<\/p>\n
Institutional interest in digital assets is no longer measured only by how many asset managers intend to buy bitcoin. The more consequential development is happening behind the trade: banks, custodians and market-infrastructure providers are building the systems required to hold digital assets, settle transactions and account for client ownership within regulated financial structures.<\/span><\/p>\n That distinction matters. An institution can gain price exposure through an exchange-traded product without holding the underlying asset directly. Direct ownership, by contrast, introduces questions that conventional portfolios rarely encounter. Who controls the private keys? What happens if access credentials are lost or compromised? Can the assets be moved without the client\u2019s approval? How are holdings segregated if the custodian fails? And will an auditor, regulator or investment committee accept the resulting control framework?<\/span><\/p>\n These questions have turned custody from a technical afterthought into one of the central conditions of institutional participation. Fidelity reported that 58 percent of institutional investors surveyed globally were already investing in digital assets, while EY\u2019s 2025 institutional survey found continued enthusiasm but also identified custody security, volatility and regulatory uncertainty among the material constraints. The direction of travel is clear, although adoption remains uneven across investor types, jurisdictions and use cases.<\/span><\/p>\n Digital asset custody is often described as the secure storage of private keys. That is accurate but incomplete.<\/span><\/p>\n Private keys provide the authority to move blockchain-based assets. A custodian must therefore protect not only the assets but the operational permissions surrounding them. Institutional custody typically combines cryptographic controls, governance, transaction policies, access management, compliance screening, asset segregation and recovery procedures.<\/span><\/p>\n Cold storage, where signing credentials are kept away from internet-connected systems, remains important. So do multi-signature arrangements, which require more than one approval before a transaction can proceed. Increasingly, however, custodians also use multi-party computation, or MPC, which divides the signing process across several protected components rather than maintaining one complete private key in a single location.<\/span><\/p>\n The technology alone is not the deciding factor. An institution needs to know who can initiate a transaction, who can approve it, whether those powers are separated and how exceptional activity is detected. It also needs a credible process for recovering access after a system failure, cyberattack, employee departure or operational mistake.<\/span><\/p>\n A custodian may advertise military-grade security, but an investment committee needs more concrete answers. It should understand whether client assets are legally segregated, how insolvency would be handled, which entities and subcontractors have access, what insurance actually covers and whether the provider\u2019s controls have been independently audited.<\/span><\/p>\n The entry of established financial institutions is changing the competitive structure of the sector.<\/span><\/p>\n Standard Chartered established a Luxembourg entity in 2025 to offer digital asset custody services across the European Union, following an earlier launch in the United Arab Emirates. In May 2026, it announced an agreement to acquire Zodia Custody\u2019s regulated custody business and integrate it into the bank\u2019s own securities-services operation. Zodia had originally been developed with institutional backing that included Standard Chartered, Northern Trust, SBI and National Australia Bank.<\/span><\/p>\n State Street has also been developing digital asset infrastructure as part of its broader custody and fund-services business, while Fidelity Digital Assets operates as a national trust bank in the United States. These institutions are not entering an empty market. Specialist providers such as BitGo, Anchorage Digital, Copper, Fireblocks and Coinbase Institutional have already built substantial businesses around custody and related infrastructure.<\/span><\/p>\n The emerging contest is therefore not simply between banks and crypto-native firms. Banks can offer familiar governance, balance-sheet strength and connections to existing securities workflows. Specialist providers may move faster, support a wider range of assets or provide more developed blockchain functionality. The most suitable model depends on what the institution intends to do with the assets after they have been acquired.<\/span><\/p>\n A long-term holder may place greater weight on offline protection, legal segregation and disaster recovery. A trading firm will also care about rapid settlement, exchange connectivity and collateral mobility. A tokenisation platform may need assets to interact with smart contracts or operate across several blockchain networks.<\/span><\/p>\n The word \u201ccustody\u201d can conceal materially different services.<\/span><\/p>\n Europe\u2019s Markets in Crypto-Assets Regulation, known as MiCA, has created a common framework for crypto-asset service providers across the European Union. Its provisions for these providers became applicable on 30 December 2024, although national transitional arrangements can allow previously operating firms to continue for a limited period while seeking authorisation.<\/span><\/p>\n Providing custody and administration of crypto-assets on behalf of clients is one of the regulated services covered by the framework. Authorised providers face requirements relating to governance, safeguarding, complaints, conflicts and organisational controls.