multiple backups
(09:06) Fireproof steel backups and moving to treasury topics
(09:30) Public companies using custodians: risks and drivers
(10:48) Collaborative custody among custodians and decaying multisig
(12:10) Balancing third party risk vs operational self custody risk
(12:43) Finality, time locks, and covenant based safety nets
(13:59) Why multisig is essential for large organizations
(14:56) Industry pushback and the case for proof of reserves
(16:20) Adoption of proof of reserves and hybrid treasury strategies
(16:51) Closing and audience Q&A intro
Video: https://primal.net/e/nevent1qqsxtltftjfavnlg8ysjvnn9504l40ykq8hdw25pcmaljwdx0xp9wyswev5e3
more info on the show: https://citadeldispatch.com
learn more about me: https://odell.xyz
So as the saying goes, not your keys, not your coins. If if you can birth a child, you can self custody. Like, the risk you're balancing is on one side you have third party risk, and then the other side you have operational self custody risk. Risk. I'm really appreciative of these two fine gentlemen closing us out. Without any further ado, please join me in welcoming Matt O'Dell and Adam back. Thank you, Rod. Before we get started, I just wanted to let the record show that I like the bit key. The recovery process is you you download a PDF, and then if for some reason Square disappears, you download the APK that's on GitHub, and you scan the QR code on the PDF, and you're able to restore your funds. I've done the process. It's not, like, the most ideal process. I like seeds better, but it gets the job done. It's very easy to use. Anyway, guys, we have the legendary Adam back here with us. Can we get a round of applause for Adam?
[00:01:06] ODELL:
Adam, we're gonna be talking about custody today. Do you know anything about that? Okay. Yeah. So as the saying goes, not your keys, not your coins, and then we get into the details of how you manage your keys. Yeah. So, I mean, last cycle,
[00:01:19] Adam Back:
I heard very frequently that not your keys, not your coins is FUD. And then FTX happened, and everyone realized that it was not FUD. But now we're three years later, and I feel like, time is a flat circle, and we're kind of back where we started in a lot of ways with new people. So I think a good place to start just real quick is for the individual, why is the ability to self custody Bitcoin so important?
[00:01:49] ODELL:
Well, I mean, I think if you if you think about it, Bitcoin is providing kinda asset protection in the sense of it being hard for a third party to seize your assets. So, you can think about that like in The US, your primary residence, if you live in the state of Florida, that is protected in a legal way, but an even stronger protection is you have the keys, then there's no pressure point that the court can go through other than you yourself to seize your assets preemptively. And unfortunately, that is actually a material consideration for some professions that are commonly on receiving end of legal, it's like medical professionals, dentists.
So they will actually go and make use of these legal asset protection mechanisms because they're gonna get sort of frivolous court cases that try to seize their assets. And then, you know, if you find yourself in the unfortunate position of being attacked by the government, if you were involved in some activist activity or running online privacy servers like Tor servers, remailers, step one in those kinds of things is they seize all your assets so that you can't afford a lawyer, so you're an easy target. So some of the early Bitcoin developers were thinking about this as well because it was very unclear what the legal status of Bitcoin was, if developers could be targeted. So I think Barack Obama did actually the accidental best advertisement for why you should wanna custody your own Bitcoin, which is I think he was viewing it as a problem actually, but if you look online, there's a there's a thing where he says that, you know, everybody's walking around with a Swiss bank account in their pocket and, like, yes. You got it. But he thought it was a problem actually, and he he wanted to stop it.
[00:03:31] Adam Back:
Yeah. I mean, it's actually way better than the Swiss bank now because they handed over a ton of information. So so we have on the individual side, and I remember that Barack. I've it was the whole Bitcoin community did, like, the Leo DiCaprio meme, like, pointing with the beer in their hand. So we on the individual side, I think I think more or less, like, it's become standard practice that when people come in, they understand the importance of self custody. Like I said, FTX did help a lot on that front. But now we're seeing more and more businesses adopt Bitcoin as a treasury asset, as a savings vehicle for their free cash flow.
But I think it's important not to group all businesses together. Right? I think we're seeing a lot of small businesses adopt a Bitcoin, and then we're seeing these large publicly traded Bitcoin treasury companies. So I'd like to start with the on the small business side. If someone if a dentist office, for instance, was coming to you, let's say a heavily profitable dentist office that was making, like, a million dollars net a year, and they wanted to keep the majority of their free cash flow in Bitcoin, what would be your actionable recommendation for them in terms of how to custody that? Well, get a hardware wallet and generate the seeds,
[00:04:45] ODELL:
correctly, like, on the hardware wallet, and back it up in a fireproof way, and put the seeds somewhere safe that, you know, a member of staff or somebody can't easily get to. And if it's an asset protection situation, you kinda want that to be a bit obscure so that it's not obvious to the authorities because, you know, that that's what happens people is there. You know, there were people that were, I guess, selling Bitcoin OTC for cash, and that was not approved at some point. So they, sort of raid people's houses and take everything electronic and backup looking, and that could be a problem. So you gotta take that into account as well. So it's a little tricky sometimes to figure out where to store the backups. But if you're not really worried about the legal attack, at least make sure that it's not gonna be somewhere that can be stolen easily.
