Bitcoin Ordinals Guide
Self-Custody vs Custodial Ordinals Marketplaces: What the Difference Really Is
Last updated
TL;DR
A genuinely non-custodial ordinals marketplace never holds your inscription — it stays in your wallet until a trade settles on-chain. Every major venue in 2026 works this way. Custodial alternatives still exist (deposit-then-trade platforms, ETH-bridged vaults) but they trade away Bitcoin's core safety property for marginal convenience. Here's how to tell the difference and what can still go wrong even on a self-custody venue.
What "non-custodial" actually means
Non-custodial means you hold the private key to the wallet that owns the inscription. The marketplace facilitates discovery and matches buyers with sellers, but the asset itself stays at a UTXO you control. A listing is a signature, not a transfer. Only when a buyer accepts the listing does the inscription actually move — and it moves in a single on-chain transaction that the buyer countersigns and broadcasts.
The defining test: if the platform disappeared overnight, would your inscription still be in your wallet? On a non-custodial venue, yes. On a custodial one, you depend on the platform to honor a withdrawal.
The custody patterns you'll encounter
- Pure PSBT (every major venue). Listing is a signature; the inscription never leaves your wallet. Trade settles in one Bitcoin transaction.
- Deposit-then-trade (custodial). You send the inscription to a platform-controlled address first. Trades happen off-chain on their books. You trust them to honor withdrawals.
- Aggregator. A discovery layer that relays trades to underlying non-custodial marketplaces. Custody model inherits from the underlying venue. Verify the underlying.
- ETH-bridged / vault. The inscription is locked in a vault contract; you trade an ERC-721 wrapper on Ethereum marketplaces. Bridge risk applies.
- Off-chain trading club (rare). Trades tracked off-chain, batch-settled periodically. High counterparty risk between settlement cycles.
Red flags
- "Deposit to start trading." A non-custodial venue never asks for this. If listing requires moving the asset to a platform address, walk away.
- "Approve" or "permit" prompts.Bitcoin doesn't have token approvals. Any flow that looks like an ERC-20 approval is either bridged (and adds risk) or fraudulent.
- Vague custody language."Cold storage on your behalf," "managed wallets," "trade accounts" — all custodial signals.
- No PSBT preview.A reputable venue lets your wallet show you exactly what you're signing before you sign.
- Unilateral cancellation policies. If a platform claims it can cancel listings on your behalf, custody is involved somewhere.
ETH-bridged ordinals: a special case
A handful of services let you "bridge" an ordinal to Ethereum: you lock the inscription in a vault address, and the service mints an ERC-721 wrapper you can trade on OpenSea, Blur, or other ETH-native marketplaces. The model has two layered risks:
- Vault custody. Whoever controls the vault holds the underlying inscription. Smart contract bugs, key compromise, or operator failure can break the redemption guarantee.
- Redemption cost.Unwrapping costs both a Bitcoin and an Ethereum transaction. The wrapper's market price can also diverge from the underlying.
As native Bitcoin marketplace liquidity has grown, ETH-bridging has largely fallen out of favor. Most serious traders stay native.
How to verify non-custodial behavior
- Note the inscription's UTXO and owning address before you list. Any block explorer can show this (ordinals.com, mempool.space, etc.).
- List on the marketplace. Read the PSBT in your wallet before signing — it should show one input (your UTXO) and one output (your own address). Sign.
- Refresh the explorer. The inscription should still be at the same UTXO, owned by the same address.
- Cancel the listing. No on-chain transaction should be required. If a withdrawal transaction is needed, the platform is custodial.
What can still go wrong on a non-custodial venue
- Compromised UI serving malicious PSBT.The marketplace shows "Sign to list inscription #12345 for 0.5 BTC" but the actual PSBT releases a different inscription or sends payment to an attacker. Defense: read every PSBT in your wallet before signing.
- Phishing. A clone of the marketplace at a similar URL collects signatures that fund the attacker. Defense: bookmark the real URL and only ever enter through the bookmark.
- Orderbook downtime.If the venue goes down, your asset is safe but you can't trade through it until they recover. Cross-listing across multiple venues reduces this risk.
- Inscription-spending wallets. If you connect a non-ordinals-aware wallet, it can spend the inscription UTXO as ordinary sats and effectively destroy the inscription. Always use an ordinals-aware wallet.
Frequently asked questions
- Are all major ordinals marketplaces non-custodial?
- In 2026, yes — Ordinals Wallet, Magic Eden, Gamma, OKX, Unisat, and Magisat all use the PSBT pattern where your inscription never leaves your wallet until a trade settles. Custodial models exist but are minor and should be avoided.
- What’s the simplest way to verify a marketplace is non-custodial?
- List an inscription and then check a block explorer — your inscription should still be at the same UTXO under your address. If listing required a transaction that moved the inscription to a new address, the platform is custodial.
- Are ETH-bridged ordinals the same thing as Bitcoin Ordinals?
- No. A bridged ordinal is a wrapped representation (typically an ERC-721 on Ethereum) backed by an inscription locked in a vault. You’re trading the wrapper, not the inscription itself. Unwrapping requires the vault to honor the redemption, which adds bridge risk and extra transaction costs.
- What happens to my ordinal if a marketplace gets hacked?
- On a non-custodial venue, your inscription is unaffected because it never left your wallet. The orderbook may go offline and your listing may disappear, but the asset itself is safe. On a custodial venue, a hack can mean partial or total loss.
- Can a non-custodial marketplace still steal my ordinal?
- Not by holding it — it never had custody. The realistic attack is a compromised UI serving a PSBT that differs from what’s displayed. The defense is reading the PSBT in your wallet before signing — confirm the input UTXO and the destination address.
- Why would anyone use a custodial ordinals marketplace?
- In practice, almost nobody should. Custodial models trade away the core safety property of Bitcoin (you hold the keys) for convenience benefits (slightly faster UX, listing aggregation) that don’t outweigh the risk.