Crypto Custody Explained: What a Custodian Actually Holds

Crypto custody sounds like a storage service and it is closer to a legal arrangement. The technical part, keeping keys safe, is the easier half. The part that determines what happens to your assets when something goes wrong is the legal structure underneath. The version of this that operates in production is a licensed digital asset custodian, and their documentation fills most of the gaps below.

What a custodian actually holds

Not your coins in a box. A custodian controls private keys that authorise movement of assets recorded on a blockchain. Your claim is a contractual and regulatory one against the custodian, backed by the assets it controls on your behalf.

This distinction becomes concrete at exactly one moment: insolvency. If the assets are segregated client assets under a regulatory framework, they are not available to the custodian’s creditors and are returned to clients. If they are not, you are an unsecured creditor of a failed business.

Every other question about custody is secondary to that one.

Segregation, and how to verify it

Segregation means client assets are held separately from the custodian’s own assets and identifiably on behalf of each client. There are two implementations.

Individually segregated. Each client’s assets in wallets attributable to that client. Cleanest, most expensive, usually reserved for large clients.

Omnibus segregated. Client assets pooled together but separated from the custodian’s own, with internal records attributing holdings to each client. Standard for most clients. The pooling is fine provided the record-keeping is sound and independently verified.

What is not acceptable is commingling with the custodian’s own assets. That is the arrangement that turned several failures into total losses.

To verify: ask which model applies to your account, ask how segregation is evidenced, and ask who audits it and how often. A custodian operating properly answers all three immediately and can show you the auditor’s report.

How key material is actually managed

Three approaches dominate.

Hardware security modules. Certified tamper-resistant hardware holding keys, with signing operations performed inside the device. Mature technology borrowed from traditional finance.

Multi-party computation. The key is never assembled. Shares held in separate environments jointly produce a signature. No single point holds a complete key, which removes a whole category of extraction attack.

Multi-signature. Several independent keys, a threshold required to sign. Enforced by the blockchain rather than by the custodian’s software, which makes it verifiable from outside.

All three are defensible. What matters more than the choice is the operational controls around it: who can initiate, what approvals are required, how the disaster recovery works, and whether it has been tested. The institutional version of the same problem runs through a provider serving funds and family offices, with an extra reporting layer on top.

Insurance: read the actual policy

Custody insurance is heavily marketed and frequently misunderstood.

Most policies cover theft from cold storage and dishonesty by employees. Most exclude losses from protocol failures, from the client’s own credentials being compromised, and from market movement.

The limit is aggregate, not per client. A hundred million dollar policy across a custodian holding two billion covers five percent of assets. That is not a criticism, it is arithmetic, and it means insurance is a backstop rather than a guarantee.

Ask for the limit, the exclusions and whether the cover is per incident or aggregate annually.

The questions that separate custodians

Which regulator authorises you and under what permission. Are client assets segregated, in which model, and audited by whom. What is the insurance limit and what is excluded. What is the withdrawal process and the time to first withdrawal. What happens to my assets if you enter insolvency, and what is the legal basis for that answer.

A licensed crypto custody provider will have documented answers to all five because regulators require them to. A provider that treats these as unusual questions is telling you something.

Who this is actually for

Custody is not a replacement for a wallet. It is appropriate when the amount justifies an annual fee, when a regulatory obligation requires a qualified custodian, when client money rules apply, or when the company cannot staff a disciplined self-custody operation.

Below those thresholds, a well-run corporate wallet with proper controls is the more proportionate answer.