cbBTC vs WBTC vs LBTC vs tBTC: Wrapped Bitcoin Risks

By Owen Thurm Published November 6, 2026 5 min read

Quick answer. None is risk-free; each puts the trust somewhere else. WBTC and cbBTC rely on custodians and can be paused, and cbBTC can blacklist. LBTC relies on a 14-member consortium and a yield strategy. tBTC relies on 51-of-100 signers.

Watch: cbBTC vs WBTC vs LBTC vs tBTC: Wrapped Bitcoin Risks 1:48

Video transcript

No wrapped Bitcoin is risk-free. Each one puts the trust somewhere else: who holds the bitcoin, who can mint, and who can freeze it.

BitGo and BiT Global hold WBTC's bitcoin. Coinbase holds cbBTC's. LBTC relies on a fourteen-member consortium, and tBTC needs fifty-one of one hundred signers.

Freeze powers differ. cbBTC can blacklist addresses and pause transfers. WBTC and LBTC can only pause. The tBTC token has neither.

cbBTC versus WBTC is a trade-off. cbBTC is upgradeable and can blacklist. WBTC cannot, but Coinbase delisted it in 2024, citing the risk that control would fall to Justin Sun.

Up to 60 percent of LBTC's backing can go into a covered-call strategy run by Bitwise, and redemptions take up to ten days.

Off Ethereum, check whether each copy is native or bridged, since bridges add risk.

Fakes matter too. In February 2025, attackers posing as Lombard got a fake LBTC listed on Ionic Money and borrowed against it. Rekt put the loss at 6.9 million dollars.

Before accepting one as collateral, pin each chain's token address, check who holds admin roles, match reserves to supply on every chain, and size positions to a redemption path you can use.

Guardian's risk ratings review who can upgrade, pause or drain a position, and monitoring flags role changes the day they happen. Read the full matrix, or talk to Guardian.

Every wrapped Bitcoin token is a claim on BTC held somewhere else. What matters is who holds it, who can mint, and who can stop you moving it.

The four designs answer differently. Their supply also differs widely, per CoinGecko on November 6, 2026:

Token	Who holds the BTC	Supply (tokens)
WBTC	BitGo and BiT Global	116,132
cbBTC	Coinbase	98,386
LBTC	Lombard: consortium and institutional custodians	6,427
tBTC	Threshold wallets, 51 of 100 signers	4,185

Custody and Proof of Reserves

WBTC

WBTC's docs name BitGo and BiT Global as custodians. Reserves sit offline in multisig, with key shares spread across regions.

BiT Global is the main WBTC concern. In August 2024, BitGo said it would share custody control with BiT Global, a Hong Kong trust company with "ties to" Justin Sun, per The Block.

Coinbase, which issues the rival cbBTC, suspended WBTC trading on December 19, 2024. It cited the "unacceptable risk that control of WBTC would fall into the hands of Justin Sun," Decrypt reported.

WBTC now says it is exploring a multi-custodian model, with minting and redemption unchanged. Its transparency dashboard lists the cold storage addresses.

cbBTC

Coinbase issues cbBTC against BTC deposited with it. It launched a proof-of-reserves page in February 2025, showing 26,754 BTC against 26,557 cbBTC, Bitcoin.com News reported.

LBTC

Lombard's Security Consortium has 14 institutional members, and 10 must sign off on critical operations. Keys are generated in hardware through Cubist's CubeSigner.

LBTC is now yield-bearing. Up to 60% of its backing can go into a covered-call strategy run by Bitwise; the rest is a liquidity buffer.

Strategy assets sit in Lombard accounts at Anchorage Digital Bank and Kraken Financial. Bitwise can trade them but not withdraw them.

Chainlink Proof of Reserve feeds update every 10 minutes to confirm the backing, per Lombard.

tBTC

tBTC has no custodian. Each wallet has 100 signers, 51 must cooperate to move BTC, and a new wallet is created every 14 days.

Signers are drawn at random from a permissioned operator set. Deposits are swept into one output per wallet, which the protocol commits to on Ethereum.

To check any of these yourself, see how to verify proof of reserves.

Mint, Burn and Freeze Controls

We read each token's verified Ethereum source on Sourcify. The powers differ widely.

WBTC. Merchants request mints, and the custodian confirms them after six Bitcoin confirmations. The token has no blacklist.

Its owner can pause all transfers. That owner is a Controller contract held by a 6-of-10 multisig, which can also swap the minting contract.

cbBTC. It runs Circle's FiatToken V2.1 code, the code family behind USDC. A blacklister can freeze any address, a pauser can halt transfers, and minters have allowances.

It sits behind an upgradeable proxy, so these powers can change. Our stablecoin freeze explainer covers how such blacklists work.

LBTC. A mint needs consortium signatures and a Bascule check that the BTC deposit has six confirmations. Pausers can halt transfers, and minters have rate limits.

