The answer is straightforward: Simply disclosing custody addresses cannot prove that assets have not been lent out.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
A public address only shows how many coins a wallet holds at a given moment. It tells you nothing about the "ownership" status—whether the assets have been pledged as collateral or re-pledged (rehypothecated). That critical information is invisible on-chain.
A treasury company's assets exist not only on the blockchain but also in the custodian's internal ledger. Think of the public on-chain address as the "front end" and the custodian's records as the "back end." The balance displayed on the front end can remain unchanged even if the assets have already been lent out behind the scenes.
Step 1: Separate "Address Visibility" from "Clear Ownership"
A public address proves only one thing: how many coins that address controlled at a specific point in time. It does not prove:
- Whether the company alone controls the private key for that address;
- Whether the same coins have been double-counted across multiple customer accounts inside the custodian;
- Whether those assets have been used as collateral or borrowed against.
Anyone claiming "public address equals safety" is using incomplete evidence to answer a question that demands a complete answer.
Step 2: Three Things to Check to See Whether a Treasury Company Has Lent Out Its Assets
1. Has the company publicly committed to no rehypothecation?
Strategy founder Michael Saylor stated clearly in a January 2026 public response: "We buy genuine bitcoin. We do not rehypothecate. We audit our custodians."
That statement is a corporate position, not an on-chain proof. But it sets a legal red line—if violated, it would be serious fraud. For a publicly traded company, that carries more weight than a cryptographic signature.
2. Who is the custodian, and is the custody structure segregated?
Strategy's primary custodians are Coinbase Prime and Fidelity Digital Assets. These institutions offer segregated custody, not omnibus accounts. Segregated custody means each client's holdings are recorded separately on the custodian's books and are not mixed with other clients' assets.
Arkham Intelligence once publicly identified 70,816 bitcoin addresses linked to Strategy, covering roughly 87.5% of its holdings. However, Saylor himself opposes address disclosure, arguing it expands the attack surface.
3. Does the custodian audit cover "not lent out"?
Saylor claims the company audits its custodians, but no detailed public explanation exists of what the audit actually involves—specifically, whether it verifies that assets have not been re-pledged.
Crypto security expert Jameson Lopp raised this exact concern: outside observers cannot know whether auditors actually spun up a node, verified address balances, and confirmed that no other client claims ownership of the same BTC.
Risk note: Proof of reserves is also a limited tool. It shows that, at a single point in time, the custodian controls enough on-chain assets to cover customer liabilities. But it cannot solve two problems: first, it's a snapshot that represents only that moment; second, it cannot rule out the possibility that the custodian temporarily borrowed coins just to "pass the audit." So proof of reserves is a better signal than marketing promises, but it's not a 100% guarantee.
Step 3: Look at a Real-World Example with Public Addresses
In November 2025, Strategy moved 43,415 BTC (worth about $4.26 billion). The market initially feared a sell-off. Later, it was confirmed to be a custody migration—assets moved from Coinbase Custody to a new custodian.
This case highlights two things:
- On-chain address movement does not equal selling. A public address lets you see that coins moved, but not why they moved.
- Custodian changes affect address structure. If you only stare at addresses, you might mistake a routine migration for a dump.
In July 2026, Strategy again drew attention when it transferred 411 BTC to Coinbase Prime. Analysts noted this may be tied to a previously established "bitcoin monetization program"—which authorizes, under appropriate conditions, the sale of bitcoin to support preferred stock dividend payments.
A leading global cryptocurrency platform,suitable for both beginners and experienced traders.
New user benefit: 20% off trading fees upon registration!！
How to Verify: A Checklist
If you want to know whether a treasury company's assets have been lent out, don't just look at public addresses. Follow this process:
- Check the company's financial statements or SEC filings for clear statements on whether assets are pledged or lent out.
- Review audit reports to see if the audit scope covers rehypothecation risk at the custodian.
- Examine the custodian's segregated account mechanism to confirm assets are held in separate addresses, not in omnibus accounts.
If any of these three items is unclear, no amount of public addresses will answer the question, "Have the assets been lent out?"
Next Step: If you hold stock in a treasury company, after the next earnings report, turn first to the "Subsequent Events" section to see if there's any new description of custody arrangements. A change of custodian or an adjustment to the audit scope is an earlier signal than any price chart.
