A wrapped token stands in for another asset on a blockchain where that asset does not exist natively. The original asset is locked up, and an equal amount of the wrapped token is issued. The wrapped token can be redeemed for the original at 1:1. Locking and releasing are done by a custodian, a smart contract or a group of signers. That operator is what you trust when you hold a wrapped token. The best-known example, Wrapped Bitcoin (WBTC), is an Ethereum token backed by bitcoin held in custody. On 7 October 2026 its operators said they are looking at splitting those reserves across several custodians.
The latest development: WBTC looks at multiple custodians
On 7 October 2026, WBTC published "WBTC Announces Exploration of Multi-Custodian Bitcoin Reserves". It says WBTC is considering a move from a single custodian to reserves held across several institutional custodians. It is evaluating a shortlist and will publish the selected custodians and transition details on its website once they are final.
The reasoning given: a single custodian is one shared point of failure, with one security stack, one key-management system, one operations team and one upgrade path. An outage, a security incident or a slow move to new cryptographic standards would affect the whole reserve. Separate custodians could each adopt new standards, including post-quantum signatures, on their own timelines. The page also says plainly that "multi-custodian custody isn't a standalone answer to quantum risk". It adds that no quantum computer able to break Bitcoin's signatures exists today. Holders do not need to do anything, and minting and redemption are unchanged.
A GlobeNewswire press release dated 19 October 2026 (Hong Kong) repeats that WBTC is exploring a multi-custodian model. No custodian has been named and no timeline has been given.
Why custody is a live issue for WBTC
- 9 August 2024: BitGo announced it would move its WBTC business into a joint venture with BiT Global, a custody platform registered in Hong Kong as a Trust and Company Service Provider. BitGo described it as a strategic partner "alongside Justin Sun and the Tron ecosystem". BitGo took a minority stake. Custody of the underlying bitcoin, until then held in the United States, was to be spread across Hong Kong and Singapore, with a 60-day transition. BitGo said the same multi-signature, cold-storage technology used since 2019 would continue, with keys distributed across jurisdictions.
- 2024 reaction: Lending protocols' risk teams opened governance discussions about their WBTC exposure. Reports at the time described a 2-of-3 multi-signature arrangement for the reserve.
- 19–25 April 2026: WBTC paused all cross-chain transfers of its LayerZero-based version. It cited an exploit of Kelp DAO's rsETH, in which about $290 million was drained through its adapter, and said that incident was "not directly related to WBTC". Native WBTC minting, redemption and reserves were unaffected. Transfers resumed on 25 April.
How a wrapped token works
Most wrapped tokens follow a lock-and-mint cycle:
- Lock. The original asset is deposited with a custodian, a smart contract or a signer set.
- Mint. The same amount of the wrapped token is created on the target chain.
- Use. The wrapped token moves and trades like any native token on that chain.
- Burn and release. The wrapped token is returned and destroyed, and the original asset is released.
If 1,000 wrapped tokens are in circulation, at least 1,000 units of the original should be in reserve. Whether that holds is something you check on-chain where the issuer publishes reserves. Otherwise you take the issuer's word for it.
WBTC: custodian-based
WBTC's own site says only identity-verified institutions, called merchants, can mint and burn WBTC, and DAO governance approves them. The bitcoin sits in multi-signature cold storage spread across regions.
WBTC's transparency dashboard showed these figures on 25 October 2026:
| Measure | Figure |
|---|---|
| WBTC in circulation | 116,499.1908 |
| BTC in custodian reserves | 116,511.9929 |
| WBTC on Ethereum | 116,132.1827 |
| WBTC on Solana / Tron / Kava | 104.8291 / 99.8400 / 76.3787 |
The dashboard lists the custodian's Bitcoin addresses, which can be looked up in a block explorer. It also records each mint and burn, 1,358 entries on that date. Ordinary holders usually acquire WBTC from others rather than minting it themselves, because minting and burning are reserved for merchants.
WETH: smart-contract wrapping on the same chain
Wrapping does not always mean crossing chains. ETH predates the ERC-20 token standard, so it cannot be used directly by apps built for ERC-20 tokens. Wrapped Ether (WETH) fixes that. According to ethereum.org:
- You deposit ETH into the WETH contract and receive the same amount of WETH. To unwrap, you redeem WETH and it is burned.
- The contract manages WETH's supply, not the Ethereum protocol. The canonical mainnet contract is
0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2. - Gas cannot be paid in WETH, so you need some native ETH.
- Other tokens called "WETH" exist on other chains and in individual apps, and they may work differently. Confirm which contract you are using.
No custodian holds the ETH. The risk is in the contract code, which ethereum.org describes as generally considered secure and formally verified.
rBTC on Rootstock: hardware-secured multisig
Rootstock's PowPeg locks BTC in a multisig on Bitcoin. Each signing key sits in a PowHSM, a tamper-resistant device that signs only when the Rootstock chain shows enough cumulative proof of work. According to Rootstock's documentation:
- Peg-in: send BTC to the PowPeg address, wait 100 Bitcoin blocks, and the Bridge contract releases rBTC. The minimum is 0.005 BTC.
