by Jake ClaverQuick answer: Digital asset custody is how crypto is held and secured on an owner’s behalf. A qualified custodian holds client assets segregated from its own balance sheet, keeps most holdings in offline cold storage, and controls transaction authorization through multi-signature or multi-party computation key management. That risk profile is very different from leaving coins on an exchange or on a single private key, which is why custody deserves the same scrutiny as the investment decision itself.
Updated 07/17/2026. By Jake Claver. Educational content, not investment advice.
Most conversations about digital assets focus on what to buy. Far fewer focus on where the assets actually sit afterward, and who can move them. That second question is custody, and for any meaningful allocation it carries as much risk as the asset itself.
The last few years supplied hard lessons. When a trading venue fails, assets sitting in its commingled wallets can be pulled into the bankruptcy estate and frozen alongside everyone else’s. Assets held by a genuine custodian, segregated and recorded as client property, generally are not. Understanding that distinction is the point of this article.
What a qualified custodian actually is
A qualified custodian is a regulated institution, typically a bank, trust company, or registered broker-dealer subject to examination by a federal or state regulator, that holds assets on behalf of clients under defined legal duties. The core features are segregation of client assets from the firm’s own balance sheet, regular audits, recordkeeping that identifies each client’s property, and in many cases insurance against certain losses. When something fails, that segregation is what keeps client assets from being treated as the failed firm’s own property.
In U.S. banking, the boundaries of who may provide these services have been getting clearer. The Office of the Comptroller of the Currency (OCC), which charters and supervises national banks, has confirmed through a series of interpretive letters that national banks and federal savings associations may provide crypto-asset custody. Its May 2025 News Release 2025-42 and the accompanying Interpretive Letter 1184 clarify that banks may buy and sell custodied assets at a customer’s direction and may outsource permitted crypto activities to third parties, provided the activity is conducted in a safe and sound manner and in compliance with applicable law. The broader OCC framework treats custody as a bank-permissible activity subject to the same risk-management expectations as any other.
Custodian, exchange wallet, and self-custody are three different things
These terms get used loosely, but the risk they carry is not the same.
- Exchange wallet. Convenient for trading, but the assets often sit in commingled accounts controlled by the exchange. If the venue fails or freezes withdrawals, recovery depends on how a court treats those balances.
- Self-custody. The owner holds the private key directly, with full control and full responsibility. A lost seed phrase, a phishing attack, or a failed drive can mean permanent loss with no recourse.
- Qualified custody. A regulated third party holds the keys under audited controls, with client assets segregated and, ideally, insured. The owner gives up some direct control in exchange for institutional-grade protection.
None of these is universally right. The correct choice depends on the size of the holding, who is legally responsible for it, and how much operational risk the owner can absorb.
How institutional custody secures the keys
Security at the custodial level is a process, not a product. Institutional custodians generally keep the large majority of assets in cold storage, meaning the signing keys are held offline and out of reach of remote attackers, with only small operating balances in connected systems.
The two dominant key-management models
- Multi-signature (multisig). A transaction requires several independent keys to sign, for example two of three or three of five. The requirement is enforced by the blockchain itself, so no single key can move funds alone.
- Multi-party computation (MPC). The signing key is never assembled in one place. Instead, distributed shares jointly produce a signature, so no single party or device ever holds the complete key.
Both approaches remove the single point of failure that makes one private key on one laptop so fragile. Paired with strict internal controls over who can authorize a transaction, they change the security posture from “protect one secret perfectly” to “an attacker must defeat several independent controls at once.”
Custody is also a compliance and fiduciary question
For advisers, trustees, and other fiduciaries, custody is not only a security preference. When digital assets sit inside a trust, a retirement account, or a professionally managed portfolio, the person responsible often has a legal duty to use appropriate custody arrangements and to document them. Regulators increasingly expect a demonstrable custody chain rather than a private key stored on an individual’s device. The Commodity Futures Trading Commission’s digital assets resource hub underscores the backdrop: much of the market remains lightly regulated and fraud is a real risk, which raises the bar on how carefully custody is chosen and evidenced.
The tradeoff to go in understanding
Custodial arrangements mean less direct, moment-to-moment control than self-custody. For an owner who values absolute autonomy above all else, that is a real cost. For most holders of meaningful value, the tradeoff favors custody, but it should be a deliberate decision made after reviewing fees, the scope and limits of any insurance, the custodian’s audit history, and its track record. Cost, control, and protection pull against each other, and the right balance is specific to the holder.
Why this matters
The technology story and the ownership story are separate. An asset can perform well and still be lost if it is held carelessly, and a well-chosen custody arrangement protects value that took real work to build. Treating custody as an afterthought is how sophisticated owners still end up exposed to exchange failures, key loss, and rehypothecation they never agreed to. Deciding custody with the same care as the investment removes an entire category of avoidable risk.
Common questions
What is a qualified custodian for digital assets?
A qualified custodian is a regulated institution, such as a bank, trust company, or registered broker-dealer, that holds client assets under legal duties including segregation from its own balance sheet, audits, and recordkeeping that identifies each client’s property. That structure is designed to keep client assets protected if the custodian itself fails.
How is custody different from holding crypto on an exchange?
On many exchanges, assets sit in commingled accounts the exchange controls, so if the venue fails or freezes withdrawals, recovery depends on how a court treats those balances. A qualified custodian segregates and records client assets separately, which generally keeps them out of the failed firm’s bankruptcy estate.
What is the difference between multisig and MPC custody?
Multisig requires several independent keys to sign a transaction, with the rule enforced by the blockchain. MPC never assembles a full key in one place, using distributed shares to jointly produce a signature. Both remove the single point of failure that makes one private key fragile.
Do U.S. banks have authority to custody crypto assets?
Yes. The OCC has confirmed through interpretive letters, including Interpretive Letter 1184 in May 2025, that national banks and federal savings associations may provide crypto-asset custody and related services, provided they do so in a safe and sound manner and in compliance with applicable law.
Is custody worth giving up direct control of my keys?
It depends on the size of the holding and who is responsible for it. Custody trades some direct control for institutional-grade protection, audits, and potential insurance. For most holders of meaningful value the tradeoff favors custody, but it should follow a review of fees, insurance limits, and the custodian’s track record.
This content is educational only. It is not tax, legal, or investment advice. Check primary sources and speak with a qualified professional before making financial decisions.
