Blockchain investigators estimate that losses tied to unauthorized hardware implants in Ledger devices could exceed $86 million, a figure that has reignited an industry-wide debate over whether Bitcoin ETFs now offer safer custodial outcomes than self-custody through hardware wallets.

The estimates follow the discovery of a compromised Ledger wallet containing an unauthorized hardware implant, alongside a separate exploit affecting Coldcard devices. Together, the incidents have pushed long-standing arguments about cold-storage security into mainstream industry discussion.

What did Plan B say about the ETF shift?

Bitcoin analyst Plan B said his decision to move his BTC holdings into ETFs in 2025 — a call that drew criticism at the time — has been vindicated by the recent exploits. "Zero regrets" about the ETF decision, he wrote in a Monday post on X.

His remarks signal a notable reversal for a figure long associated with Bitcoin-maximalist positioning, where self-custody has traditionally functioned as a core principle rather than a preference.

How widespread is the shift toward ETF custody?

Large holders have been converting self-custodied assets into ETFs for "enhanced security" for years, and that trade-off has served as one of the main "selling points" for the products, according to Ophelia Snyder, co-founder of 21Shares. The recent exploits simply moved the phenomenon into the "public discourse," Snyder told Cointelegraph in an email on Monday.

Snyder framed the core weakness of self-custody as operational rather than technological. The security of a self-custodial setup depends on the investor's technical expertise and individual configuration, she argued.

"Without taking the time and rigor to set up properly, self-custody will always be less secure than handing over the assets to a specialist firm whose job it is to manage those protocols for you," Snyder said.

The business implication cuts both ways. Asset managers gain a structural argument for gathering assets, while hardware wallet manufacturers face renewed pressure to demonstrate supply-chain integrity — the specific attack vector implicated in the Ledger implant case.

Are hardware wallets still viable?

Blockstream CEO and Hashcash inventor Adam Back rejected the conclusion that hardware wallets are fundamentally broken. He argued the devices remain secure custodial options but said providers have lagged in understanding the evolving threat landscape.

"Surprisingly few manufacturers understood the generic attacks, or so it seemed from their marketing and design choices, for the last decade. Time to catch up with threat-modelling," Back wrote in a Saturday post on X.

Back's critique targets a decade of design complacency rather than any single incident. For manufacturers, the operational consequence is concrete: supply-chain verification, tamper evidence and adversarial testing programs will likely become table stakes for retaining institutional and retail trust.

What about systemic risk from mass migration?

Jameson Lopp, a Bitcoin security researcher and cypherpunk, offered a third position. Self-custodial wallets can remain robust, he said, but he urged investors against mass migration executed in haste, warning that rushed transfers could create new central points of failure.

The concern echoes a classic custody dilemma: dispersing risk across millions of individual setups versus concentrating it with a handful of regulated custodians. The $86 million implant estimate sharpens that trade-off, but Lopp's caution suggests the answer is not simply switching venues under pressure.

What happens next?

The immediate test falls to hardware wallet vendors, who now face demands for transparent threat modelling and verifiable supply chains. Whether manufacturers respond with audited security programs — or whether the drift toward ETF custody accelerates — will shape the custody market's structure through the coming cycle.