American Banker's Paul Vigna opened a recent column with a deceptively simple riddle: imagine an account paying a spectacular interest rate, 10%, 20%, whatever you like. What does that yield earn you if the account is empty? Nothing, of course. The point of the riddle is that a headline yield is worthless until someone trusts a place enough to put their money there, and it frames the real question hanging over crypto's bid to compete with banks for deposits. That bid is usually pitched as a contest over yield. It is actually a contest over safety, and safety is the one thing crypto's design makes genuinely hard to offer.
The occasion for the column was a painful illustration. A bitcoin-only hardware wallet called Coldcard, marketed by its maker as a Swiss bank account in your pocket, was exploited in what may be the largest wallet-maker breach in crypto history, with attackers compromising the seed phrases that unlock the devices and draining well over $100 million in bitcoin. Because bitcoin transactions are irreversible once confirmed, the stolen funds were simply gone. No insurer stepped in. No transaction was reversed. That finality is the whole story, and it points to something deeper than one company's security failure.
What a deposit account actually sells
The mistake in framing banks and crypto as competitors on yield is that it misidentifies the product. What a bank sells is not primarily interest. It is safety, and safety in money turns out to be a specific bundle of two things: reversibility and recourse. If your bank fails on a Friday, deposit insurance guarantees your money and you get it back once the bank is resolved. If your account is compromised, transactions can often be frozen or reversed, and disputed charges can be clawed back. Errors can be corrected. Bad things still happen, but there are mechanisms to undo them, and it is those mechanisms, far more than the interest rate, that people are really buying when they choose where to keep their money.
Yield sits on top of that foundation as a secondary feature. A savings account competes on rate only after it has cleared the bar of being a safe place to hold money at all, a bar so basic that depositors rarely think about it, the way drivers rarely think about whether a car has brakes before comparing top speeds. The Coldcard hack is a reminder that in crypto, the brakes are frequently missing. Security there often reduces to a single product standing between the user and total loss, and when that product fails, there is no insurer, no chargeback, no reversal. It is, as Vigna put it, just gone.
Why crypto cannot easily fix this
The tempting response is that crypto security will mature, that better wallets and custodians will close the gap. But the problem is not a maturity problem; it is structural, rooted in the very thing that makes crypto crypto. Irreversibility is not a bug awaiting a patch. It is the core of the design, because decentralization requires that no central party be able to reverse a transaction. The instant some authority can reach in and undo a payment, that authority is a central point of control, which is precisely what the system was built to eliminate.
This creates an unavoidable symmetry. The property that makes crypto trustless, that no one can freeze or reverse your transactions, is identical to the property that makes it dangerous, that no one can freeze or reverse the thief's transactions either. Reversibility and recourse are not features you can bolt onto a trustless system, because they inherently require a trusted authority empowered to override the ledger: a bank that can reverse a charge, a network that can claw back a payment, a court that can order restitution. Crypto's founding premise is the removal of exactly that authority. So the security deficit is not incidental to crypto; it is the flip side of its central value proposition, which is why, as the column noted, the problem is not going away.
The higher yield is the price of the missing safety
There is a further point that the yield framing obscures. Providing insured, reversible, recourse-backed custody is expensive. It requires capital reserves, insurance premiums, fraud and dispute departments, and heavy compliance, and the cost of all that is a large part of what the spread between a bank's earnings and its depositor payouts funds. When a crypto or DeFi product advertises a yield well above a bank's, part of the reason it can is that it is not paying for that safety apparatus.
Seen that way, the extra yield is not simply a better deal; it is, in part, compensation for bearing a risk the bank would otherwise have absorbed. The depositor is being paid a little more to give up the safety net. A 4% yield on a crypto account and a 4% yield on an insured certificate of deposit are therefore not equivalent, even though the numbers match, because the CD bundles in reversibility, insurance, and recourse that the crypto yield is partly paying you to forgo. The gap between the two rates is, to a meaningful degree, the price of the missing safety, quietly shifted from the institution onto the individual.
The tradeoff is a genuine feature for some
None of this makes crypto's design bad, and it would be a mistake to treat irreversibility as a pure defect, because for some users and purposes it is exactly the point. Censorship resistance, the fact that no authority can freeze or seize your holdings, is a liability for a typical depositor and a lifeline for a dissident under an authoritarian government, a person cut off from the banking system, or someone whose national currency is collapsing. Permissionless access lets the unbanked hold digital dollars without an institution's approval. Self-custody protects against bank failures and government seizure in places where those are real and frequent threats. For millions of people, "no one can reverse or freeze this" is not a bug report; it is the feature they came for.
So the honest way to describe the situation is not that crypto offers a worse deposit account, but that it offers a different product: self-sovereign, unrecourse-able money. That product is genuinely better for those who need to escape a controlling intermediary and genuinely worse for those who rely on one to bail them out, and which group a given person falls into depends entirely on their circumstances. The mainstream depositor, living in a stable system with functioning courts and deposit insurance, is squarely in the group for whom recourse beats sovereignty.
The road to safety runs through re-centralization
The industry knows the safety gap is its obstacle to the mainstream, and it is busily trying to close it, through insured custodial services, regulated stablecoin issuers, and institutional custodians, with firms like Circle even standing up their own trust banks. But there is a deep irony in that effort, because every mechanism that adds real safety re-introduces the trusted intermediary crypto was designed to remove. A custodian that can insure your assets, freeze a fraudulent transfer, or make you whole after a hack is, functionally, a bank-like authority sitting on top of the blockchain. The path to mainstream-grade safety runs directly through re-centralization.
That leaves crypto with a genuine dilemma rather than a solvable engineering task. It can keep pure decentralization, and with it the irreversibility that makes it unsafe for ordinary depositors, or it can add the safeguards mainstream users demand, and in doing so become a slower, less-tested version of the banking system it set out to replace. It cannot easily have both at once, because the two are in fundamental tension. And banks, for their part, are not flawless, deposit insurance has limits, fraud recourse can be slow and incomplete, failures cause disruption, so the contrast is not perfect safety versus none. It is a robust, layered system of recourse that crypto cannot replicate without abandoning what makes it distinct.
Which brings the empty-account riddle back around with sharper meaning. The yield on the account is only worth something once you trust the box enough to fill it, and in money, trust ultimately means recourse: the confidence that if something goes wrong, a mistake, a theft, a failure, someone can and will undo it. Crypto's foundational achievement is the removal of the authority that makes undoing possible, which is a gift to those desperate to escape that authority and a liability for everyone who was counting on it. That is why a higher rate, however eye-catching, is not the lever that will move mainstream deposits. The deposit business was never really a yield business. It was always a safety business, and you cannot win a safety market with a number.
Primary sources
- American Banker, in an opinion column by managing editor Paul Vigna, for the empty-account framing, the argument that crypto competes with banks partly on yield but faces a fundamental asset-protection problem, the account of the Coldcard hardware-wallet breach and its irreversibility, the contrast with FDIC insurance and reversible or freezable bank transactions, the observation that even sophisticated early adopters have lost fortunes to hacks, and the conclusion that crypto firms will need to offer more than a high yield to attract mainstream depositors.
- Fortune for the details of the Coldcard and Coinkite exploit, including losses reported around $116 million, the compromise of seed phrases, and Coinkite's "Swiss bank account in your pocket" marketing.
- American Banker's related reporting on Circle opening a national trust bank as an example of crypto firms building custodial and bank-like safety infrastructure.