it's locked up in a smart contract, script yada-yada technobabble.
To secure a Firefish loan, Bitcoin collateral is locked through a 3-of-3 multi-signature contract which ensures safety and prevents anyone from accessing it.
The collateral only moves when a set of predefined criteria, such as repayment of a loan, are met.
The escrow address on which the collateral is stored is generated by the Borrower themselves.