Wrapped Bitcoin (WBTC)

Rejected venues wait the longest for re-review; a rejection has to earn another look before the scheduled date.

REJECTED ON A COMPLETED CUSTODY-CONCENTRATION EVENT, not a pending risk. WBTC is an ERC-20 minted 1:1 against BTC held by authorized custodians under a multisig; only KYC’d Merchants mint or redeem at par, so a retail or advisor position exits through secondary-market liquidity, not the custody channel. The August 2024 controversy — BitGo proposing to hand a BiT Global joint venture, linked to TRON founder Justin Sun, two of three custody keys — was already enough for MakerDAO/Sky to vote 88% to offboard WBTC collateral and for Aave’s risk providers to call the concentration ”an unacceptable level of risk.” Reporting through 2026 confirms that transition completed: BiT Global now holds the user key and backup key, BitGo Inc. holds only the remaining US-based key. The scenario every major DeFi risk desk flagged as disqualifying in 2024 is now the live custody structure, not a proposal. That converts a risk into a standing fact.

Kill criteria: the events that revoke this verdict
• BitGo Inc. or another US/EU-regulated custodian independent of BiT Global regains at least 2 of 3 custody keys
• An independent, named proof-of-reserves attestation, not self-reported by BiT Global, confirms 1:1 BTC backing on a recurring monthly basis
• No confirmed instance of BiT Global or an affiliate restricting or delaying redemption for 12 consecutive months after the transition completed
• A major DeFi risk provider that downgraded WBTC in 2024-2026 formally reverses that assessment with published reasoning

The research file

Mechanism and mint/redeem path

A WBTC Merchant sends BTC to the custodian’s deposit address and submits a mint request; the custodian approves on-chain and WBTC is issued to the Merchant, who distributes it onward. Redemption reverses this: a Merchant burns WBTC via the factory contract and the custodian releases BTC, typically within 48 hours. Retail and advisor holders never touch this channel directly — they buy and sell WBTC on DEXs and CEXs, so their actual exit is secondary-market depth and price, not a guaranteed par redemption. A large or stressed exit is therefore a market-liquidity question, not a custody-channel guarantee.

Control: the custody transition that decides this

WBTC custody runs on a 2-of-3 multisig across US, Hong Kong, and Singapore-based keys. BitGo announced in 2024 that it would move custody to a multi-jurisdictional model involving BiT Global, an entity multiple outlets tie to Justin Sun; the transition BitGo itself announced would complete by 2026-05-01 is reported complete as of this review: BiT Global holds two of three keys, BitGo Inc. holds one. The DAO (itself multisig-governed) can add or remove Merchants and Custodians. Reporting found no direct on-chain blacklist function comparable to Coinbase’s cbBTC contract, but BitGo remains a regulated US entity independently subject to asset-freeze law, and jurisdictional pressure in any of the three custody locations could restrict operations regardless of contract-level blacklist capability.

Incident record

No direct WBTC smart-contract exploit or hack-driven depeg was identified. The material incident is governance and counterparty concentration, not a technical failure: BitGo’s 2024 custody-transfer announcement, Aave risk provider Chaos Labs’ formal ”unacceptable level of risk” assessment, and MakerDAO/Sky’s near-unanimous vote to offboard WBTC as collateral (later paused pending further BitGo engagement, not reversed on the merits). That a major protocol’s own risk desk reached this conclusion before the transition even completed is itself evidence the concern was not speculative. Search cutoff for this pass: 2026-08-17.

Exit under stress

Par redemption exists only through the Merchant/custodian channel, which is KYC-gated and institutional; an advisor client cannot use it directly. Secondary-market exit is subject to ordinary DEX/CEX depth in calm conditions, but the 2024 MakerDAO vote demonstrates the realistic stress scenario: a custody-confidence event causes large protocol holders to move to reduce exposure simultaneously, which is exactly the kind of correlated, non-price-driven selling pressure a wrapped-asset holder cannot exit ahead of without early information.

Comparison

Native BTC held directly has no custodian, no multisig, and no counterparty — the sovereignty WBTC trades away for EVM composability. cbBTC (Coinbase) is fully centralized on one custodian, but that custodian is a US-listed public company rather than a foreign entity tied to a controversial founder, and its contract is reported to carry blacklist capability the operator can be held accountable for using. tBTC (Threshold Network) is non-custodial and threshold-ECDSA secured — the most sovereign design among the alternatives — but carries a fraction of WBTC’s liquidity, meaning worse slippage on a large trade. None of these alternatives are approved by this review; each would need its own memo.

Sources

The claims above trace to these. Where a number could not be independently verified, the thesis says so.

• WBTC Merchant Guide · primary · accessed 2026-08-17
  Supports: mint and redeem mechanics, Merchant model
• WBTC wrapped-tokens whitepaper · primary · accessed 2026-08-17
  Supports: custody structure, multisig design
• BitGo — move to multi-jurisdictional custody · primary · accessed 2026-08-17
  Supports: custody transition announcement, key distribution
• Aave governance — Chaos Labs WBTC BitGo custody update · primary · accessed 2026-08-17
  Supports: risk-provider assessment, unacceptable risk finding
• CoinDesk — BitGo reiterates autonomy from Justin Sun as MakerDAO decides to dump WBTC · secondary · accessed 2026-08-17
  Supports: 2024 incident record, MakerDAO vote
• Unchained — WBTC completes shift to multi-jurisdiction custody model · secondary · accessed 2026-08-17
  Supports: transition completion confirmed
• Protos — how involved is Justin Sun with BiT Global · secondary · accessed 2026-08-17
  Supports: ownership ties
• OAK Research — Wrapped Bitcoin overview of alternatives · secondary · accessed 2026-08-17
  Supports: cbBTC and tBTC comparison

Inherited controls

The verdict above grades the protocol layer. Every position also inherits the asset it holds and the chain it settles on. The least safe layer sets the position’s grade, and the position table names which one that is.