When people hold the keys, the product has to explain more

In Bennu the wallet is self-custodial. Privy provides the access and embedded-wallet infrastructure, and Bennu does not receive the private key. Put like that it sounds like a technical decision. For whoever designs the product it is mostly a decision about what has to be explained, and when.

The risk does not disappear: it moves

With third-party custody, the balance you see is the provider’s ledger entry and your right is a claim against it. If it suspends withdrawals or blocks the account, there is nothing you can do on your own. With self-custody that risk goes away and another appears: keeping access is the holder’s responsibility. Neither option removes risk; they relocate it. It is the idea I find least well explained in the industry, and the one that changes most what a screen has to say.

Support can accompany, but cannot sign

In self-custody nobody can move the funds for you, and that is precisely the guarantee. The consequence for the product is uncomfortable: there is no human safety net on the other side to correct a mistake. A transfer on the wrong network can be lost. So the confirmation screen stops being a formality and becomes the only control that exists.

My working rule is that before confirming, the person sees network, asset, amount, destination and costs; and afterwards they see the status that has actually arrived, not the one we hoped for. A quote is not an execution, and “in progress” is more honest than “completed” while checks are still running. I developed this further in One swap button. Two different routes.

Paying the network fee with another token is friction that helps nobody

There is a classic entry barrier in crypto: to move one asset you need to hold another, just to pay the network fee. For the sponsored operations Bennu offers, Alchemy provides the infrastructure that makes that unnecessary. I mention it as an example of judgment: that friction teaches nothing useful about what the person wants to do, and removing it is product work, not user work.

Self-custody in the wallet, not in everything else

This is the point that most easily becomes confusing. The wallet is under the holder’s control, but virtual accounts, buy and sell routes and the card are provided by third parties, each with its own eligibility and terms. A single interface does not mean a single responsible entity. That is why Bennu publishes how it works with three columns for each service: what the person controls, what Bennu provides and what a third party provides. If any of that cannot be written in one line, the product is not clear yet.

Who it is not for

Self-custody does not suit someone who would rather have somebody else answer for access. That is a legitimate preference. An honest product says so before the person finds out, not after. Bennu’s guide on what self-custody is (in Spanish) says it without ornament, and the comparison with a deposit in stablecoin or dollar account (in Spanish) explains why they are not the same.

Three questions for any self-custody product

Who can move the funds. What happens if the provider fails. What happens if I lose access. And a fourth that sums them up: what does the screen show me before I confirm. If you cannot answer them calmly, the problem is not the technology.

Bennu is not a bank or an exchange, and investments and digital assets carry a risk of loss. Availability of each service depends on eligibility, the provider and the jurisdiction. If you want to see it for yourself, you can request access; requesting it does not imply approval.

I write as a co-founder of Bennu. Privy and Alchemy appear as providers described on Bennu’s public pages; they do not sponsor or endorse this article. This text is informational and is not legal, regulatory or financial advice.

Sources

• Bennu: what self-custody is and what it implies (in Spanish).
• Bennu: how it works.
• Bennu: who is behind Bennu.
• Bennu: stablecoin or dollar account (in Spanish).