Counterparty risk means depending on a contractual partner to perform an agreed obligation. You may be waiting for bitcoin after a purchase, its return from custody, or a payment under another contract. The amount exposed, the likelihood of default and the eventual loss are different things.
Peter bought BTC and the provider sent it to his wallet as agreed. A later price fall is market risk. If the provider failed to deliver the promised bitcoin, the problem would be the other party’s performance. An operational delay alone, however, does not prove insolvency. Basel CRE50 uses the narrower banking term counterparty credit risk, or CCR: default before a transaction’s final settlement, where either party can be exposed depending on its current value. This definition does not automatically cover every risk of a bitcoin service. [1]
An app’s logo may not name the company that owes Peter money. What matters is the contracting entity, its duties and the law governing the agreement. The Basel Committee on Banking Supervision, BCBS, therefore stresses checking a counterparty both at the start and throughout the relationship. For an ordinary user, the practical question is: who is my contract with, and which service are they responsible for? A good experience buying through one company does not establish that another entity in the same group can repay a loan. [2]
For a more precise example, consider a derivative—a contract whose value depends on an underlying asset. Its notional is 100,000 USD, the amount used to calculate contractual payments, but its current positive value is 5,000 USD. In our model with no collateral, netting or recovery in insolvency, current exposure is 5,000 USD, not automatically the whole notional. Basel CRE50 relates it to the cost of replacing the trade. This is a risk measure, not a loss already incurred. Future price moves may change exposure; this example does not value other deposits or debts. [1]
In another example of our own, Peter has two positions with the same counterparty: +5,000 USD and −3,000 USD. The first is in his favour; the second is his obligation. If an effective, legally enforceable netting agreement covers them, offsetting leaves 2,000 USD. The agreement is essential: without it, this result cannot be assumed. Basel CRE50 links treating transactions together to legally enforceable conditions. Two accounts under similar branding therefore cannot simply be offset; they may belong to different companies or contractual arrangements. [1]
Collateral is property intended to cover an obligation if the debtor fails to perform. To help Peter, it must actually be accessible and, if needed, saleable. Its value may fall just as the debtor runs into trouble. Basel CRE22 also highlights legal, operational and liquidity risks, including difficulty selling when necessary. Subtracting today’s collateral price from a debt on paper does not guarantee the same proceeds on sale or prompt access to the assets. [3]
A service’s large wallet does not reveal how much it owes or who legally owns the assets. In 2023, the Office of the Investor Advocate at the US audit regulator PCAOB explained the limits of Proof of Reserves reports, or PoR. Their scope matters: an asset snapshot may omit liabilities, customers’ rights or whether reserves were merely borrowed. It does not show what happened to them later either. Such a report is not a financial-statement audit or a guarantee that every customer can be paid. The advisory expresses the office’s view; it is not a new PCAOB rule. [4]
Peter may have a trading account, custody and a loan within the same group. Separate screens do not necessarily mean separate risks. BCBS recommends monitoring aggregate exposures and connected entities through several measures and stress scenarios: what happens after a sharp price move, a shortage of available cash or mass withdrawals? Confidence therefore cannot rest solely on a small withdrawal having gone smoothly. It also matters how much depends on the same source and whether that dependency can be reduced in time. [2]
Before depositing assets, it makes sense to understand how a breach is notified, which deadlines apply and what proves your claim. BCBS and Basel connect risk management with the ability to enforce rights, including rights to collateral. Copies of the contract and transfer records help establish what was agreed and performed. Self-custody of BTC changes reliance on a custodian but does not remove key-management risks or risks under other contracts. Losing the keys can prevent access even when no counterparty has failed. [2] [3]
For the clearest picture, read this entry together with Rehypothecation, Collateral, Settlement risk, Proof of reserves. The reverse links also lead from Custodial Exchange, Collaborative Custody, Fedimint, Cashu.