And I think if you wanna go further, you can consider, a multisig, like a two out of three multisig with three seeds and back those up in different places. The extra redundancy will protect you if you lose one of them and use three different hardware wallet manufacturers so that if one of them has some horrible bug that nobody saw coming, you're still protected. So that's kind of the state of the art. It's a little bit complicated, which is, you know, why you see the Bitcoin discussion because usability is a factor. I think, you know, the counterargument to that is when people care about things, they can figure stuff out. Like, people can use computers. If they care about it, they can
[00:06:16] Adam Back:
do a lot of things. So I think people can learn how to manage seeds. Okay. I mean the big one for me relatively recently was I became a father. Raising a child in childbirth, which I didn't do childbirth, my wife did, is incredibly impressive. Like if peep I I always say that if if if you can birth a child, you can self custody. Like, every woman out there deserves a ton of I know all the women in the world, all the mothers at least, can self custody Bitcoin. I'm not sure about the men, but maybe we'll make it more usable for them. I would I just wanna just drill into that for a second because what I hear because this is, like, it's kind of combined on the individual and small business side. Like, the recommendations are almost very similar. Right? It's self custody, learn how to do it the right way, keep your backups offline, do proper cold storage, practice, practice, practice. But what I see a lot on both the individual and maybe even, like, the family office, small business side is they say, you know, multisig is you should only do multisig.
Single sig is not secure. And if you if you're not willing to do that, they, like, almost overwhelm you into then going and buying MSTR instead. They say go buy MSTR. I so I'm kinda and I so I think, like, almost as an industry, we've kinda pushed too far into the paranoid multisig or bust. And so I'm kinda curious on your opinion. For, like, the average person, you know, maybe their threat model doesn't include a government, like, single SIG, self custody, cold storage, you know, you buy a single hardware wallet, you put it on steel is is pretty fucking good. Right? Oh, it is good. Yeah. I mean, that's that's certainly where I started with,
[00:07:51] ODELL:
it's before the HD wallet. So it was with, Bitcoin Armory, which is you have two laptops, and you take the network card out of one, and that's your hardware wallet. And it generates the seeds, which were a different standard at that time, and you write them down. And I think they were already fireproof backups, but they just were a different format. I think where things and it it was using, you know, not multi sig, but, some kind of, what do you call that, like a redundancy encoding so that you can, With something like Shamir's or something like that? Shamir thing. But it was a custom one that they did. So, anyway, you could you could say you wanted two or three, and it would it would reconstruct to one seed. I mean, it's a one private key. So, actually, it wasn't multisig, but it had the redundant backup. So that's another way to go. And I I think the redundant backup is good because people will, forget things if they hide them in clever places after a few years when they don't they don't have to use it frequently.
[00:08:52] Adam Back:
Yeah. So keep two backups at least. Yeah. I would say so. And then, like, if you're keeping it in your house or something, your house burns down, like, it's good to have it somewhere else.
[00:09:01] ODELL:
Yeah. And and this the fireproof backup things are
[00:09:04] Adam Back:
pretty reasonable to use as well, like the crypto steels. Little steel plate washers. Okay. Let's get into treasury companies because I think most people in this room are aware that you're launching your own. These treasury companies, these large businesses, specifically, I mean, you have, like, MSTR and then you have everyone else. I don't believe any of the I don't I don't know of any of them that are actually doing self custody, and they're mostly using regulated custodians. Twofold, how should people that are are are trying to analyze these different stocks and whether or not they should buy them think about that risk? And second of all, how should officers of those companies think about that risk? And moving forward, should they be moving to better models, or is the the current status quo sufficient? I mean, I think what,
[00:09:53] ODELL:
started them on a track of using custody providers is, whatever they do, they have to get their public company audit firm, you know, one of the big four typically, to, be willing to give it a stamp of approval. And so that's a kind of defensive standard, so they're probably gonna advise them to use a qualified custodian in a certain country with a certain set of licenses and audit off the custodian itself. Right? But I have talked to public market treasury companies who are, you know, looking at soft custody as well, so it's not something that they are unsensitive to. And one thing that we like Blockstream, we've been working with some developing custody technology and working with licensed custodians to integrate that is the concept of collaborative custody at the custodian level.
So let's say that you're working with, you know, two independent audited custodians and you make a two or three where you have one of the keys that's already better than the single custodian because, they have to collaborate with each other. So it wouldn't be just, like, one rogue, you know, one company, one custody company with a a bad practice or a rogue employee somehow managed to work overtime and overcome it, and then your funds are gone. Because if that situation develops, the other company wouldn't or you wouldn't if you have to sign it. And I think the other thing is, you know, we've got AnkerWatch in the room as well is the decaying multi sig concept. Right? So you can start with a certain setup. So you could start with you having two of the keys and the custodians having the same key each or something. So if one of the custodians fails, you still have the redundancy, and they can't do anything without you.
And then to protect yourself, if you make a operational blunder, that over time, that could swing to the other direction. So I think it's possible to provide a kind of safety net where you're protected from backup failures of your own and protected from reliance on third parties at the same time, so it can kind of fall back to relying on third parties to help you recover access if you make an operational mistake, but start from a point of view that you're in control de facto to start with.
