Before looking for income from BTC or ETH, protect your ability to access it and decide how much loss your household could absorb. Then assess each additional activity—trading, borrowing or using a DeFi protocol—on its own terms. A secure wallet does not make a loan safe, and a modest loan does not make a liquidity pool safe.
Match the risk to the activity
- Holding crypto: Price declines can reduce the value of your holdings. Self-custody adds the risk of lost or stolen keys; using an exchange or custodian adds dependence on that provider.
- Trading: Thin markets, slippage and order failures can make an intended exit more costly than expected. Borrowed funds or margin can magnify losses.
- Borrowing against crypto: Interest and fees add cost. A fall in collateral value, a rise in debt or a change in relevant protocol parameters can bring a loan to its liquidation threshold.
- Using DeFi: Smart-contract faults, manipulated price feeds, bridge failures, governance decisions and compromised admin keys can affect funds even when the underlying asset’s price is steady.
- Holding stablecoins: Their backing, redemption arrangements and issuer or protocol risks differ. A stablecoin can lose its peg.
The mix of threats changes over time. Chainalysis reports on 2025 theft describes more incidents affecting personal wallets, while a large centralized-service breach substantially influenced the value stolen that year. That is a reason to examine both personal security and provider risk—not to assume either has replaced the other. The report’s broader account of stolen funds is available as Crypto hacking & stolen funds — Chainalysis blog.
Build a risk worksheet you will actually revisit
- Identify: List each asset, wallet, exchange, loan and protocol position. Record who controls access and what could cause a loss.
- Assess: Estimate the impact of a failure and how plausible you think it is. An impact × likelihood score can help rank questions, but its numbers are judgments, not measured probabilities. For example, hypothetical scores of 3 × 1 = 3 and 5 × 4 = 20 tell you which position you chose to examine first; they do not establish either position’s safety.
- Treat: Reduce or avoid an exposure, improve access controls, choose a different provider, or accept a loss that fits your circumstances. Check what a proposed safeguard actually covers.
- Monitor: Set a review schedule and decide which events demand an earlier review, such as paused withdrawals, a protocol upgrade, a material price move or an unexpected change in a loan’s health.
For key-loss planning, research on emergency evacuation of assets after a key is lost provides one narrow example of a recovery problem: 3%. Your own plan should be based on the wallets and recovery methods you use, not an assumed price or stablecoin threshold.
Size positions around your obligations, not a universal percentage
There is no single suitable crypto allocation for every household. Start with essential spending, near-term commitments, other savings and the consequences of a substantial or total crypto loss. Decide separately how much you can expose to one custodian, one protocol and one borrowing arrangement. Discussions that use a figure such as 5% illustrate an allocation choice; they do not make that figure a rule for you.
Owning several tokens is not necessarily meaningful diversification: prices can fall together. Spreading assets across chains, stablecoins or custodians may reduce dependence on one point of failure, but it also creates more accounts, keys, contracts and operational tasks to manage. Review the combined exposure rather than counting positions.
If you earn fees or other income on a position, compare them with changes in the position’s value, transaction costs, financing costs and the chance of loss. Retaining BTC or ETH exposure while borrowing to deploy capital introduces an additional set of risks; borrowing does not remove the inherent impermanent-loss mechanics of a liquidity pool.
Keep trading exits separate from loan liquidation
An exchange stop order is an instruction to trade if its conditions are met. It may execute at an unfavorable price in a fast market, or fail to execute as expected. Splitting an intended exit across prices changes execution risk; it does not prevent losses.
A crypto-backed loan works differently. Its collateral and debt are assessed against the lender’s or protocol’s rules. For example, Aave explains that a position becomes eligible for liquidation when its health factor falls below 1. Check the rules for the loan you actually use rather than applying that threshold to every provider.
Before borrowing, test adverse scenarios. As a purely hypothetical exercise, ask what happens if collateral worth $10,000 falls 40% to $6,000 while a $3,000 debt remains outstanding: the debt would then equal 50% of the collateral’s value, before interest, fees or changes in the debt asset’s value. That arithmetic is not a liquidation forecast; the applicable threshold and timing depend on the arrangement. Repayment or added collateral may improve a position’s health, but spare funds held elsewhere, monitoring and alerts cannot guarantee action before liquidation.
For a fuller explanation of the mechanics, see how crypto loan liquidation works.
Protect keys and examine custodians
Self-custody gives you control over keys and responsibility for securing and recovering them. Lost credentials can mean permanent, unrecoverable loss if no valid backup or other recovery path remains. A hardware wallet can reduce exposure of signing keys to an internet-connected device, but it cannot protect you from every malicious approval, mistaken transfer or failed backup.
- Keep recovery information offline and restrict who can access it. Test that your recovery plan is understandable without exposing the secret.
- Consider whether separate backups, durable storage or multisignature arrangements suit your situation. Each can add complexity and new ways to make a mistake.
