What Is Rehypothecation and Why Should Bitcoin Holders Care?

You deposited Bitcoin as collateral for a loan. The lender took that Bitcoin and lent it to a hedge fund. The hedge fund used it as margin on a leveraged trade. When the trade collapsed, the hedge fund could not return the Bitcoin. The lender went bankrupt. Your collateral vanished.

That is rehypothecation. It is the single largest structural risk in crypto lending, and most borrowers have no idea it is happening to their coins.

Rehypothecation in Plain English

Rehypothecation is when a financial institution takes assets you pledged as collateral and reuses them for its own purposes. The word comes from "hypothecation," which simply means pledging an asset to secure a loan. The "re" prefix means your collateral gets pledged again, by someone else, without your direct involvement.

A worked example. You deposit 1 BTC (worth $80,000) to borrow $50,000 in stablecoins from a CeFi lender. The lender takes your 1 BTC and lends it to a trading firm at 15% interest. That trading firm then posts the same BTC as margin on a derivatives exchange. Your single Bitcoin is now backing three separate obligations: your loan, the trading firm's borrowing, and a leveraged position. If any link in that chain breaks, the collateral supporting all three disappears.

In traditional finance, this kind of reuse is normal. Prime brokers do it with equities and bonds every day. But it is regulated.

The Regulatory Gap: SEC Rule 15c3-3 vs Crypto

In the United States, (the Customer Protection Rule) limits how much client collateral a broker-dealer can rehypothecate. The cap is 140% of a client's debit balance. If you borrow $100,000 on margin, the broker can reuse up to $140,000 of your securities. Anything beyond that must be segregated in a protected account.

In crypto, no equivalent rule exists. None. When you deposit BTC with a centralised lender, you typically agree to terms of service that give the platform full discretion over your assets. They can lend them, trade them, stake them, or post them as collateral with a counterparty. There is no cap, no segregation requirement, and in most cases, no disclosure about what they are actually doing with your coins.

The result is a system where customer collateral gets recycled through multiple layers of risk, invisible to the depositor. When conditions are good, everyone earns yield. When conditions turn, the whole structure collapses at once.

Which is exactly what happened in 2022.

Three Collapses That Proved the Point

Celsius: $5.5 Billion in Liabilities, $4.7 Billion Frozen

Celsius Network offered depositors yields up to 18% on their crypto. The mechanism behind those yields was aggressive rehypothecation. Celsius took customer deposits and deployed them across DeFi protocols, institutional loans, and its own trading operations.

When the Terra/Luna collapse triggered a market-wide selloff in May 2022, Celsius could not meet withdrawal requests. The company on 12 June 2022 and filed for Chapter 11 bankruptcy the following month with $5.5 billion in liabilities. Court filings revealed that Celsius had been using new deposits to pay yields to existing customers, a structure uncomfortably close to a Ponzi scheme.

The core problem was not market volatility. It was that customer BTC and ETH had been rehypothecated so many times that when Celsius needed to return collateral, the collateral was gone.

Voyager Digital: $650 Million Lent to Three Arrows Capital

Voyager Digital marketed itself as a safe, regulated crypto brokerage. Behind the scenes, it had lent approximately $650 million in customer assets to Three Arrows Capital (3AC), a Singapore-based hedge fund that was making enormous leveraged bets on crypto markets.

When 3AC defaulted in June 2022, Voyager lost access to those funds. The platform suspended withdrawals on 1 July 2022 and filed for bankruptcy four days later. More than 3.5 million customers discovered that the Bitcoin and other crypto they thought was safely held had actually been forwarded to a single, highly leveraged counterparty.

Voyager's terms of service explicitly stated that customer crypto could be lent to third parties. But buried in legal text, this disclosure did not register with most users who assumed "your crypto" meant their crypto was actually being held for them.

BlockFi: $680 Million Exposure to Alameda Research

BlockFi followed a similar playbook. The company offered interest-bearing accounts funded by lending customer assets to institutional borrowers. Its largest borrower was Alameda Research, the trading arm of FTX.

When FTX collapsed in November 2022, Alameda's debts became worthless. BlockFi had approximately , including both direct loans and assets held on the FTX exchange. BlockFi filed for bankruptcy on 28 November 2022.

