Bitcoin Whales Have Swapped $5 Billion of Keys for BlackRock Shares. The Sales Pitch Is Fear

Correction · October 15, 2026The article put the Coldcard losses at more than $130 million, a figure none of its sources gives. It now gives The Canadian Press's figure of about US$100 million, which its cited source, The Globe and Mail, reported as C$140 million.

In this report
Key Takeaways04
01

Robbie Mitchnick, BlackRock's head of digital assets, told Bloomberg this week that the iShares Bitcoin Trust (IBIT) has processed more than $5 billion in in-kind Bitcoin-to-ETF conversions, up from roughly $3 billion in October. In July the firm cut the minimum conversion size from $25 million to $1 million, a 96 percent reduction that opens the exit from to a far larger tier of holders.

02

Mitchnick named the demand driver himself: kidnappings, ransom, and custody failures are motivating holders to make the switch. The fear is grounded in real incident data. CertiK documented 52 with $124.1 million in total exposure in the first half of 2026, and the Coldcard entropy flaw swept about US$100 million (C$140 million by The Globe and Mail's count) out of self-custodied wallets in a matter of weeks.

03

The conversion genuinely removes the home-invasion attack surface and simplifies estates, but it surrenders seizure resistance. An IBIT share is a custodial claim reachable by subpoena and freeze order, the underlying coins sit with Coinbase Custody (with Anchorage Digital Bank as a second custodian since April 2025), and the door is one-way in practice: the only exit for an individual investor is a share sale, which is a taxable event.

04

Physical risk has key-keeping answers before it has a key-surrendering one: with geographically separated keys, collaborative custody, a -protected with verified entropy, and target-profile hygiene. Convert a tranche only against an explicit threat model, with written tax advice, because no crypto-specific IRS guidance yet confirms the deferral these conversions are marketed on.

What Happened

Robbie Mitchnick, BlackRock's head of digital assets, told Bloomberg this week that the iShares Bitcoin Trust (IBIT), the firm's spot Bitcoin exchange-traded fund (ETF), has processed more than $5 billion in in-kind conversions: transactions in which a Bitcoin holder delivers coins to the fund through an authorized participant and receives IBIT shares in return, with no sale in the middle.

The figure is up from roughly $3 billion in October. A second number explains the acceleration: in July, BlackRock cut the minimum size for these conversions from $25 million to $1 million, a 96 percent reduction that moves the product from the family-office tier to the merely wealthy.

Because the coins are contributed rather than sold, coverage describes the transaction as tax-deferred: the holder's embedded capital gain rides into the ETF shares instead of being realized at conversion.

Mitchnick was direct about what is driving demand. 'People see things happen in the outside world, whether it's kidnappings, ransom, custody failures, that motivate them to make this switch for all or some of their holdings,' he said. CoinDesk's framing of the disclosure was blunter: Wall Street is making it easier for Bitcoin whales to ditch self-custody.

The coins that make the trip land in IBIT's custody stack: Coinbase Custody holds the fund's Bitcoin as primary custodian, with Anchorage Digital Bank added as a second custodian in April 2025. IBIT is the largest spot Bitcoin ETF, and independent analyses have estimated that more than 80 percent of US spot Bitcoin ETF assets sit in Coinbase custody.

BlackRock did not create the fear, but it has priced the exit from it at $1 million. The structural bill arrives later, when the supply that made Bitcoin seizure-resistant sits behind the same 2 custodians.
◇

The Fear Is Real. So Is the Funnel

The anxiety Mitchnick is describing is not manufactured. CertiK's mid-year review, which this site covered on July 24, documented 52 verified wrench attacks (physical coercion aimed at forcing key surrender) in the first half of 2026, up 33.3 percent year over year, with total exposure of $124.

1 million against $10.5 million in the first half of 2025; 33 of the 52 occurred in France. Chainalysis, counting only funds actually stolen through violence, put the figure above $30 million by late June. And the Coldcard entropy flaw turned an hardware wallet into a 9-figure loss event: about US$100 million, C$140 million by The Globe and Mail's count, swept from wallets whose owners did everything the standard advice told them to do.

The Globe and Mail spent this week reporting on Bitcoin users openly rethinking self-custody in its aftermath. Anyone dismissing the fear as ETF marketing is not reading the incident data.

What deserves attention is the structure that has grown up around the fear. Every self-custody failure now feeds a conversion funnel operated by the largest asset manager on earth: the breach makes headlines, the headlines move holders, and the holders arrive at a product whose entry gate was just lowered 96 percent to receive them.

This is the absorption pattern this site tracks, operating at the individual level. Bitcoin's supply is migrating from dispersed key control into a small number of custodial vaults wrapped in securities, and this leg of the migration is propelled not by yield or convenience but by fear of holding the asset directly.

BlackRock did not create the threat environment. It has, however, built the toll booth at the exit.

◐

What the Swap Keeps, and What It Surrenders

Read fairly, the conversion solves real problems. An IBIT share cannot be extracted in a home invasion: there is no to coerce, and a forced brokerage transfer at 3 a.m. is not an executable crime the way a forced on-chain transfer is. Estate transitions get simpler; a surviving spouse inherits a brokerage position rather than a metal-plate puzzle.

