According to Gizmodo, Bitcoin wallet and lending platform Lava quietly switched from a non-custodial to fully custodial model during a September update without clearly informing users. The mandatory update screen didn’t disclose that Lava would gain full control over users’ digital assets, and people couldn’t access existing loans without installing it. CEO Shehzan Maredia made vague statements on X about changes but provided no specifics about the already-implemented custodial shift. Foundation Head of Physical Design Owen Kemeys publicly demanded clarity about whether the changes were live. Meanwhile, Lava announced a new $200 million fundraising round amid the controversy, and Maredia promised a Wednesday post-mortem that still hadn’t appeared by Thursday.
Trust Bait and Switch
Here’s the thing about this situation that really stings. Users downloaded Lava thinking they were getting a non-custodial wallet where they control their keys. Then an update comes along that fundamentally changes that relationship without proper warning. And the worst part? You can’t even access loans you’ve already taken out unless you agree to the new terms. That’s basically holding your own money hostage until you surrender control.
What makes this particularly galling is Maredia’s own history of criticizing custodial setups on X. He’s spent years talking about the problems with trusted third parties, then turns around and makes his own service exactly that. It’s the kind of hypocrisy that gives the entire crypto space a bad name.
Decentralization Theater
This whole mess highlights what critics call “decentralization theater” in crypto. Projects talk a big game about being trustless and decentralized, but when you peel back the layers, they’re often just as centralized as traditional finance. Remember when AWS went down and took half of crypto with it? That exposed how much supposedly decentralized infrastructure runs on centralized services.
Lava was already questionable on the decentralization front. It was built on Discreet Log Contracts with Lava itself acting as the oracle, and the app has always been closed-source. So really, users never had true visibility into what was happening with their funds. When you’re using closed-source crypto software, you’re basically trusting the developers completely. You have no way of knowing if they have backdoor access to your private keys.
Why Open Source Matters
This is exactly why the Bitcoin community insists on open source software for anything handling people’s money. With open source, anyone can audit the code and verify that the wallet actually does what it claims. There’s no hiding sneaky updates or questionable practices. Bitcoin Core goes even further with reproducible builds and making users manually opt into updates.
Think about it: if you can’t see the code, how do you know you’re actually in control of your assets? You’re taking the developer’s word for it, which defeats the entire purpose of cryptocurrency. We’re supposed to be building systems that don’t require trust, not recreating the same shady practices from traditional finance.
Broader Implications
So where does this leave Lava users? Basically stuck between a rock and a hard place. They either accept the custodial model and hope Lava doesn’t get hacked or run off with their funds, or they try to extract their assets and find another solution. Neither option is great when you were promised something completely different.
This situation should serve as a warning to anyone using crypto services. Always check whether the software is open source. Be skeptical of mandatory updates that don’t clearly explain what’s changing. And maybe think twice before trusting companies that talk about decentralization while operating closed-source systems. The whole point of this technology is to remove middlemen, not create new ones with better marketing.
