Before using BTC or ETH to seek income, decide what you can afford to put at risk and how you will keep control of your assets. Holding crypto, borrowing against it and depositing funds in DeFi expose you to different failures. A plan should account for each one—not just the price of the coin.
The risks change with the activity
- Holding: Price declines, lost keys, phishing and custody failures can damage a position even when you never trade.
- Using an exchange or custodian: Withdrawals, account access and the provider’s financial condition become additional concerns.
- Borrowing: Interest, changing collateral values and a lender’s liquidation rules can turn a price decline into a forced sale.
- Using DeFi: Smart-contract errors, admin-key misuse, unreliable price feeds, bridge failures and limited exit liquidity add risks beyond holding the underlying assets.
There is no single ranking that fits every holder. Chainalysis reports Chainalysis reports an estimated 158,000 personal-wallet compromise incidents affecting at least 80,000 victims in 2025. It estimates $713 million stolen from individual victims, down from $1.5 billion in 2024; personal wallets represented about 20% of stolen value in 2025. More recorded incidents involving personal wallets do not mean that their share of stolen dollars exceeded losses elsewhere. For the report’s broader account of stolen funds, see Crypto hacking & stolen funds — Chainalysis blog.
Build a risk process you can repeat
- Identify: List each asset, wallet, exchange, loan and protocol. Note who controls the keys, what you owe and what must work for you to withdraw.
- Assess: Consider the consequence of a failure and how plausible it seems. A simple impact × likelihood score can help you compare your own concerns, but it is not a measured probability.
- Treat: Reduce a position, change custody arrangements, avoid a protocol or accept a risk only if you can bear the potential loss.
- Monitor: Set a review schedule and identify events that call for an earlier check, such as a withdrawal pause, contract upgrade, deteriorating collateral position or stablecoin price deviation.
For illustration only, a holder might assign a hypothetical protocol an impact score of 3 and likelihood score of 1, producing 3 × 1 = 3. Another hypothetical position might score 5 × 4 = 20. Neither number measures actual safety; an audit does not justify assuming that loss is unlikely. Likewise, a farm advertising a hypothetical 40% yield would require scrutiny of where payments come from and what could interrupt them.
A stablecoin deviation of 3% could be someone’s hypothetical prompt to review a position, not an established emergency threshold. The academic work linked to that example concerns proposed recovery from lost cryptographic keys, not stablecoin pegs. Choose review triggers around the positions you actually hold and the actions you could realistically take.
Size exposure around your obligations
Start with essential expenses, emergency reserves and long-term commitments. Ask how a severe crypto loss would affect them. Then look separately at your total crypto allocation and how much depends on one asset, custodian, chain or DeFi protocol. Owning several tokens may offer little protection if they fall together or rely on the same infrastructure.
For example, choosing 5% of net worth as a crypto allocation would be a hypothetical personal decision, not a suitable target established for most readers. The useful exercise is to write down your own limit, the losses it assumes and when you will reassess it. A position small enough to tolerate a price decline may still be too large to expose to one contract failure.
If you rebalance by selling or withdrawing from a protocol, consider execution costs and tax treatment. Borrowing against crypto instead of selling it is another decision, not a way to leave a core position risk-free or assure a particular tax result. Our guide to borrowing against crypto versus selling examines that trade-off.
Separate trading exits from loan liquidation
A trading stop is an order that may execute at an unfavorable price—or fail to execute as expected—in a fast or illiquid market. Staging orders changes execution risk; it does not prevent a loss. A crypto-backed loan works differently: its agreement or protocol determines collateral requirements and when collateral can be liquidated. A trading stop cannot override those rules.
Before borrowing, identify the outstanding debt, interest costs, collateral requirements, price-feed rules and liquidation process. Run adverse-price scenarios, including a sharp hypothetical decline, and ask whether you could repay or add collateral in time. Keeping funds available to add collateral may give you options, but those funds can become exposed too, and a fast move can outpace your response. No fixed borrowing multiple or buffer guarantees safety. Read more about crypto loan liquidation and its triggers.
Protect access to your assets
Self-custody removes reliance on a custodian for access, but makes key management your responsibility. If no usable backup or recovery method remains, losing a private key can cause permanent, unrecoverable loss. Assess hardware wallets, secure backups and, for holdings that warrant the added complexity, multisignature arrangements against your own threat model. Test a recovery procedure without exposing a seed phrase, and plan how a trusted person could handle an emergency.
Custodial arrangements shift some operational work to a provider but introduce counterparty and withdrawal risk. Ask who controls keys, how access is authorized, what happens during an outage and which assets or losses—if any—are covered by insurance. A proof-of-reserves snapshot alone cannot establish all liabilities or future solvency.