Operational error, the failure mode behind the Coldcard losses and a steady share of permanent Bitcoin loss, is delegated to professionals. For a holder whose realistic threat model is physical coercion or their own mistakes, the wrapper is a genuine upgrade against those specific threats.

As our August 23 piece on Grayscale's privacy-coin filing put it, the wrapper keeps the price.

The wrapper keeps the price and surrenders the properties. An IBIT share is a custodial claim, and custodial risk is exactly what this site's coverage of frozen accounts and conscripted intermediaries keeps documenting: a brokerage position is reachable by subpoena, freeze order, civil judgment, and sanctions determination, because every layer (broker, fund, custodian) is a jurisdictional contact point that resolves doubt against the customer.

Seizure resistance, the property that makes Bitcoin structurally different from everything else in a portfolio, does not survive the conversion: it is a property of , and the keys now belong to Coinbase Custody. The door is also one-way in practice. Coins go in through in-kind creation, but there is no equivalent path for an individual investor to take coins back out, so the exit is a share sale, which realizes the deferred gain.

And the deferral itself rests on the trust's structure as reported: as of this writing there is no crypto-specific IRS guidance confirming the treatment of these conversions, a gap tax practitioners have flagged in published analyses of in-kind crypto exchanges.

▪

What This Means for You

The takeaway is not that converting is irrational. It is that the decision deserves a threat model, not a headline. Ask which risk you are actually carrying. If your holdings are modest and nobody can connect your name to them, the wrench-attack argument mostly does not apply to you, and the conversion trades away sovereignty properties to solve a problem you do not have.

If physical risk is real for you, key-keeping architectures address it without surrendering key control. Multi-sig with geographically separated keys means no single location, and no single coerced moment, can move your coins. Collaborative custody formalizes this in a 2-of-3 arrangement where you hold 2 keys and an institution holds 1 and cannot move funds alone.

A hardware wallet seed generated with verified entropy and protected by a passphrase addresses the Coldcard failure class. Target-profile hygiene matters as much as architecture: many of the documented wrench cases began with leaked customer data or public visibility, which is why this site treated the Trezor shipping-data breach as a physical-security event rather than a privacy footnote.

If you do convert a tranche, do it deliberately. Decide which portion of your position is savings that must survive institutional failure (that portion belongs behind your own keys) and which portion is market exposure you are willing to hold as a brokerage claim. Get written advice from a tax professional before assuming the deferral holds in your situation, keep your acquisition records either way, and read the fund's custody and suspension provisions so you understand what you own on the day the market is closed and the coins are not yours to move.

◯

What to Watch

Watch whether Fidelity and the other spot ETF issuers match the $1 million minimum or undercut it, and whether BlackRock lowers the gate again: each cut converts another tier of holders from key control to custodial claims. Watch the conversion pace against the $5 billion mark, and whether it spikes after the next high-profile breach or wrench case, which would confirm the funnel dynamic.

Watch for IRS guidance on in-kind crypto contributions, since a ruling in either direction changes the product's core appeal overnight. Watch the custody concentration numbers, because the higher the share of ETF Bitcoin held at Coinbase, the more that single stack functions as a systemic chokepoint for the asset class.

And watch where the attackers go: assets migrate and attack surfaces migrate with them, so credential theft, SIM swaps, and coercion aimed at brokerage logins are the predictable next chapter once the keys move behind the perimeter.

Sources

Where this report's claims come from.

[1]

CoinDesk — 'Wall Street Is Making It Easier for Bitcoin Whales to Ditch Self-Custody: Report', August 2026

[2]

crypto.news — 'BlackRock Cuts IBIT Bitcoin Swap Minimum to $1M', August 2026

[3]

Finbold — 'BlackRock Scores $5 Billion of Tax-Deferred Bitcoin to ETF Swaps', August 2026

[4]

KuCoin News — 'BlackRock Facilitates $5 Billion Tax-Deferred Bitcoin to ETF Swaps', August 2026

[5]

The Globe and Mail — 'A $140-Million Hack Has Bitcoin Users Rethinking How They Store Their Crypto', August 2026

[6]

The Canadian Press, via BNN Bloomberg — 'Hackers Drain More Than $140M in Bitcoin From Devices Made by Canadian Firm' (about US$100 million, roughly C$140 million), August 2026

[7]

CertiK — '2026 Wrench Attacks Overview', August 2026

[8]

CryptoSlate — 'BlackRock Adds New Bitcoin Custodian Anchorage Digital Alongside Coinbase', April 2025

[9]

The Daily Upside — 'Can Crypto Be Converted Using 351 Exchanges? It's Complicated', February 2026

[10]

OPNorange archive — 'CertiK Counted 52 Wrench Attacks in 6 Months as Home Invasion Becomes the Leading Vector', July 24, 2026

[11]

OPNorange archive — 'Grayscale Wants to List the First Privacy-Coin ETF. The Wrapper Keeps the Price, Not the Privacy', August 23, 2026

[12]

OPNorange archive — 'Trezor's Shipping Partner Leaked 13,689 Home Addresses. The Devices Are Fine. The Owners Are the Target', August 15, 2026

Act on this

This report covers physical coercion — this edge was matched at build time and every signal is auditable below.