Crypto Custody Hub

Crypto custody is the system for holding, accessing, transferring, and reporting digital assets, and it sits at the center of crypto wealth because whoever controls transfer authority shapes security, tax records, estate access, and fiduciary oversight. This hub maps the custody questions high-net-worth investors, family offices, and advisers face, from qualified custody to signer succession. It is educational, not advice.

What Crypto Custody Means

Custody describes who holds the private keys to a digital asset and who can authorize a transfer. The model you choose determines whether a regulated third party safeguards the keys, whether you hold them yourself, and how transfer approvals, records, and recovery work. The core distinction most decisions turn on is qualified custody versus self-custody: a qualified crypto custodian is generally a regulated entity (such as a trust company or chartered bank) that holds client assets under standards tied to the SEC custody rule, while self-custody keeps key control with the owner. No custody model removes market, operational, or counterparty risk; each shifts where the risk sits.

Core Questions

What is a qualified crypto custodian, and when is one required?
How does qualified custody differ from self-custody?
How should a family office or adviser choose and vet a custodian?
What is MPC or multi-signature custody, and how do they differ?
How should transfers be approved and recorded?
What happens if a custodian fails?

Choosing and Vetting a Custodian

Selecting a custodian is an evaluation, not a single yes/no. The pages below walk through the process and the diligence record an investor or fiduciary should keep.

Start with how to choose a crypto custodian to frame the decision around ownership, regulatory status, and operational fit.
Work through the crypto custody due-diligence checklist to document items such as the custodian's regulatory registration, SOC 1 and SOC 2 reports, insurance scope, proof-of-reserves practices, and incident-response procedures.
When a custodian hands you its attestation, know how to read a SOC 2 Type II report so you can judge the scope, opinion, exceptions, and complementary user-entity controls rather than taking a clean cover page at face value.

When you compare providers, hold each to the same evidence standard. Registration or a charter alone does not guarantee skill, performance, or that assets are risk-free, and any claim that one custodian is safer than another should rest on documented, verifiable criteria rather than reputation.

Custody Models and Key Control

How keys are split and stored is a distinct decision from who the custodian is.

MPC versus multi-sig custody compares two approaches to distributing signing authority so no single point of failure controls a transfer.
Cold storage, hardware controls, and multi-party approval each change how transfers are authorized and how recovery works if a signer is lost.
Staking introduces a second key-control question, since staking custody and validator keys separate the signing key that runs a validator from the withdrawal key that controls the assets, which matters most for large stakers.

Custody for Trusts, Entities, and Organizations

When a trust, LLC, group, or nonprofit owns the assets, custody and legal title interact, and signing authority has to match the entity's governance.

Crypto custody for trusts covers how a custodian holds assets titled to a trust.
Private key succession planning addresses who can access keys if a signer or grantor dies or is incapacitated, which is often where estate access actually breaks down.
For shared treasuries, crypto custody for DAOs and multi-member LLCs covers how multi-sig thresholds and voting quorums map onto the entity that holds title so no single member controls transfers.
Nonprofits face their own duties, and crypto custody for charities and foundations covers 501(c)(3) governance, gift acceptance, signer controls, and Form 990 reporting for donated digital assets.

Custody Decision Tree

Ask, in order:

Who legally owns the asset, an individual, a trust, or an LLC?
Is an RIA advising on it, which may trigger the SEC custody rule and a qualified-custodian requirement?
Is direct asset control needed, or is a regulated third party acceptable?
Are trusts or LLCs involved, changing legal title and signer authority?
Who can approve transfers, and under what multi-party policy?
How are records exported for tax reporting (cost basis, transfers, and Form 1099-DA reconciliation)? See tax reporting from crypto custodians for what statements custodians actually provide and what still needs reconciling.

When a Custodian Fails

Custody risk does not disappear with a regulated provider. What happens if a crypto custodian fails explains why digital assets are generally not covered by FDIC or SIPC insurance, how a custodian's legal structure can affect recovery, and why diligence on insurance and segregation matters before assets are placed. The structural side of that question is bankruptcy-remote custody, a post-FTX concept covering when (and only when) client assets fall outside a failed custodian's bankruptcy estate. The insurance side has its own mechanics: the crypto custody insurance claims process walks through what happens when a crime or specie policy is triggered, and why limits and exclusions mean coverage is not a guarantee of full recovery. A related trap is confusing safekeeping with financing: a comparison of a crypto prime broker vs custodian explains how a prime broker that provides execution, margin, and lending may hold the right to reuse or pledge client assets, which introduces counterparty risk that segregated custody is designed to avoid.

Sources

Compliance Note

This hub is educational and does not provide legal, tax, investment, fiduciary, compliance, or custody advice. Custody decisions should be reviewed with qualified professionals. Registration does not imply a certain level of skill or training.