Where funds sit, what an exchange can and cannot do with them, and the handful of habits that account for most losses that are not trading losses.
Nothing matches that. Try a shorter word.
Finding out that a service does not accept people in your country is annoying and it is usually informative. The line is drawn somewhere specific for reasons that are written down, and reading them tells you a great deal about how seriously an operator takes the part of its business that is not software. This describes how the mechanism works and is not legal advice about any particular situation.
Proof of reserves became standard practice after it was demonstrated, expensively, that a platform can report balances it does not have. The mechanism that emerged is genuinely useful and it is routinely described as more than it is. It answers one of the two questions that matter, and the missing one is the one that has historically done the damage.
Advice about crypto fraud is written for people buying their first coin, which is why it does not protect anybody else. The schemes that reach traders with years of experience do not rely on ignorance. They rely on routine, on timing, and on the fact that an active account signs things all day long.
The debate about self-custody is usually conducted between people who disagree about what a key is. It is not a container, nothing is stored in it, and a wallet holds no coins. Getting that right changes the question from an ideological one to a practical one: which failure would you rather be exposed to.
Cross-chain bridges have lost more value to attacks than any other category of crypto infrastructure, and it is not because the people building them are careless. It is because of what a bridge fundamentally is, and once that is clear the pattern of failures stops looking like bad luck.
Every trader accepts counterparty risk, because a balance you can trade in seconds has to be held by somebody. Almost nobody has looked at what that acceptance means in the specific event they are accepting it for. The mechanism is not complicated, it is just never described in the marketing.
Advice about crypto security concentrates on keys and wallets, which is where the value sits and not where the attacks start. The realistic path into a trading account runs through an email address, a reused password, or a device that also does everything else, and none of those are improved by better custody.
Self-custody works because only the holder of a key can move the assets. That is a security property in life and a disposal problem in death, and it is the one part of holding digital assets that cannot be fixed after the fact by anybody, at any price.
Every trader has handed a photograph of their passport to a company they had never heard of a week earlier, and very few have thought about what happens next. The requirement is real and it exists for reasons that have nothing to do with protecting the customer, which is worth knowing before deciding how to feel about it.