What Is Rehypothecation in Crypto Lending? The Dark Side of Collateral Reuse

Key Takeaways on Rehypothecation
in Crypto Lending

• Rehypothecation in crypto happens when a crypto loan service uses the collateral you deposited as collateral for its own obligations, or lends it directly to third parties.
• When that third-party borrower defaults, the platform becomes insolvent and user funds get frozen. Celsius, Voyager, and BlockFi all collapsed this way in 2022.
• In the U.S., the SEC caps broker-dealer rehypothecation at 140% of the loan amount. For most crypto platforms, no equivalent rule applies.
• CoinRabbit operates under a strict no rehypothecation policy: your collateral stays in cold wallets with multisig access and is never lent to any third party.

What Is Rehypothecation in Crypto Lending?

Most people who deposit crypto on a lending platform assume it stays there. That assumption is often incorrect.

Rehypothecation is what happens when a platform takes the collateral you pledged and uses it as collateral for its own deals, or passes it to an external borrower entirely. Your Bitcoin backs your crypto loan with the platform. That same Bitcoin then backs the platform’s deal with a hedge fund you have never heard of. One asset, multiple obligations stacked on top of each other.

This is not a theoretical risk. The 2022 crypto credit crisis demonstrated exactly what happens when that chain breaks: billions in frozen customer assets across multiple major platforms. Even in 2026, as the market trades near all-time highs and new capital pours into CeFi products, rehypothecation remains a live structural issue. Most platforms that practice it do not say so clearly, and users tend to find out only when withdrawals stop.

Understanding what rehypothecation is in crypto, and how to spot it, is the starting point for evaluating any lending platform you use.

Hypothecation vs. Rehypothecation: Key Differences

Before going further, the difference between these two terms matters.

• Hypothecation is standard collateral. You pledge an asset to secure a loan. Ownership stays with you, but the lender holds a claim on it until repayment. A mortgage works exactly this way: the house secures the bank’s loan, and the bank cannot do anything with that property unless you default.

• Rehypothecation takes that one step further. The lender takes your pledged asset and uses it as collateral for their own transactions. Your asset is now committed in two places at once: to secure your loan, and to secure the lender’s deal with a third party.

In traditional finance, rehypothecation is legal and regulated. In crypto, the same practice exists with far less oversight. Many platforms do not disclose it clearly, and the fine print that does mention it tends to appear on page 14 of a terms-of-service document written for lawyers, not users.

How Rehypothecation Works in CeFi and DeFi

The mechanics become clear with a concrete example.

You deposit 1 BTC on a lending platform. Here is the typical flow:

1. The platform lends your 1 BTC to a hedge fund to get interests.
2. Your Bitcoin is now in the hedge fund’s hands, not in the platform’s cold wallet.

From the platform’s side, this is capital efficiency. From yours, it is exposure to an entity you cannot audit and did not choose.

DeFi operates differently. On-chain protocols make collateral deployment visible through public ledgers. Anyone can verify where assets are deployed via a block explorer. That structural openness is one reason DeFi’s share of the total crypto lending market rose to 66.9% by Q3 2025, according to Galaxy Research. Still, DeFi carries its own risks: smart contract bugs, governance exploits, and liquidation cascades. Transparency reduces counterparty risk but does not eliminate it.

CeFi platforms, by contrast, do not publish loan books, collateral ratios, or counterparty lists. The depositor is left to trust whatever the platform chooses to disclose, which in several high-profile cases turned out to be very little.

The Specific Risks of Rehypothecation in Crypto

Once collateral is rehypothecated, three distinct failure modes emerge.

