What does institutional qualified custody actually add?
Educational content, not legal advice. "Qualified," "regulated" and "licensed" custody are defined differently in every jurisdiction, and the protections attached to each label differ with them. What follows describes the controls generically; what applies to you is set by local law.
An institution cannot keep a hardware wallet in a drawer. It needs an answer to a question a private holder can leave vague: if the custodian fails, whose asset is it? Everything institutional custody adds is downstream of that question.
The control stack
Segregation. Are client assets held apart from the custodian's own — ideally at the level of individual on-chain addresses, so a client can point to its holdings — or pooled in an omnibus wallet where the separation exists only in the custodian's books? Both are used; they fail very differently.
Legal characterisation. The decisive one. Is the asset held in trust or as bailment, so it remains client property and sits outside the custodian's estate in insolvency? Or is it a general obligation, making the client an unsecured creditor? This is set by the contract and by local insolvency law, and it is the sentence to find before any other.
How much that sentence matters was demonstrated in the Celsius Network bankruptcy: in January 2023 the US bankruptcy court held that assets in the platform's Earn accounts — roughly $4.2bn across some 600,000 accounts — had become property of the bankruptcy estate under the terms of use customers had accepted. Assets held under the platform's Custody programme were treated differently. Same platform, same app, same screen showing a balance; different contracts, different outcomes.
Key generation and signing. Hardware security modules, key material split across locations, dual control, quorum approval, documented and witnessed key ceremonies. The design target is that no single employee, and no single site, can move client assets.
Wallet tiering. Cold storage for the bulk, a warm tier for scheduled movements, a hot wallet for the operational float. The hot wallet is normally the only thing meaningfully exposed, so its size is a policy decision, and a disclosed one at good custodians.
Independent assurance. SOC 1 and SOC 2 Type II reports examine whether controls were designed appropriately and operated effectively over a period. Penetration tests examine defences. Note carefully what these do not do: a SOC 2 report is an opinion on controls, not a statement that reserves cover liabilities. Those are different questions, and Unit 2 takes the second one apart.
Withdrawal controls. Address allowlists, time delays on new destinations, multi-party approval, screening obligations. These exist because the most likely path to a loss is an authorised-looking instruction, not a broken cipher.
Read the insurance properly
Insurance is the most-quoted and least-understood line in any custody pitch. Take a custodian with $8bn under custody and a $500m crime policy. The coverage ratio is 6.25%.
That is not a scandal — it is what the product is. Crime policies cover specified perils, typically theft from cold storage and employee dishonesty, up to per-event and aggregate limits, with exclusions. They are designed for an isolated incident, not for the simultaneous failure of a firm and its controls. Anyone reading "insured custody" as "my assets are guaranteed" has read a marketing phrase rather than a policy.
Try it now
- For any custodian whose documentation you can read, find the sentence that states whether client assets are held in trust for clients or as a liability of the company. Copy the exact wording — the difference between "held for" and "owed to" is the whole question.
- Find the stated insurance limit and the assets-under-custody figure, and compute the coverage ratio. Then find which perils are covered and which are excluded.
- Ask what evidence of your specific holdings exists: a dedicated on-chain address, a segregated wallet identifier, or only a statement produced by the custodian.