SEC Commissioner Hester Peirce has described crypto custody rules as genuinely uncertain in remarks about investor choice and custody. Those are her remarks, not an SEC guarantee about any provider. Her full roundtable remarks appear at Lava and lamps: opening remarks for crypto custody roundtable — SEC (Peirce). Separately, the Federal Reserve Board, FDIC and OCC issued a joint statement for banking organizations on crypto-asset safekeeping, hosted by the OCC: OCC’s guidance for institutions. Its discussion of key management, contingency planning, third parties and audits offers useful questions to ask a provider; it does not certify one. The joint statement is also available as OCC guidance on crypto-asset safekeeping.
Check a DeFi strategy before depositing
Find out how the proposed income is generated. Liquidity-provider fees, for example, must be weighed against changes in the value of the assets you can withdraw, transaction costs and any financing costs. Borrowing does not remove a liquidity pool’s impermanent-loss mechanics.
Read what an audit covered and when it occurred; check whether contracts can be upgraded, who controls admin keys, whether changes have timelocks and whether a bug bounty is active. Examine the price feeds, bridges and stablecoins a strategy depends on. These checks help expose questions, not prove that a protocol is safe. Test how you would exit before committing an amount you could not afford to lose.
Understand legal, tax and insurance limits
Protections depend on the asset, account, provider and jurisdiction. In the United States, crypto assets are not FDIC-insured deposits simply because they are purchased through an insured bank. SIPC protection depends on the asset’s legal status and the circumstances of a SIPC-member brokerage failure; it is not general protection against price declines or theft. Read a custodian’s terms and any insurance policy’s covered events, exclusions and limits rather than assuming the word “insured” covers your balance.
For U.S. federal tax purposes, a sale of digital assets for dollars can produce a reportable capital gain or loss. A crypto-backed loan’s treatment depends on its structure and subsequent events, including any transfer or liquidation of collateral. Other countries apply different rules. Keep records of acquisitions, transfers, dispositions, income, loan activity and fees, and ask a qualified local adviser about transactions that affect your reporting. Our crypto-loan tax explainer is a starting point, not a determination for your circumstances.
Cross-border holdings can add questions about ownership, reporting and applicable law. Seek legal or accounting advice from appropriately qualified professionals. international asset protection is one contextual example of the broader cross-border planning topic, not a substitute for that advice.
Make monitoring practical
Keep a current list of positions, debts, custodians and recovery arrangements. Review concentration, collateral requirements, borrowing costs, protocol changes and withdrawal conditions on a schedule you can maintain. Review sooner after a material change. A short written record of why you entered a position and what would make you leave it can also counter the urge to chase a rally or wait indefinitely for a losing position to recover.
Monitoring tools may help you gather information, but confirm their coverage and data freshness. An alert cannot guarantee that you will see it or have time to act. OverseasDeFi’s portfolio tools and portfolio-aware AI coach can help frame questions about holdings, debt and adverse-price scenarios alongside human guidance. They cannot provide complete knowledge of every protocol or prevent liquidation. The Daily Yield System’s Hold → Borrow → Deploy → Earn sequence is an educational way to examine whether keeping exposure, borrowing and pursuing fee income make sense together; skipping borrowing may be the better choice when its costs and risks do not fit.
Frequently asked questions
What is crypto risk management?
It is a repeatable process for identifying what could go wrong with your holdings, judging the possible harm, deciding how much exposure to accept and revisiting those decisions as circumstances change.
How much of my portfolio should be in crypto?
There is no percentage suitable for everyone. Consider essential expenses, your capacity to absorb a large loss, other assets and whether one coin, provider or protocol dominates your exposure.
Is self-custody safer than using an exchange?
It avoids some provider risks but places key security and recovery on you. Compare your ability to maintain secure backups with a provider’s access controls, withdrawal terms and financial risks.
Can collateral buffers prevent liquidation?
No. A buffer can provide room to respond to a price decline, but interest, rapid price moves and the loan’s specific rules can still lead to liquidation. Added collateral is exposed as well.
Can crypto holdings be insured?
Some providers or specialized policies cover specified events. Coverage is not universal: verify who is insured, which assets and losses qualify, the policy limit and its exclusions. Self-custody has no automatic insurance merely because a wallet is secure.
Does borrowing against crypto avoid tax?
Do not assume so. Treatment depends on jurisdiction, loan structure and events such as a collateral transfer or liquidation. Keep records and obtain advice on your specific arrangement.