In each case, the pattern was identical: a centralised lender rehypothecated customer collateral to a counterparty that failed. The borrowers discovered too late that "your Bitcoin" was actually "our Bitcoin to do with as we please."

Which Platforms Still Rehypothecate Your BTC?

Not all handle collateral the same way. Some hold it in segregated custody. Some disclose limited reuse. Others give themselves broad permission in their terms of service.

The table below uses data from (April 2026) alongside public disclosures from each platform.

Platform	APR	Custody Model	Rehypothecation	Risk Score
Unchained	14.18% fixed	DeFi, 2-of-3 multisig	No	29 (Low)
DeBiFi	9.5-21.5% fixed	DeFi, 5-of-4 multisig	No	36 (Med)
Arch	8.49-11.84% fixed	CeFi, Anchorage	No	38 (Med)
Ledn	11.9% fixed	CeFi, BitGo	Limited	49 (Med)
Strike	10.5-14% fixed	CeFi, in-house	Limited	66 (High)
Nexo	17.9% variable	CeFi, Ledger Vault	Yes	70 (High)
SALT	9.95-14.45% fixed	CeFi, BitGo/Fireblocks	Yes	71 (High)
Binance	2.9% variable	CeFi, in-house	Yes	90 (Critical)
Ducat	0% (origination fee only)	DeFi, Bitcoin L1 FROST	No	N/A

A few things stand out. Platforms with the highest risk scores (Nexo, SALT, Binance) are the ones that openly rehypothecate or reserve the right to do so. The lowest-risk platforms use multisig custody where the borrower retains a key. And Ducat sits in a different category entirely: zero interest, non-custodial, with collateral locked on Bitcoin L1 in a structure that makes rehypothecation physically impossible.

More on that in a moment. First, how do you actually spot rehypothecation before it burns you?

Five Steps to Spot Rehypothecation

Before depositing BTC with any platform, run through this checklist.

1. Read the terms of service, specifically the custody section. Look for phrases like "the right to use, lend, pledge, or repledge your digital assets." If the platform reserves this right, your collateral is not segregated. Celsius, Voyager, and BlockFi all had these clauses.

2. Ask where your collateral is held. Is it in a segregated wallet you can verify on-chain? Is it pooled with other customer funds? Is it held by a third-party custodian with a named insurance policy? Vague answers like "institutional-grade custody" without a named custodian are a red flag.

3. Check whether you hold a key. Platforms using 2-of-3 or 2-of-2 multisig where the borrower holds one key cannot rehypothecate without your signature. If the platform controls all keys, they can do whatever they want with the underlying assets. This is the single most reliable indicator.

4. Look at where the yield comes from. If a platform offers 10-18% APY on Bitcoin deposits with no clear explanation of the revenue source, that yield is almost certainly generated by lending your coins to leveraged counterparties. Sustainable lending revenue comes from origination fees, liquidation penalties, and spread, not from double-digit yield on idle deposits.

5. Verify proof of reserves. Some platforms publish on-chain proof of reserves or third-party attestations. These are imperfect (Binance's early proof-of-reserves audits were ), but their existence at least shows the platform is trying. No proof of reserves at all? That tells you something.

How Non-Custodial Lending Eliminates the Risk

The rehypothecation problem only exists when someone else controls your keys. If the lender never has unilateral access to your Bitcoin, they cannot lend it, trade it, or post it as collateral somewhere else.

solves this at the architecture level. Instead of trusting a company to hold your BTC responsibly, the protocol enforces custody rules through cryptographic spending conditions.

Ducat's approach is a good example of how this works in practice. When you through Ducat, your BTC goes into a 2-of-2 FROST vault on Bitcoin L1. One key belongs to you. The other belongs to a Guardian group (an 11-of-15 threshold signing network using FROST, Flexible Round-Optimised Schnorr Threshold signatures).

Neither side can move the BTC alone. You cannot withdraw without the Guardians co-signing. The Guardians cannot move funds without your signature. And the vault script enforces exactly two valid outcomes: redemption (you repay the loan and get your BTC back) or liquidation (triggered only when the price crosses the committed threshold, verified by Chainlink's oracle and independently confirmed by the Guardians).

