Wallets and keys

Definition

Crypto ownership is key control: an asset belongs to whoever can produce a valid digital signature with the private key matching the address holding it (Nakamoto 2008; NIST IR 8202). A WALLET is key-management software or hardware — it stores keys and signs transactions; the assets themselves live on the ledger. This inverts the securities model: there is no issuer register, no transfer agent, no recovery process — possession of the key IS the entire property claim, which makes key management the security perimeter for any self-custodied position (crypto-custody-models).

How it works / structure

• Key pairs and addresses: a private key generates a public key, hashed into an address; funds sent to the address are spendable only by a transaction signed with the private key (NIST IR 8202 documents the signature flow). Signatures authorize; the network verifies — no intermediary approves.
• Seed phrases: modern wallets derive all keys from one seed (a mnemonic word list); the seed is a complete, portable copy of every key it derives — whoever holds it holds everything, forever.
• Hot vs cold: hot wallets keep keys on internet-connected devices (convenient, exposed); cold wallets keep keys in offline hardware or air-gapped storage, signing offline — the institutional standard for size (crypto-custody-models).
• Multisig / key sharding: spending policies requiring M of N keys, splitting compromise risk across devices, people, or institutions — the mechanism under qualified-custody and treasury arrangements.
• What a venue account is NOT: an exchange account involves no customer keys — it is a database row at the venue; key semantics apply only at withdrawal (crypto-transfer-settlement).

When it applies

Any self-custody decision (the operational-security burden is part of the position’s cost), evaluation of custody arrangements (what key architecture stands behind a custodian’s promise), and loss-mode analysis — most catastrophic crypto losses are key events: theft, loss, or coerced signing (crypto-loss-modes).

Risk profile & failure modes

• Irreversibility: a signed, confirmed transaction is final (crypto-transfer-settlement); key theft converts instantly to unrecoverable loss — no chargeback, no freeze order the network honors.
• Single-point seed risk: the seed phrase concentrates all derived keys; one exposure event (photo, cloud backup, phishing) compromises everything downstream.
• Loss without theft: forgotten passphrases, destroyed devices without seed backup, and death without key succession strand assets permanently — a materially documented fraction of early bitcoin supply (industry estimates; labeled imprecise).
• Human-layer attacks: phishing, SIM-swap account takeover, and social-engineered signing dominate realized incidents — the cryptography holds; the human perimeter fails (crypto-loss-modes).

Evidence & limits

Key mechanics are protocol- and NIST-documented and not contested. Loss and theft magnitudes are industry estimates (chain-analysis vendors, venue disclosures) of uneven quality — cited as ranges and labeled when used. This entry takes no position on which wallet products are safe; product security is a dated, per-product operational claim.

Falsifiable-thesis examples

Illustrations only, not signals:

• “Coins dormant for over ten years remain dormant this year (stranded-supply thesis: dormancy reflects lost keys, not patient holders)” — falsified by significant dormant-coin movement in on-chain data (crypto-onchain-metrics).
• “Publicly reported key-compromise incidents at custodians decline year over year as multisig/sharding adoption spreads (institutional-hardening thesis)” — falsified by the incident record.

Cross-references

• Who holds keys: crypto-custody-models; what signing moves: crypto-transfer-settlement
• What the key owns: crypto-coins-vs-tokens; how it all gets lost: crypto-loss-modes