- Peg-out: return rBTC to the Bridge. After about 4,000 Rootstock blocks the PowHSMs sign the Bitcoin transaction. The minimum is 0.004 rBTC.
sBTC on Stacks: a signer set
According to Stacks documentation, sBTC is a SIP-010 token designed to be redeemable for BTC at 1:1. All pegged BTC sits in a single output at a multi-signature Taproot address controlled by sBTC Signers, initially 15 chosen by the community. Deposits take about 3 Bitcoin blocks and withdrawals about 6. The Stacks Foundation announced the mainnet launch in December 2024.
The trust models side by side
| Token | Who controls the locked asset | Main failure point |
|---|---|---|
| WBTC | Institutional custodian; DAO approves merchants | Custodian security, solvency or legal action |
| WETH | Smart contract on Ethereum | Contract code |
| rBTC | PowPeg multisig with keys in PowHSMs | Signer hardware and peg design |
| sBTC | Signer set (initially 15) | Collusion or compromise of signers |
None of these removes trust. They move it to a company, to code or to a group of signers.
What wrapped tokens are used for
- Collateral and lending. WBTC can be supplied to Ethereum lending protocols, which native BTC cannot do. WBTC's August 2026 update cited Arkham data for 12 August: about 34,136 WBTC on Aave, 7,203 on Compound and 5,374 on Morpho. WBTC cautions that these are not comparable total-value-locked figures.
- Trading and liquidity pools. On decentralised exchanges, a wrapped asset can be paired with the target chain's tokens.
- App compatibility. WETH exists so that ETH can be handled the same way as every other ERC-20 token.
Who holds the asset behind your wrapped token?
Compare WBTC, WETH, rBTC and sBTC by who controls the locked asset, how you get in and out, and where each one can fail.
| Token | Who controls the locked asset | Getting in | Getting out | Main failure point | Source |
|---|---|---|---|---|---|
| WBTC | Institutional custodian; DAO approves merchants | Only identity-verified merchants mint; most holders acquire WBTC from others | Only merchants burn and redeem for BTC | Custodian security, solvency or legal action | |
| WETH | Smart contract on Ethereum | Deposit ETH into the WETH contract, receive the same amount | Redeem WETH and it is burned | Contract code | |
| rBTC | PowPeg multisig with keys in PowHSMs | Wait 100 Bitcoin blocks; minimum 0.005 BTC | About 4,000 Rootstock blocks; minimum 0.004 rBTC | Signer hardware and peg design | |
| sBTC | Signer set, initially 15 | About 3 Bitcoin blocks | About 6 Bitcoin blocks | Collusion or compromise of signers |
This compares how each design is built as the article describes it; it does not show network or merchant fees, live reserve levels, or whether any token is trading at a discount to its underlying.
Risks
- Custodian risk. With WBTC you hold a claim on bitcoin that someone else holds. If the custodian is hacked, becomes insolvent or freezes redemptions, the token can lose its backing. WBTC's 7 October 2026 announcement names single-custodian concentration as a weakness.
- Bridge and contract risk. Chainalysis estimated on 2 August 2022 that about $2 billion had been stolen in 13 cross-chain bridge hacks that year, 69% of all funds stolen in 2022 up to then. The largest, the Ronin bridge exploit in March 2022, was put at about $625 million by The Block.
- Legal and jurisdictional risk. Custodians are regulated businesses in specific places. WBTC's 2024 move added Hong Kong and Singapore to that exposure.
- Peg risk. A wrapped token trades near its underlying only while the market believes it can be redeemed. Doubts about reserves can push it to a discount before any shortfall is confirmed.
- Look-alike tokens. Several tokens share names such as "WETH". The contract address is what counts.
Wrapping vs bridging vs atomic swaps
Bridging is the broad category: any mechanism that moves assets or messages between chains. Wrapping is one way to do it, lock-and-mint. Some bridges use liquidity pools or messaging instead.
Atomic swaps avoid issuing a wrapped token at all. They use Hash Time-Locked Contracts (HTLCs), which combine a hashlock and a timelock. The receiver can claim funds only by revealing a secret (the pre-image of a hash) before a deadline. If they don't, the funds return to the payer. Two parties on two chains lock funds to the same hash, so either both swaps complete or both refund. Each coin stays on its own chain. An atomic swap is a trade between two parties, not a way to use BTC inside Ethereum apps.
FAQ
Is a wrapped token the same as the original asset?
No. It is a claim on the original, and it is only as good as whoever, or whatever, controls the locked asset.
Can I check WBTC's backing?
Yes. WBTC's transparency page lists custodian Bitcoin addresses, supply by chain, and every mint and burn record.
Who holds the bitcoin behind WBTC today?
Since the 2024 restructuring, custody has been shared between BitGo and the BiT Global joint venture across several jurisdictions. WBTC said on 7 October 2026 that it is evaluating additional custodians but has not named them.
Do wrapped tokens cost anything to create or redeem?
Network fees apply on both chains, and merchants or bridges may add their own fees on top.
The multi-custodian plan comes from WBTC's own announcement, names no custodians or dates, and may change. This article is educational and not investment advice.