There is no third option. No "lend to a hedge fund" path. No "use as margin" path. No discretionary reuse of any kind. The spending conditions are defined in Bitcoin Script and enforced by the Bitcoin network itself.

The you borrow is minted against this locked collateral. If you need dollar liquidity, you can swap UNIT 1:1 for USDC through Ducat's integrated Circle exchange. The entire flow, from BTC collateral to spendable dollars, never requires surrendering custody of your Bitcoin to a centralised intermediary.

This is not a theoretical improvement. After the , the distinction between custodial and non-custodial lending became the single most important factor in evaluating any Bitcoin borrowing platform.

The Regulatory Picture: MiCA, SEC, and FCA

Regulators noticed the 2022 collapses. The response has been uneven.

European Union (MiCA). The Markets in Crypto-Assets Regulation, fully effective from December 2024, requires crypto asset service providers to segregate customer funds and disclose their custody practices. MiCA does not explicitly ban rehypothecation, but its segregation requirements make unlimited reuse of client assets much harder. Stablecoin issuers face additional reserve and redemption rules. It is the most complete regulatory framework for crypto lending currently in force.

United States (SEC). The SEC has taken enforcement action against specific platforms (Celsius, BlockFi, Genesis) but has not established clear, forward-looking rules for crypto lending collateral. The agency's approach remains case-by-case enforcement rather than a codified framework like Rule 15c3-3 for traditional brokers. The result: legal uncertainty for platforms operating in the US, and no guaranteed protection for depositors beyond general anti-fraud provisions.

United Kingdom (FCA). The Financial Conduct Authority regulates crypto firms for anti-money laundering purposes but does not yet have a specific framework for crypto lending or collateral management. The FCA's 2024 consultation on a broader crypto regulatory regime is ongoing. Until new rules are finalised, UK-based Bitcoin lenders operate under general financial promotion rules and AML requirements, with no specific restrictions on what they can do with customer collateral.

The gap is narrowing, especially in Europe. But if you are borrowing today, in April 2026, regulatory protection alone is not enough to keep your BTC safe. The architecture of the platform matters more than the jurisdiction.

What This Means for Bitcoin Holders

Rehypothecation is not inherently evil. In regulated markets with proper disclosure, it increases capital efficiency and can reduce borrowing costs. The problem is when it happens without your knowledge, without caps, and without segregation, in a market where the counterparties taking leveraged positions with your collateral can blow up overnight.

The 2022 collapses were not freak accidents. They were the predictable result of a system where customer collateral was treated as the platform's balance sheet asset, recycled through chains of risk that no depositor could see or control.

If you hold Bitcoin and want to borrow against it, the question is simple. Does the lender control your keys, or do you? If they control the keys, your BTC can be rehypothecated regardless of what their marketing says. If you hold a key and the spending conditions are enforced by Bitcoin itself, rehypothecation is not a risk you manage. It is a risk that does not exist.

Frequently Asked Questions

Is rehypothecation the same as fractional reserve banking?

Not exactly, though they share a family resemblance. Fractional reserve banking means a bank lends out most of its deposits and keeps only a fraction in reserve. Rehypothecation is narrower: it specifically refers to reusing collateral that was pledged to secure a loan. A bank can do both simultaneously. In crypto lending, the distinction blurs because platforms were both rehypothecating collateral and operating without meaningful reserves.

Can a platform rehypothecate my Bitcoin without telling me?

Legally, they need your consent, which is typically buried in the terms of service you accepted when creating your account. In practice, the disclosures are often vague enough that most users do not realise what they have agreed to. Celsius's terms of service, for example, gave the company "all right and title" to deposited crypto assets, meaning users were technically unsecured creditors rather than depositors.

Does rehypothecation affect me if I am only borrowing, not earning yield?

Yes. If you deposit BTC as collateral for a loan and the lender rehypothecates that collateral, you are exposed to the same counterparty risk as yield depositors. The difference is cosmetic. Whether you are earning 8% APY or borrowing at 12% APR, if the lender loses your collateral in a failed trade or a counterparty default, you lose your Bitcoin either way. The only protection is ensuring the platform cannot move your collateral without your cryptographic approval.