Institutional Crypto Custody: How Serious Investors Actually Hold Digital Assets

The Most Important Question in Crypto

"Not your keys, not your coins" is the oldest principle in Bitcoin culture. It is also one of the most consequential practical decisions any crypto investor makes.

The collapse of FTX in 2022 — where approximately $8 billion in client assets were misappropriated — provided the most dramatic possible demonstration of counterparty risk in crypto custody. Clients who held assets on exchange lost everything in the bankruptcy. Clients who self-custodied or used regulated institutional custodians lost nothing.

Custody is not a secondary consideration. It is the primary risk management decision.

The Custody Spectrum

1. Exchange Custody (Highest Counterparty Risk)

Holding Bitcoin or other crypto on a trading exchange — Binance, Kraken, Coinbase retail — means the exchange holds your private keys. You have a claim on the exchange's assets, not custody of specific coins.

For small amounts used for active trading, this is acceptable. For wealth preservation holdings, it is not appropriate. The risk is not primarily hacking (major exchanges have improved security substantially) but insolvency, regulatory action, and misappropriation.

2. Regulated Institutional Custody (Institutional Grade)

Regulated custodians — Coinbase Custody, BitGo Institutional, Anchorage Digital, Fidelity Digital Assets — offer a fundamentally different risk profile. These are:

• Regulated entities (Coinbase Custody is a licensed trust company in South Dakota)
• Segregated client assets (your coins are not comingled with operating funds)
• Insurance (typically crime insurance covering specific loss events)
• Qualified custodian status for regulated investors (SEC, MiFID frameworks)

For institutional investors and family offices, regulated custodians are the standard. Annual fees range from 0.1% to 0.25% of assets under custody.

3. Multi-Signature Arrangements

Multi-signature (multisig) requires multiple private keys to authorise a transaction — typically 2-of-3 or 3-of-5. Keys are held by different parties (the holder and trusted parties, or a specialised service like Casa or Unchained).

This eliminates single points of failure without requiring trust in a single custodian. It is the preferred structure for sophisticated self-custodians managing significant holdings.

4. Self-Custody (Maximum Sovereignty, Maximum Responsibility)

Hardware wallets (Ledger, Trezor, Coldcard) store private keys offline, eliminating network-based attack vectors. Self-custody means you are entirely responsible for key management, backup, and succession.

For significant holdings: self-custody requires a documented backup and recovery plan, secure physical storage of seed phrases in multiple locations, and a succession plan (what happens to keys if you are incapacitated). Most people underestimate the operational complexity of doing this correctly.

Choosing the Right Structure

Under $50,000: Hardware wallet self-custody or regulated exchange custody (Coinbase, Kraken) is appropriate. The risk level is proportionate.

$50,000-$500,000: Regulated institutional custody (Coinbase Custody, BitGo) or a properly implemented multisig arrangement. Self-custody is appropriate only with a well-documented operational security plan.

Above $500,000: Institutional regulated custody is the standard. Most family offices and institutional investors use qualified custodians regardless of philosophical preference for self-custody, due to regulatory requirements and fiduciary obligations.

For ETF exposure: The custody question is resolved by the fund structure. IBIT investors don't hold Bitcoin directly; Coinbase Custody holds it on behalf of the trust.

Insurance

Crypto custody insurance is specialised and limited. Coverage typically:

• Covers theft (internal and external) up to specified limits
• Does NOT cover price declines
• Does NOT cover losses from user error (lost keys)
• Has sub-limits that may be less than the total assets under custody

For significant holdings, understand the insurance coverage of your custodian specifically. Don't assume full coverage.

For the investment case for Bitcoin and broader digital assets, see our Bitcoin ETF analysis.