• Counterparty insolvency. If the external borrower defaults, the platform has a hole in its balance sheet. At that point, it cannot return user funds regardless of intent. The depositor’s exposure has been transferred to an entity they never agreed to deal with.
• Bank run dynamics. Crypto markets move fast. During sharp drawdowns, many users try to withdraw simultaneously. If the platform has committed most of its reserves to illiquid loans, it cannot honor those requests. Withdrawals freeze, often within hours, and what follows is usually a bankruptcy filing.
• Unsecured creditor status. This is the detail most users overlook entirely. Many CeFi platforms include “transfer of title” language in their terms of service. At the moment of deposit, legal ownership of the assets may pass to the platform. In a bankruptcy proceeding, that makes the depositor an unsecured creditor: last in line after legal fees, secured creditors, and tax obligations.

Under SEC Rule 15c3-3, securities exceeding 140% of a client’s debit balance are classified as “excess margin securities” and must remain in the broker-dealer’s possession or control, meaning they cannot be rehypothecated. No equivalent restriction governs most crypto lending platforms operating today.

History’s Lessons: Celsius, Voyager, and BlockFi

The 2022 crypto credit crisis is worth examining in detail, because each collapse followed the same structural logic.

• Celsius Network is the most documented case. Vermont’s Department of Financial Regulation confirmed that Celsius customers had explicitly granted the platform the right to “use, lend, sell, and rehypothecate” their deposited crypto. Those assets were deployed into DeFi protocols, institutional loans, and leveraged yield strategies. When the market turned in June 2022, Celsius froze all withdrawals overnight. By its Chapter 11 filing on July 13, 2022, the company carried $5.5 billion in liabilities against $4.3 billion in assets. 

A January 2023 bankruptcy ruling held that assets in Earn accounts (about 600,000 accounts) belonged to the Celsius estate, making those users unsecured creditors, according to a bankruptcy court decision; the “1.7 million” figure refers to total registered users cited in the Chapter 11 filing.

• Voyager Digital followed a different but equally direct path. The platform had loaned $350 million in USDC and 15,250 BTC (valued at more than $650 million) to a single borrower, Three Arrows Capital (3AC), according to CNBC reporting. When 3AC collapsed in June 2022, Voyager could not recover the loan. It filed for Chapter 11 on July 5, 2022, with more than 3.5 million customers locked out of their funds.

• BlockFi entered bankruptcy on November 28, 2022. BlockFi had $355 million in digital assets frozen on FTX’s platform and an additional $680 million loan to Alameda Research in default. The bankruptcy filing listed more than 100,000 creditors, with liabilities and assets each estimated between $1 billion and $10 billion.

All three platforms failed the same test: user collateral had been committed beyond the platform’s control, and when one link in the chain broke, depositors absorbed the loss.

Is the Crypto Lending Market Safer in 2026?

The numbers suggest recovery. Total crypto-collateralized lending hit a record $73.59 billion in Q3 2025, according to Galaxy Research, above the previous peak of $69.4 billion from Q4 2021. CeFi survivors largely abandoned uncollateralized lending after 2022, and the three largest tracked CeFi lenders (Tether, Nexo, Galaxy) controlled about 75.66% of CeFi lending volume in Q3 2025 according to Galaxy Research coverage.

Several jurisdictions have also moved on custody rules. In the EU, MiCA introduced segregation requirements for crypto asset service providers. That is meaningful progress.

But “stricter” is not the same as “no rehypothecation.” Many CeFi platforms still deploy user assets to generate yield and disclose this only deep in their terms of service. The systemic risk has not disappeared. It has been redistributed among fewer, larger players, and it now operates at a larger scale than before.

What Proof of Reserves Tells You (and What It Doesn’t)

After 2022, many platforms rushed to publish proof-of-reserves (PoR) audits to rebuild trust. These reports confirm that a platform controls on-chain assets at a specific point in time. They are worth checking. They are not a full answer.

The key limitation: a PoR audit only shows the on-chain assets a platform holds, not its liabilities or off-chain obligations. A platform could pass a PoR audit while having rehypothecated a significant portion of user assets the week before, then borrowed assets temporarily to pass the snapshot. As Coinbase notes, PoR cannot account for off-chain activities and liabilities to customers.

