Bearer bonds and crypto wallets run on the same basic rule. Whoever holds the secret controls the asset. Nobody in the system can issue a fresh copy if that secret disappears. Once you see this link, the permanence of seed phrase loss looks less like a new flaw and more like an inherited property of an older design. The older design also shows how people handled loss before software existed.

Possession was the whole claim

A bearer bond did not carry an owner’s name. Payment followed the paper, not a registered account, and whoever physically held the bond was treated as its owner.

Transfers were simple for the same reason. A handover completed the deal, with no clerk or transfer agent needed.

Interest worked through a separate mechanism. Interest arrived through detachable slips that holders tore off on the due date. The finance term “coupon” comes from this format. Bonds were historically issued as bearer certificates, which is where the word originates.

The part most people miss: who could reissue?

A bearer bond had no record behind it. If the paper vanished, the holder could not prove a claim, and the issuer had nothing to check a claim against. The issuer had no way of knowing who the rightful owner was, so it could not reissue a lost bond.

Registered paper followed a different path. The owner could report the loss, and the issuer could cancel the lost certificate and issue a new one after verifying identity and ownership. The fallback was the issuer’s books. Without a books-based record, there was no fallback.

This is the point the comparison turns on. Bearer systems did not solve loss inside the paper. They solved it outside the paper, in a ledger held by someone else.

How older markets handled loss

Securities markets built procedures around that gap. A transfer agent will not reissue a lost or stolen security without a lost instrument bond. The reason is practical. A replacement could end up in the wrong hands and be sold a second time. The bond covers that risk. It does not bring back the original paper. It does not guarantee the holder will recover the lost certificate itself.

Bond issuers used similar tools. U.S. Bank describes a bond of indemnity process for lost or stolen bonds and coupons. Those fees scale with the size of the position. The process requires specific documents, a surety fee, and a processing fee based on the face amount.

State law reflects the same logic. North Carolina allows a lost municipal bond to be reissued after proof of ownership, proof of loss, a surety bond at twice the face amount, and payment of the cost. A 2006 version of Minnesota’s uniform commercial code shows a similar structure for certificated securities. The issuer must issue a new certificate if the owner asks before notice that the original was acquired by someone else and files a sufficient indemnity bond.

Every one of these fixes depends on an issuer that knows who the owner is. That dependency matters for the crypto comparison.

Where the 1982 rules fit

The bearer system ended in the United States over a period of years, not in one moment. Congress passed the Tax Equity and Fiscal Responsibility Act of 1982, which barred tax-exempt issuers such as states and local governments from issuing bearer bonds. For corporate bonds, the law removed the interest deduction on new bearer issues. For municipal bonds, it removed the tax exemption on bearer interest, while registered bonds kept that treatment.

Federal rules later tightened the point. After 1982, the government stopped the original issuance of bearer certificates. The Treasury also dropped the option to convert registered securities into bearer form. The Treasury’s change was not mandated by TEFRA, but it followed the same policy direction. The Supreme Court took up the law as well. The 1988 decision in South Carolina v. Baker upheld the law and effectively ended the further issue of US municipal bearer bonds.

The main reasons were tax evasion and the difficulty of tracing owners. Those were policy goals, not technical limits. Crypto reached the same structure by a different route. Bitcoin’s design never included an issuer ledger of owners in the first place.

Crypto removed the issuer’s ledger

A seed phrase behaves like bearer paper in one key respect. The words are the claim. A seed phrase is a sequence of words from which all private keys and addresses in a wallet are deterministically derived. Anyone who holds the words can rebuild the wallet, and anyone who lacks them cannot.

No outside party holds a backup either. Ledger states that it has no copy of the phrase a user generates. Unlike an email password or a banking login, a seed phrase cannot be recovered through customer support. That is the bearer rule in software form. The support desk plays the role the issuer’s books once played, and it has nothing to check against.