- Verify addresses and transaction details on a trusted device. Treat unexpected support messages and requests to reveal a recovery phrase as suspicious.
- Plan for incapacity or loss of a device without placing all access information in one easily compromised location.
A custodian takes on some operational responsibilities while adding counterparty risk. Ask how assets are held, who controls keys, what happens during outages or insolvency, and what withdrawal and recovery processes exist. Commissioner Hester Peirce described crypto custody rules as genuinely uncertain in remarks concerning SEC-regulated intermediaries; those remarks do not settle the legal position of every custodian. The institutional scope of those concerns matters. A joint banking-agency statement, OCC’s guidance for institutions, discusses matters such as key management, contingency planning and third-party oversight for banking organizations. It is useful background for questions to ask, not a universal retail-custodian standard.
Neither a proof-of-reserves snapshot nor an audit alone establishes ongoing solvency or covers every liability. For the underlying institutional document, see OCC guidance on crypto-asset safekeeping; Commissioner Peirce’s remarks are also available as Lava and lamps: opening remarks for crypto custody roundtable — SEC (Peirce).
Check DeFi controls without treating them as guarantees
Before committing funds to a protocol, identify the contracts and chain involved, the source of any advertised earnings, and who can change the system. Look for recent audits and what they covered, disclosed incidents, bug-bounty terms, admin-key controls and any delay before upgrades take effect. An audit examines a defined scope at a point in time; it cannot rule out every bug or future change.
Also ask how the protocol gets prices, whether it relies on a bridge, how easily you can exit during stress and what happens if a stablecoin or collateral asset loses value. Income from fees must be weighed against changes in position value and the possibility of contract failure. Monitoring may help you notice trouble, but an exploit can occur before a warning reaches you.
Understand protection, insurance and tax limits
Do not assume a crypto balance has the protections of a bank deposit or a qualifying brokerage holding. The FDIC distinguishes crypto assets from insured deposits; SIPC protection depends on the asset and the qualifying brokerage arrangement. Check the specific provider and account rather than relying on its regulated status alone.
Some providers or users may have insurance, but coverage depends on the actual policy: who is insured, which events qualify, exclusions, limits and the claims process. Do not assume it covers a lost key, phishing, a mistaken transfer or a platform failure.
Tax treatment depends on jurisdiction and transaction details. For U.S. federal tax purposes, selling or exchanging a digital asset held as an investment may produce a reportable gain or loss; proceeds of a bona fide loan are generally not income merely because they must be repaid. Neither point determines the outcome of every crypto-backed arrangement, liquidation, reward or liquidity-pool transaction. The IRS digital-assets guidance is a starting point for U.S. readers. Keep dated records of acquisitions, transfers, trades, fees, rewards, loans and repayments, and seek advice for your jurisdiction before assuming borrowing is preferable to selling. Compare the mechanics in borrowing against crypto versus selling and the possible tax issues in crypto loans and capital gains tax.
If holdings and obligations span countries, international asset protection is a broader cross-border planning topic; it does not determine the protection or tax treatment of a crypto position.
A short recurring review
- Access: Can you locate and use your recovery plan? Have wallet permissions or account access changed?
- Concentration: How much depends on one asset, custodian, stablecoin, chain or protocol?
- Borrowing: What are the current debt, interest cost, collateral value and applicable health measure? What happens under an adverse-price scenario?
- DeFi: Have contracts, administrators, price feeds, withdrawal conditions or the source of earnings changed?
- Records and decisions: Are transactions documented? Which positions need a smaller size, a deeper review or an exit plan?
Write decisions down before a sharp market move makes them harder to follow. Portfolio tools can help you see holdings and debt together; a portfolio-aware AI coach can help frame questions and examine stress scenarios. OverseasDeFi’s Hold → Borrow → Deploy → Earn sequence is an educational framework, not a requirement to borrow. Its tools and guidance support understanding, but they cannot make decisions for you, ensure complete data or prevent liquidation.
FAQ
What is crypto risk management?
It is a repeatable way to identify potential losses, decide which you can bear, take proportionate precautions and revisit those decisions as your positions and circumstances change.
How much of my portfolio should be in crypto?
There is no universal percentage. Consider your household obligations, other assets, time horizon and the effect of a major or total crypto loss before setting a limit. Then check concentrations within that limit.
Is self-custody safer than using an exchange?
They expose you to different failures. Self-custody reduces dependence on an exchange but makes key security and recovery your responsibility. A custodian handles some of that work while adding provider and withdrawal risk.
Can a collateral buffer prevent liquidation?
No. A buffer can give a loan more room to absorb adverse changes, but prices, debt and protocol conditions can move faster than you can respond. Understand your provider’s threshold and test scenarios before borrowing.
Does earning DeFi income reduce portfolio risk?
Not necessarily. Fees or rewards may be outweighed by changes in asset value, borrowing costs, liquidity-pool losses or a protocol failure. Assess the whole position, not its advertised rate.