What is custody?

Custody in crypto is the question of who controls the private keys to a set of assets. The person or contract that controls the keys controls the assets, full stop. Understanding who has the keys in any given arrangement is the single most useful thing a user can know about a position.

The spectrum

On one end, self-custody. The user holds the private key, usually through a hardware or software wallet. No intermediary can freeze, move, or seize the funds. The user is responsible for key management, backups, and operational security. This is the purest form of crypto ownership and also the least forgiving.

On the other end, full custody. A regulated third party — Coinbase Custody, Fidelity Digital Assets, BitGo, Anchorage — holds the keys on behalf of the user. The user has a claim against the custodian but no direct access to the blockchain. If the custodian fails, the claim becomes a bankruptcy claim. If the user loses their login, the custodian can reset it. If a court orders the funds frozen, they freeze.

In between: multisig arrangements, smart-contract wallets (Safe, Argent), MPC wallets (Fireblocks, Copper, Coinbase Smart Wallet), social recovery setups. Each trades off control and convenience differently.

Custodial exchanges

When someone buys Bitcoin on Coinbase and leaves it there, the custody arrangement is equivalent to a brokerage account. The user has an entry in Coinbase's internal database crediting them with so-many coins. The actual coins sit in a pool of wallets that Coinbase controls.

This is convenient. Coinbase handles backups, insurance, fiat transfers, and tax reporting. It is also risky in a way that is specific to crypto. An exchange holding user assets is a concentrated target for hackers, regulators, and sometimes its own management. Mt. Gox, QuadrigaCX, FTX, Celsius, BlockFi, and Voyager all failed with customer funds on their books. Users became unsecured creditors.

Reputable exchanges today publish proof-of-reserves to demonstrate that their holdings cover their liabilities. This is better than nothing but is not audited continuously, and it does not address the lending and leverage risks that brought FTX down. "Not your keys, not your coins" is less of a slogan and more of a liability disclosure.

Self-custody

Self-custody puts the user in direct control. A hardware wallet like a Ledger or Trezor keeps the key on a dedicated device; a software wallet like Rabby or MetaMask keeps it in an app; a paper wallet keeps it on a printed slip. In all cases, the user is the sole signer.

The upside is unambiguous: no counterparty can fail or freeze you. The downside is also unambiguous: no one will help you if you mess up. Lost seed phrases are lost forever. Signed malicious transactions are final. Typed a wrong address? The funds are gone. See the wallet, seed-phrase, and rug-pull explainers for how these failures look in practice.

Operational security for self-custody is not trivial. Inheritance planning, in particular, is a problem most users do not think about until it is too late. A user who dies without leaving a recoverable plan for their heirs has effectively burned the assets.

Multisig and smart wallets

Multisig (see the multisig explainer) splits custody across multiple keys. A 2-of-3 multisig requires any two of three signers to authorize a transaction. This eliminates the single-point-of-failure problem of one seed phrase while keeping the asset under user control. Safe has become the standard tool for DAOs, corporate treasuries, and serious individuals.

Smart-contract wallets (Argent, Braavos, emerging account-abstraction wallets — see the account-abstraction explainer) take this further. The wallet's rules are programmable: daily spending limits, whitelisted addresses, multi-party approvals for large withdrawals, social recovery through trusted contacts. This is what the next generation of consumer wallets looks like — somewhere between a personal bank and a personal treasury.

Institutional custody

Institutional-grade custodians operate under financial regulation. They insure assets, undergo audits, support segregated accounts, and provide legal frameworks that asset managers need. For a hedge fund or an ETF issuer, self-custody is usually not a realistic option. Regulators require qualified custodians, and operational discipline requires third parties with clear liability structures.

This is the part of the stack that has grown fastest with the spot ETFs. BlackRock's IBIT and the other Bitcoin ETFs custody through Coinbase Custody. Fidelity's FBTC uses Fidelity's own custodian. The mechanics look a lot like traditional asset custody, with some crypto-specific wrinkles around cold storage and on-chain auditing.

Why it matters

Custody is the variable that determines what kind of risk a position carries. The same 1 BTC is a very different asset held on Coinbase than it is on a Ledger in a safe. One is exposed to exchange failure, regulatory seizure, and hacking. The other is exposed to lost keys, user error, and physical threat. Neither is universally safer. The right choice depends on what the user is optimizing for — convenience, recourse, privacy, autonomy — and how much of the asset is at stake. Sophisticated users rarely pick one; they use different custody arrangements for different tranches of their holdings, matching the tool to the size and purpose of the position.