The consequence follows directly. If the seed is gone, the keys go with it, and the funds at those addresses stay locked. A lost bearer bond was gone too. The chain does not replace a lost phrase any more than a bond issuer could replace a bond it never recorded.

Other ways to lose access

The phrase is not the only secret. A passphrase adds a second layer. Coldcard’s documentation says a lost or mistyped passphrase cannot be recovered. Trezor’s documentation says passphrases cannot be changed, removed, or recovered.

Software compatibility also matters. Being BIP-39 compatible is not enough on its own. The wallet must also support the original network, derivation paths, account types, and any passphrase used.

Physical media fail too. A paper note can be lost or damaged, and then recovery becomes impossible. One well-known case shows the scale of the risk. In 2021, programmer Stefan Thomas said he had lost the password to a hard drive holding 7,002 BTC.

How big is the lost pile?

Nobody can measure lost bitcoin directly. The blockchain does not label a wallet as lost, so every figure is an estimate. Analysts usually work backward from inactivity. The inactivity data includes both patient long-term holders and permanently lost coins, and the data cannot separate them. The published range is wide. Analysts have put the figure between 2.3 million and 5.6 million BTC.

One large block drives much of the estimate. Roughly 1.1 million coins tied to Satoshi Nakamoto have never moved. Whether those coins count as lost is itself uncertain. Satoshi’s holdings are debated because they may not be permanently inaccessible.

The loss also has a debate attached. Some writers treat it as a scarcity feature. Lost bitcoin reduces effective circulating supply, which can make the remaining coins scarcer. Others point out that a smaller effective supply does not by itself guarantee price appreciation. A bearer bond holder who lost paper would not describe that loss as a market feature. For the person who lost access, the outcome is the same either way.

Planning custody around the bearer history

The bearer era offers a practical lesson. Loss was rare when holders kept paper safe and kept records elsewhere. Losses rose where nothing backed the paper. Apply that logic to a seed phrase:

1. Treat the words as the asset. Anyone who sees the phrase can take the funds, and nobody can restore it for you if it disappears.
2. Keep more than one offline copy in separate places. One guide recommends storing the seed offline in two locations.
3. Record passphrases separately. Keep any passphrase on a physical record apart from the word sheet, so one fire or misplaced paper does not end access.
4. Test a restore before you depend on it. Restore a small balance into a second compatible wallet, and confirm the same addresses appear.
5. Write down the network and derivation details. The phrase alone does not tell a future wallet which chains to scan.
6. Plan for heirs. Estimates of lost coins include cases where holders died without leaving heirs accessible recovery information.
7. Consider the thief. Bearer paper had a theft problem as well. A thief who held a stolen bearer certificate might be able to claim payment. Digital secrets carry a similar risk if someone reads or copies them.

Where the analogy breaks

The comparison is useful, but it has limits. A bearer bond was a claim against a government or company. The holder could eventually redeem it from a counterparty. A bitcoin balance has no such counterparty. Nobody owes the holder payment if the key is gone.

The bearer history also shows what a recovery path needs. Replacement systems required some record of ownership held outside the paper. Any design that restores access after loss needs a copy of the secret or a trusted party. Each option moves some risk to a different place. That trade-off is the real design question, and it is not solved by the bearer model alone.

The short version: a seed phrase is a bearer instrument with no issuer ledger behind it. If you hold one, the custody plan is your only replacement system.

Sources

• Federal Register: Bearer securities rule (1999)
• Bearer bond (Wikipedia)
• Coupon (finance) (Wikipedia)
• North Carolina G.S. 159-137: Lost, stolen, defaced, or destroyed bonds
• Minnesota Statutes 336.8-405 (2006 version)
• U.S. Bank Bondholder Information
• COLDCARD Documentation: BIP-39 Passphrase
• How Many Bitcoins Are Lost Forever? (CoinCentral)
• How Much Bitcoin Is Lost Forever? (Paybis)