Commentary · Bitcoin custody & corporate governance
In Bitcoin We Trust. In Treasury, We Verify.
GoldfinchClaims Editorial Desk
Corporate crypto needs fewer leaps of faith—and a better chain of command.
Published October 21, 2026 · 4 min read
Key findings
Summary of this article’s analysis and cited records, not a legal finding or investment advice. Historical details reflect the sources reviewed below.
- The CoinDesk column describes disputed allegations that Coinbase denies; this commentary does not independently establish them.
- Evidence of holdings and authority to move assets are different questions: proof-of-reserves snapshots do not establish future withdrawal controls.
- Tanguma advocates independent multisignature custody alongside defined roles, approval rules and audit trails, while acknowledging added operational complexity.
Reader-supplied commentary on Michael Tanguma’s October 20, 2026 CoinDesk opinion column. Allegations described in that column remain disputed; Coinbase denies them. This article is not an independent audit, a finding of wrongdoing, or a custody-provider endorsement. Tanguma’s proposed governance model and adoption forecast are opinions, not established outcomes.
Bitcoin may be decentralized, but responsibility for a company’s bitcoin should never be.
That is the governance question at the heart of Michael Tanguma’s October 20 CoinDesk opinion column: when a business holds bitcoin, can it establish who controls the assets, who authorizes transfers, and how its holdings can be verified? A rising balance is welcome. A disappearing line of accountability is not. coindesk
The allegations: a dispute, not a verdict
Tanguma’s column describes allegations by BlockTower Capital founder Ari Paul that Coinbase lost roughly $25 million of his firm’s assets and concealed hacks totaling more than $1 billion across multiple institutions. Coinbase denies the allegations. According to the column, Paul says litigation prevents him from publishing his evidence. These remain disputed claims—not established findings. coindesk
That distinction matters. An accusation is not an audit, and a denial is not an independent reconciliation.
Tanguma’s broader argument is that outsiders lack the information needed to resolve the dispute independently. His column shifts the discussion from which party deserves belief to what a corporate custody arrangement should make verifiable. coindesk
In other words: less “trust me, bro,” more “show the controls.”
A balance sheet needs a chain of command
The column identifies questions that belong in the boardroom, not just the wallet setup guide:
- Who can initiate a transfer?
- Who must approve it?
- What happens when a credential holder leaves, becomes unavailable, or is compromised?
- Can the company verify its holdings without relying solely on its custodian’s representations? coindesk
Together, these questions describe governance: authority, accountability, verification, and continuity.
Tanguma argues that corporate bitcoin custody should provide defined roles, withdrawal approval policies, and an audit trail that directors and financial controllers can understand. His point is not simply that assets need protection; the people responsible for those assets need a defensible account of how that protection works. coindesk
“Who has the keys?” is a start. “Who authorized the journey?” deserves a place beside it.
Proof of reserves is not proof of everything
Tanguma also distinguishes evidence of holdings from control over their movement. He argues that proof-of-reserves attestations provide a snapshot of assets, but do not, by themselves, establish who can authorize a future withdrawal or how those decisions are governed. coindesk
The distinction is straightforward: demonstrating that assets are present answers a different question from demonstrating that they cannot be moved improperly.
A snapshot is useful. It is not the whole security camera.
More signatures, less single-point dependence
The column advocates custody arrangements using Bitcoin’s multisignature capabilities, with keys distributed among independent institutions rather than concentrated in one party. Tanguma pairs that technical design with organizational requirements: named users, defined permissions, withdrawal policies, and readable audit trails. coindesk
Importantly, he acknowledges the trade-off. A single custodian offers one relationship, one contract, and one integration. Coordinating multiple institutions introduces operational complexity and requires shared standards and discipline. coindesk
His proposed direction is therefore not “add more keys and declare victory.” It is to connect the signing arrangement to a clear system of corporate responsibility.
More signatures should mean fewer unanswered questions—not more people pointing at one another.
Don’t let “HODL” become “hope”
Tanguma’s column is an opinion piece, and its prediction that weak custody governance will impede corporate adoption should be read as his argument, not a settled outcome. Its most useful contribution is the test it proposes: can the custody arrangement explain control, approval, verification, and continuity when a person or institution is no longer available? coindesk
That is a sharper boardroom conversation than whether bitcoin belongs on a balance sheet in the abstract.
Before celebrating the asset, examine the arrangement.
Because “we hold bitcoin” should never require a follow-up of “we think.”