Qualified custody: what a digital asset custodian actually does

A custodian holds an asset on behalf of someone else and moves it only on instruction. For digital assets that means one specific thing: the custodian controls the signing keys, and everything else it does is arranged around keeping those keys secret, available and usable only under an approved instruction. Qualified custody adds a legal layer on top of the technical one, defining who is permitted to hold client assets and under what supervision.

What makes a custodian qualified

The phrase qualified custodian comes from investment adviser regulation rather than from the digital asset industry. In the United States the category covers banks and savings associations, registered broker-dealers, futures commission merchants and certain foreign financial institutions, and the surrounding rule requires client assets to be segregated from the custodian's own, held in accounts identified as client accounts, and verified by independent examination. State trust charters are a common route for firms whose main business is digital asset custody.

The point of the requirement is not security in the technical sense. It is the legal position of the client if the custodian fails. Assets held in a properly constituted custodial or trust arrangement are the client's property, not the custodian's, and are intended to sit outside the estate if the firm enters insolvency proceedings. That is what separates custody from a deposit relationship, where the client is an unsecured creditor. The distinction is the substance of most of the 2022 failures: customers of firms whose terms transferred title, or whose operations mixed customer assets with the firm's own, discovered that their position was a bankruptcy claim rather than a property right. Commingling and rehypothecation are the two mechanisms by which that transformation happens, and prohibiting both is the core of what a custody regime buys.

The machinery behind the keys

Underneath the legal wrapper sits an engineering problem: a key must be impossible for any single person to steal and impossible for the organization to lose. The standard answers combine several techniques.

• Key generation under ceremony. Keys are created inside hardware security modules in an audited, filmed procedure with multiple independent participants, so no individual ever observes complete key material.
• Splitting control. Either a multisignature scheme, where several distinct keys must sign a transaction, or an MPC wallet, where a single key is never assembled and signature shares are computed jointly. The security goals are similar; the on-chain footprint and the recovery procedures differ.
• Tiering by temperature. The great majority of assets sit in cold storage, physically disconnected and geographically distributed, with a small operational float in a hot wallet for same-day movements.
• A policy engine. Withdrawals are constrained by allowlisted destinations, value thresholds, time delays, and quorum approval by named individuals under dual control, with the policy itself under change control.
• Screening at the edge. Outbound and inbound transfers pass sanctions screening and the record-keeping obligations of the travel rule.
• Disaster recovery. Sharded backups in separate jurisdictions, with a tested procedure for reconstituting signing capability if a site, a vendor or a group of staff becomes unavailable.

Assurance over all of this is normally evidenced by service organization control reports, which describe the design of the controls and, in the more useful variety, test their operation over a period. An insurance policy is often cited alongside them; the limit is typically a small fraction of assets under custody, is usually scoped to specific crime perils such as theft from cold storage or dishonesty by employees, and rarely covers a client instructing a transfer after being deceived.

Three arrangements compared

What custody does not solve

Qualified custody removes some risks and renames others. It does not remove custody risk, it concentrates it in a supervised firm and makes it legible. Insider collusion above the approval quorum remains possible. Operational error at the moment of instruction, such as an approved but wrong destination, is not reversible on a blockchain. Concentration is a live issue at market level: a small number of custodians hold the assets behind many competing listed products, so an outage at one firm can affect creations and redemptions across products that look independent from the outside.

Proof of reserves is often offered as the answer and is only half of one. A reserve attestation demonstrates control of addresses holding a stated balance at a point in time. It says nothing about liabilities, nothing about whether the same assets were borrowed for the occasion, and nothing about the days between attestations. A reserve attestation that also constructs the liability side, typically through a cryptographic commitment to customer balances, is a stronger claim, and a full audited financial statement is stronger still.

Holdings inside listed products, which are the largest single block of custodied supply on some networks, can be followed through ETP coins held and ETP share of supply, and corporate balance sheet holdings through treasury holdings. The risk pages collect custody-related failure modes, and incidents records what has actually gone wrong. The next page turns to the companies that hold digital assets on their own balance sheets.