What actually matters is the custody structure behind the assets. A platform that holds collateral in cold wallets under a strict no rehypothecation policy does not need to pass a PoR audit to prove it is not rehypothecating. The architecture prevents it by design.

PoR audits are a useful signal. Cold storage custody with a publicly stated no rehypothecation policy is the more reliable indicator.

How to Spot Rehypothecation Before You Deposit Crypto

Most platforms do not advertise this practice. A few signals to check before committing funds:

• Unusually high APY or low APR. It almost always involves lending your assets out aggressively. There is no other mechanism that generates that return at scale or offers such a low-cost loan product.

• “Transfer of title” language in the terms of service. Phrases like “pledge, re-pledge, hypothecate” or “assets may be used for operational purposes” are direct indicators.

• No explicit custody policy. If the site does not state that client collateral is held in cold storage and never lent to third parties, ask directly. Vague answers carry their own meaning.

Protecting Your Assets from Rehypothecation Risks

A few practical steps reduce exposure in a concrete way:

• Self-custody for long-term holdings. If you hold the private keys, no platform can touch your assets. Self-custody removes rehypothecation risk entirely for assets held outside a custodian.

• Read the terms of service before depositing. Look specifically for asset-use clauses, transfer of title, and platform rights during insolvency. Binance Academy lists this as the primary step any investor should take before using a CeFi platform.

• Choose platforms with specific, verifiable no rehypothecation policies. The commitment should name the custody structure and be publicly documented.

CoinRabbit: Crypto Lender With No Rehypothecation Policy

CoinRabbit operates under a strict no rehypothecation policy. Your collateral is never lent to third parties, never deployed into external protocols, and never used as backing for the platform’s own obligations. Every deposited asset stays in cold wallets with multisig access: multiple independent keys are required for any transaction, and no external counterparty ever holds your assets.

What that means in practice:

• Collateral appreciation stays yours. If BTC rises while your loan is active, you receive 100% of that gain on repayment.
• No third-party default risk. There is no hedge fund or external borrower whose failure can affect your position.
• Funds arrive in minutes. CoinRabbit processes loans within 10 minutes of collateral confirmation, with no credit check and without routing your assets to any external party.

The platform accepts 350+ cryptocurrencies as collateral, with LTV options from 50% to 90%, and pays loan proceeds in stablecoins across multiple networks. The crypto wallet brings borrowing, swapping, and an earn product (up to 5% APY) into a single dashboard. For users managing $500,000 or more in digital assets, the Private Program adds dedicated support and customized terms.

The no rehypothecation policy is not a feature added as an afterthought. It is how the platform was built from day one, and it is the reason user collateral has never been at risk of third-party default in CoinRabbit’s five-plus years of operation.

“In my discussions with Private Program clients, it is consistently clear that our no rehypothecation policy is a critical factor in their decision to partner with CoinRabbit. High-net-worth individuals and sophisticated investors are increasingly prioritizing transparency, asset security, and risk control. They seek assurance that their collateral will never be reused or lent out, preserving full ownership and protection of their holdings. For this client segment, such guarantees are no longer optional—they are fundamental to the selection of a trusted crypto lending partner.”

— Vito Bushuev, Head of Business Development, CoinRabbit

Final Thoughts on Rehypothecation
in Crypto Lending

Rehypothecation cost retail investors billions of dollars in 2022. The platforms responsible were not fringe actors. They were well-funded, heavily marketed, and widely trusted. What brought them down was a business model that relied on reusing client collateral for profit, with risk flowing silently back to depositors when something in the chain failed.

In 2026, the market is larger and regulation is improving, but the practice persists. The most reliable protection is a platform that does not rehypothecate at all: one where your collateral stays put, verifiable and untouched, until you decide otherwise. That structural commitment matters more than any yield comparison.

Last Updated on March 30, 2026 by Dan Marsh