[00:12:11] Adam Back:
I mean, you're kind of balancing. Right? The the risk you're balancing is on one side, you have third party risk, and then the other side, you have operational self custody risk. Right? Yeah. I think, you know, apart from those mechanisms,
[00:12:24] ODELL:
the thing that makes it somewhat dangerous to manage Bitcoin custody is if it if somebody gets access who shouldn't have access, it's gone. Right? A Bitcoin transaction is final. You can go complain to developers and miners all you want. It's not going undone, and that's a feature of the network, so you sort of have to have to accept that's how it works. And, the only way around that really is the smart contract or, you know, Bitcoin script equivalent of time locked bolts, which you can just about do using Bitcoin script, but it's a bit it has side effects. It's not not ideal for backup. You basically have to pre sign lots of transactions, and then you've gotta back those transactions up. But, you know, there are in the covenant discussion, I think that is probably the most, compelling reason to even want covenants is is to have this kind of protection because with that, you can have custodians in the two of three. And if the custodians conspire and you move you I mean, you move the Bitcoin and you weren't expecting it, you can cancel it. Right? So if you're in a situation where you don't need to move money quickly, you can say, well, if, you know, all of the coins, if they move, I should have a week to cancel them, then you can override that kind of thing and reassert control. So that sort of provides you with a bit of a safety net.
And so there are there are companies working on sort of prototype versions of doing that with current Bitcoin script using lots of presigned transactions. And there are designs for doing it with, you know, it doesn't really matter that much which covenant. They can mostly do that kind of thing. I I mean, I think in general,
[00:14:02] Adam Back:
when it comes to large organizations or companies, like, multisig is by far the gold standard. Like, I think it was important that we covered that for individuals and smaller businesses that are getting involved with Bitcoin, single sig is is incredibly powerful and and doesn't have as much of an operational burden to manage. But when when you're talking about large organizations, I mean, just from the the pure the pure example of, like, micro strategy, like, sailors shouldn't have 600,000 Bitcoin on a cold card. Right? Because then all of a sudden you you you enter territory where you have a single individual risk, where if if that individual gets compromised or is malicious, then they can rug the entire organization.
So I think multisig solves a lot of things. I do question how quickly the industry will actually move to these superior models. I mean, we've seen Saylor specifically who is very much the leader of the movement push back against it. And and he is and combined with that is this this whole concept of proof of reserves. So I'm kind of curious on your opinion on whether or not basically the industry and investors should be demanding proof of reserves from these companies and because it I feel like that is goes hand in hand with how you choose your custodians and and how you handle custody. Yeah. I mean, I think the somebody was pushed on that. I think Coinbase tried to argue against that on some
[00:15:25] ODELL:
operational security reasons. I know Sailor specifically said it causes operational security issues. I've seen Coinbase say the same thing, but I don't I don't really see it. I mean, the whole the block explorer is public. You can go find some high value coins and point at them. I think it's you no advantage in seizing them or stealing them. Right? So I don't I don't really buy it. So and I think it it doesn't hurt, you know. It only helps confidence in the in the company. I mean, they they're paying for audit statement. A block explorer link is very cheap, so they can just ask their custodian or if they're cold steering it, provide the links. It's pretty easy and doesn't hurt.
Yeah. So the and and a few of them are doing it. So, you know, it shows it can be done without issue. Yeah.
[00:16:09] Adam Back:
Yeah. I mean, even the country of El Salvador is doing it. Yeah. There you go. Example. But, yeah, I the ones that I know of is Meta Planet and XXI are doing it. I mean, do you think it's gonna become more common, at least to prove reserves piece?
[00:16:21] ODELL:
Yeah. It could. I mean, I think, you know, with a company like Meta Planet, they are doing a hybrid approach. So they when they raise money, they put most of it into buying a cost during Bitcoin, but they do with a bit of it, they're doing call strategies. It's part of their strategy. There's presumably some tax or specific reason for it. So, of course, those are they can't provide links for that because it's, like, an option position on some platform. Right? But for the cold store Bitcoin, yeah, I think why not, really?
[00:16:52] Adam Back:
Love it. Should we rip some q and a for the audience? Yeah. All good. First of all, can we get a huge round of applause for
Teaser
Not your keys, not your coins
Why self custody matters: seizure and asset protection
Early Bitcoin legal fears and Obama’s Swiss bank quote
Individuals adopt self custody; shift to business treasuries
Custody advice for small businesses and dentists
Multisig basics, redundancy, and vendor diversity
Single sig vs multi sig usability and learning curve
Practical setups: single sig cold storage and backups
Keeping multiple backups
Fireproof steel backups and moving to treasury topics
Public companies using custodians: risks and drivers
Collaborative custody among custodians and decaying multisig
Balancing third party risk vs operational self custody risk
Finality, time locks, and covenant based safety nets
Why multisig is essential for large organizations
Industry pushback and the case for proof of reserves
Adoption of proof of reserves and hybrid treasury strategies
Closing and audience Q&A intro