How does institutional cryptocurrency custody actually work?

Question

AcadiFi · Accepted Answer

Institutional crypto custody is fundamentally different from retail wallets. Custodians combine cryptographic key management, operational segregation, insurance, and regulatory oversight to meet fiduciary standards. Key management architectures: cold storage keeps private keys offline in air-gapped hardware security modules, physically isolated from any network. Multi-signature wallets require multiple keyholders to sign transactions, preventing any single party from moving assets. Threshold signature schemes distribute a single private key across multiple parties such that no one holder has the complete key, protecting against both theft and coercion. Operational controls: segregation of client assets from custodian proprietary assets (critical lesson from FTX), documented withdrawal procedures requiring multiple approvals, transaction-policy engines that whitelist destination addresses and enforce daily limits, and 24/7 monitoring with deviation alerts. Regulatory structure: qualified custodians hold state trust charters (New York, South Dakota, Wyoming) or federal OCC trust charters. Being a 'qualified custodian' under SEC rules allows registered investment advisers to hold client crypto legally. Custodians undergo SOC 1 and SOC 2 audits annually. Insurance: custodians carry crime insurance covering loss from theft, internal fraud, and key compromise, typically $300M-$1B in aggregate limits. This is not deposit insurance; it is commercial crime policy with specific exclusions. ```mermaid flowchart TD A[Client
deposits] --> B[Cold
storage] B --> C[Multi-sig
or MPC] C --> D[Withdrawal
request] D --> E[Policy
engine] E --> F[Signatures
collected] F --> G[On-chain
transfer] ``` Imagine Brigitta Vonheim evaluating custodians for a $80M crypto allocation. She selects a qualified custodian with trust charter, reviews SOC 2 Type II reports, confirms segregation of client assets, verifies insurance, and negotiates specific SLAs on withdrawal timing and policy customization. Risks: custodian bankruptcy (FTX showed that commingled assets can be lost even in 'custody'), smart contract risk for custodied DeFi positions, key ceremony failures, and regulatory changes that alter custody requirements.

How does institutional cryptocurrency custody actually work?

Master Level II with our CFA Course

Related Questions

Practice Questions