Part 05 · Web3 and digital assets
Wallets, custody and exchangesالمحافظ والحفظ Custody ومنصات التداول
The products people actually open: where keys live, who holds them for you, and where tokens change hands for cash.
4 minute read
A wallet holds the key that moves your balance. A custodian is a company holding that key on your behalf. An exchange is a marketplace matching a buyer with a seller.
They are not interchangeable names for one screen. They are three different businesses, and confusing them is how most beginners lose money.
A wallet does not store money
Correct the first misunderstanding. A wallet does not contain coins the way a leather wallet contains notes. The balance is recorded on the chain itself. The wallet holds one thing: the private key (المفتاح الخاص) that proves you own that address.
Picture a glass mailbox. Everyone can see what is inside, and only whoever holds the key can open it. So deleting the wallet app from your phone does not burn your money, as long as you still have the key. Install the app on another device, enter the key, and the same balance reappears.
That key usually arrives as a seed phrase (عبارة الاسترداد): twelve or twenty-four English words in a specific order. Those words are literally the money. Anyone who reads them can empty the balance from anywhere in the world within minutes, and there is no bank to reverse the transfer and no police force that retrieves it from an anonymous address.
This is why the most common scam in the field is sadly simple. "Technical support" contacts you and asks for your seed phrase to help. No legitimate support ever asks for it, because it is not a password that can be reset. It is the ownership itself.
Hot or cold
Wallets split by whether they touch the internet. A hot wallet (المحفظة الساخنة) is software on your phone or browser, like MetaMask or Trust Wallet. It is convenient for daily use and exposed to any compromise of the device.
A cold wallet (المحفظة الباردة) is a small separate device such as a Ledger or Trezor, which the key never leaves. When you want to transfer, the device signs the transaction inside itself and only the signature comes out. Even if your computer were entirely compromised, the key never passed through it.
The working rule professionals follow: daily operating funds in a hot wallet, everything else cold. Exactly as you keep some cash in your pocket and the rest at the bank.
Custody is an institutional business
A custodian (الحافظ) is a company that holds keys on behalf of clients under written controls. It is not an app but an operation closer to a bank vault: client assets segregated from company money, multiple approvals before any large movement, insurance, and a plan for what happens if a signing device is lost or an employee leaves.
An institutional custodian rarely uses a single key. It uses multi-signature (التوقيع المتعدد), where a movement needs, say, three of five keys held by different people in different places. Stealing one key is not enough, and one employee's death does not freeze the assets. Fireblocks, BitGo and Coinbase Custody are among the best-known providers.
An exchange is a market and a custodian at once
An exchange (منصة التداول) matches buy and sell orders. But a centralised exchange like Binance or Coinbase also does something many people miss: it holds your balance between trades, in its own addresses.
That means what you see in your exchange account is not an on-chain balance in your name. It is a row in the exchange's database saying it owes you that amount. This is not a legal footnote. It is the difference between owning something and being a creditor of a company.
Loading diagram…
And the decentralised exchange
A second kind of venue never holds your money at all. A decentralised exchange (المنصة اللامركزية), or DEX, is not a company but a smart contract, and your funds stay in your own wallet until the moment of the swap itself. Uniswap is the best known.
The trade-off is explicit. You gain not having to trust anyone with your money, and you lose having anyone to complain to. No support desk, no reversal of a wrong transfer, and no identity check protecting you from a fake contract with a similar name. Plenty of people have lost funds by approving a permanent spending allowance for a contract they never read.
Why the same disaster happened twice
The market learned this lesson twice, expensively. In February 2014 the Japanese exchange Mt. Gox collapsed while handling most of global Bitcoin trading, and around 850,000 bitcoin were lost. In November 2022 FTX failed, and its customers could see their balances on screen while the money had been used elsewhere.
Hence the most quoted line in the field: not your keys, not your coins. After FTX, exchanges began publishing proof of reserves (إثبات الاحتياطي), cryptographic evidence that they really hold what matches customer balances. It is a genuine improvement, but it proves assets without proving liabilities, so it does not replace regulation.
Reading this from Saudi Arabia
Do not treat a global app like because its interface is in Arabic. No Saudi authority currently licenses crypto asset trading for individuals, which means in practice that a dispute with a foreign platform is not heard by a court you can easily reach, and no deposit protection scheme covers it.
The real value of this topic is not choosing an app. It is mastering the question that separates every product here: where is the key, who can move it, and what happens if the company holding it fails.
New words here
- Self-custody walletمحفظة الحفظ الذاتي
- Software or hardware where you control the private keys yourself.
- Custodianالحافظ
- A party that holds keys or assets for clients under defined controls and often a licence.
- Exchangeمنصة التداول
- A venue that matches orders to buy and sell tokens, sometimes also holding customer balances.
- On-ramp / off-rampمنحدر الدخول / الخروج
- The path that turns bank money into tokens, or tokens back into bank money.
The short version
- A wallet stores no coins. It stores the key, and the seed phrase of twelve or twenty-four words is literally the money. No legitimate support ever asks for it.
- Hot for daily spending, cold for the rest, exactly as you split pocket cash and a bank account. A Ledger signs inside itself so the key never touches a compromised computer.
- A balance on a centralised exchange is a row in its database saying it owes you. That is being a creditor, not an owner.
- The market learned this twice: Mt. Gox in February 2014 with around 850,000 bitcoin, and FTX in November 2022. Proof of reserves proves assets, not liabilities.
- Institutional custody runs on multi-signature, where three of five keys in different hands are needed, so one theft and one death both fail to matter.
Check your understanding
Answer before reading the explanation. Getting one wrong here is worth more to you than a lucky guess.
This is a learning guide built from field experience. It is not legal, regulatory or investment advice, and it does not replace qualified professional counsel. FinTech rules change quickly and vary by country, so check the primary source before you make a decision that matters.