Brazil ruling tests self-custody at Major Exchange

TLDR

A So Paulo court has ordered Coinbase to reimburse a user after a $100,000 loss from a self-custody wallet, raising new questions about exchange liability for own keys products.

1. The court applied Brazils consumer law to a Coinbase self-custody wallet, ruling the company must return nearly $100,000 after unauthorized transactions.
2. Judges treated the wallet provider as responsible for product security, even without direct control of funds, challenging standard industry assumptions about self-custody.
3. Next steps include possible appeals and regulatory follow-up in Brazil, which could influence how exchanges and wallet developers design and support self-custody tools.

Deep Dive

1. What The Court Decided

On 12 July 2026, the So Paulo State Court ruled against Coinbase in a case involving unauthorized transactions from a Coinbase self-custody wallet, ordering the firm to repay almost $100,000 to the affected user. The decision relied on Brazils Consumer Protection Code, which places the burden of proof on the service provider and expects them to show that the user authorized the transfers or that sufficient security existed. According to reporting on the case, the magistrate noted that Coinbase had ample opportunity to explain technical records and trace where the funds went, but did not do so, leading the court to side with the customer and award the full amount plus legal interest.

2. Impact On Self-Custody And Exchanges

Historically, exchanges and wallet providers have argued that non-custodial products shift responsibility to the user, since only the user controls the private keys. This ruling pushes against that view, effectively saying that anyone who develops and markets a wallet is responsible for its security and for adequately explaining how incidents occur. That raises legal exposure for self-custody wallet providers, especially large exchanges offering branded wallet apps, and may drive stricter security standards, clearer documentation, or even a rethink of how such tools are offered in Brazil.

3. What To Watch Next

Key variables now are whether Coinbase appeals, how higher Brazilian courts interpret consumer protection in crypto, and whether regulators issue guidance that extends this logic to other wallet and exchange providers. Industry groups and local exchanges are likely to study this case when designing wallet products, support processes, and incident response, since technical logs and clear explanations proved decisive. Outside Brazil, other jurisdictions with strong consumer codes may look at this ruling as a reference point, creating a patchwork of liability expectations for global exchanges.

Confidence: high because the decision is documented in detailed coverage of the So Paulo ruling.

Conclusion

The Brazil ruling shows that self-custody, at least in one major market, does not automatically shield wallet providers from responsibility when users lose funds. For crypto users and exchanges, the emerging pattern is clear: legal systems are starting to treat wallet software as a consumer product with obligations, which could reshape how not your keys, not your coins is implemented and supported in practice.