We found no blacklist in the current Ethereum code. The contract is upgradeable.

tBTC. Only the TBTCVault contract can mint, and the token has no pause or blacklist. Optimistic mints wait out a delay, during which any Threshold Guardian can cancel.

A 6-of-9 Threshold Committee multisig owns the vault, and can replace it after a governance delay.

Multichain Deployments

Off Ethereum, check whether a token is natively issued or a bridged copy. A bridged copy adds the bridge's risk, the same split as USDC.e vs USDC.

WBTC lists native networks: Ethereum, Solana, Tron, BNB Chain, Base, Kava and Osmosis.
cbBTC launched on Ethereum and Base in 2024; by February 2025 it was also on Solana.
LBTC moves over Chainlink CCIP to EVM chains and Solana, through Ethereum as hub.
tBTC mints on Ethereum; Wormhole gateways mint it on Arbitrum, Base, Optimism, Polygon and Solana.

Each LBTC cross-chain mint is also co-signed by the consortium. Lombard ended native LBTC minting and redemption on Berachain, Katana, Sonic, Starknet and TAC on September 16, 2026.

On L2s, any one of several tBTC guardians can pause mints and burns, to contain a chain or bridge incident.

Our bridge security guide covers what to check on each route.

Depeg and Redemption Risk

A wrapper holds its peg through redemption. When redemption is slow or gated, the market price can drift.

WBTC: only approved merchants redeem; the custodian waits for 25 Ethereum confirmations.
cbBTC: minting and redemption run through Coinbase.
LBTC: up to 10 days, paid at LBTC's exchange rate rather than 1:1.
tBTC: redeemed through the bridge for a 0.2% fee.

Lombard rates LBTC's depeg and liquidity risks as medium. It says the market price "may temporarily diverge" from the exchange rate.

Counterfeits are a separate risk. In February 2025, attackers posing as Lombard got Ionic Money on Mode to list a fake LBTC, then borrowed against it. Rekt put the loss at $6.9 million.

Wrapped Bitcoin Risk Matrix

Risk	WBTC	cbBTC	LBTC	tBTC
Custody	BitGo and BiT Global	Coinbase	Consortium, 10 of 14 sign	51 of 100 signers
Who mints	Custodian, on merchant requests	Coinbase minters, with allowances	Consortium plus Bascule check	TBTCVault; Threshold Guardians can veto
Freeze powers	Pause only	Blacklist and pause	Pause only	None on the token
Upgradeable token	No	Yes	Yes	No; vault replaceable
Reserves	Dashboard of addresses	Coinbase reserves page	Chainlink feeds, every 10 minutes	Committed to Ethereum
Cross-chain	Native on 7 networks	Ethereum, Base, Solana	CCIP, Ethereum as hub	Wormhole gateways
Redemption	Approved merchants	Through Coinbase	Up to 10 days	Bridge, 0.2% fee
Watch for	Custodian governance	Issuer freezes	Strategy and consortium risk	Signer set and bridges

Before you hold one or accept it as collateral:

Pin each chain's token address from the issuer's docs.
Read who holds pause, blacklist, mint and upgrade roles, and alert on changes.
Check reserves against supply across every chain, not one.
Know whether each chain's copy is native or bridged, and through what.
Size positions to the redemption path you can actually use.

How Guardian Helps

For allocators, Guardian's risk ratings review "who can upgrade, pause, or drain" a position, plus the bridges and oracles it depends on.

Monitoring then flags signer, threshold, timelock and role changes, and new bridge routes, the day they happen.

For issuers, Managed Security watches privileged calls, role changes, upgrades and multisig transactions on every block.

Frequently Asked Questions

Is cbBTC safer than WBTC?

They trade different risks. Both rely on custodians and can pause transfers. cbBTC can also blacklist addresses and is upgradeable. WBTC has no blacklist, but Coinbase delisted it in 2024, citing the risk that control would fall to Justin Sun.

Can wrapped Bitcoin be frozen?

It depends on the contract. On Ethereum, cbBTC can blacklist addresses and pause. WBTC and LBTC can pause transfers but have no blacklist. The tBTC token has neither.

Is LBTC backed 1:1 by Bitcoin?

Not at a fixed 1:1 rate. LBTC is yield-bearing: its exchange rate to BTC changes as yield from a covered-call strategy run by Bitwise accrues. Redemptions take up to 10 days.

What is the difference between tBTC and WBTC?

WBTC is held by custodians and minted for approved merchants. Threshold's tBTC is held by threshold wallets that need 51 of 100 signers from a permissioned operator set, and only a contract can mint it.

Sources

Know who can freeze, mint or upgrade what you hold

Guardian underwrites the custody, roles and bridges behind wrapped Bitcoin positions, then flags role changes and new routes the day they land.

Talk to Guardian