Custodian

Custodians bridge traditional finance and crypto by taking on the operational and security burden of storing digital assets, so institutions do not have to build and defend their own private key infrastructure. A custodian's core job is safekeeping: generating and storing keys, executing withdrawals under strict authorization controls, and proving through independent audits that client assets are fully backed and kept segregated from its own balance sheet.

Most regulated custodians combine cold storage, keys generated and kept offline on air-gapped hardware, with multi-signature or multi-party computation schemes that require several separate approvals before any transaction can move. This limits the damage a single stolen key or a rogue employee can do. Reputable custodians also carry theft insurance, maintain SOC 1 or SOC 2 audit reports, and run Know Your Customer (KYC) checks on clients as part of anti-money-laundering compliance.

In the United States, custodians typically operate under a state trust charter, such as New York's NYDFS limited-purpose trust charter, or a federal charter from the Office of the Comptroller of the Currency, which lets them qualify as "qualified custodians" for investment advisers under SEC rules. Anchorage Digital, Coinbase Custody, BitGo, and Fidelity Digital Assets are among the largest, together holding hundreds of billions of dollars in institutional Bitcoin and Ethereum. In the European Union, the MiCA framework requires crypto-asset custody service providers to meet licensing, capital, and asset-segregation standards.

Custody is not risk-free: clients still depend on the custodian's solvency and internal controls, as collapses like FTX showed when customer assets were commingled rather than genuinely segregated. That counterparty risk is the main reason some investors choose non-custodial setups instead, accepting full responsibility for their own keys in exchange for removing a third party from the equation.