I think they use coinbase. But if the same thing happens at coinbase then it could turn into a mess. Not sure any of these companies have the assets or insurance to cover the losses. Does SPIC cover it? I don't know. Safer than owning it individually I guess but still risks.