<\/span><\/p>\n MiCA does not, however, make every product offered by a licensed company equally protected. European regulators have warned that some providers may offer regulated and unregulated services through the same interface, creating confusion about where MiCA safeguards apply. Institutional buyers therefore need to examine the precise legal entity, service and asset involved rather than relying on the provider\u2019s general claim to be regulated.<\/span><\/p>\n The United States has moved in a different direction. In January 2025, the Securities and Exchange Commission issued Staff Accounting Bulletin 122, rescinding the earlier SAB 121 guidance. The previous approach had required certain entities safeguarding crypto-assets for customers to recognise a corresponding asset and liability on their balance sheets. Critics argued that this made bank participation in digital asset custody unnecessarily burdensome.<\/span><\/p>\n Its removal did not eliminate the legal, technological or capital questions surrounding bank custody. It did remove an accounting obstacle that had discouraged some regulated financial institutions from entering the market.<\/span><\/p>\n Regulatory progress is therefore significant but should not be confused with global uniformity. An institutional investor may face different custody, insolvency, disclosure and investor-protection regimes depending on where the custodian is established, where the client is based and how the asset is classified.<\/span><\/p>\n The growth of spot cryptocurrency exchange-traded products has given institutions another route to exposure. An allocator can buy shares in a regulated vehicle while the fund appoints a custodian to hold the underlying assets.<\/span><\/p>\n This can simplify investment approval, reporting and portfolio administration. It also transfers rather than removes custody risk. The investor must assess the fund structure, concentration of custody providers, creation and redemption arrangements, liquidity and the protections available if one of the operational parties fails.<\/span><\/p>\n For many traditional portfolios, an exchange-traded product may still be more practical than direct ownership. Direct custody becomes more relevant where an institution wants to transfer assets on-chain, participate in staking, use tokenised collateral, interact with decentralised protocols or retain control over wallet and transaction arrangements.<\/span><\/p>\n The correct custody decision therefore begins with the investment purpose. Buying bitcoin exposure, holding tokenised securities and operating a blockchain-based payments product are not variations of the same operational problem.<\/span><\/p>\n The first question is legal ownership. The contract should establish whether assets are held separately for the client, how they are recorded and what claim the client would have in an insolvency. The answer may differ between jurisdictions and between types of asset.<\/span><\/p>\n The second is key management. Institutions should understand how signing authority is distributed, how transactions are approved and whether employees of the custodian, technology vendors or other third parties can act unilaterally. Recovery arrangements should be tested rather than merely documented.<\/span><\/p>\n Asset coverage also requires scrutiny. A provider may support bitcoin and ether while lacking the infrastructure needed for a particular token, network or staking arrangement. Support for an asset does not automatically mean support for every activity associated with it.<\/span><\/p>\n Institutions should then examine operational integration. Can the service connect to portfolio-management, accounting and compliance systems? Does it produce reports an auditor can use? Can transactions be reconciled independently against blockchain records? What are the cut-off times, approval stages and service levels?<\/span><\/p>\n Counterparty and concentration risks deserve equal attention. A provider might outsource wallet technology, transaction screening, cloud services or insurance. The institution must know which functions are performed internally and what would happen if a critical subcontractor failed.<\/span><\/p>\n Insurance should never be reduced to the size of the headline policy. Coverage may apply only to defined theft events, exclude employee actions or cyber incidents, or be shared among all clients. The relevant question is not whether the custodian is insured, but what losses are covered, under which conditions and up to what amount for the individual client.<\/span><\/p>\n Some institutional investors expect custodians to support staking, allowing eligible blockchain assets to earn protocol rewards. This can make assets productive, but it changes the risk profile.<\/span><\/p>\n The institution must consider whether assets are transferred to another provider, pooled, locked for a period or exposed to slashing penalties when a validator fails to follow network rules. It should also understand who receives the rewards, how fees are calculated and whether staking changes the legal treatment of the holding.<\/span><\/p>\n Custody and staking should consequently be assessed as separate services, even when supplied through the same platform. A provider may be competent at safeguarding keys without offering an acceptable validator, liquidity or counterparty structure.<\/span><\/p>\n The longer-term opportunity extends beyond cryptocurrencies. Bonds, fund interests, deposits, private-market assets and other claims are increasingly being represented or issued on distributed ledgers.<\/span><\/p>\n As traditional and tokenised assets begin to operate within connected systems, custodians may become responsible for more than safekeeping. They may support settlement, corporate actions, collateral management, identity controls and the movement of assets between conventional and blockchain-based infrastructure.<\/span><\/p>\n This helps explain why banks and established securities-services groups are investing in the area even when direct cryptocurrency allocations remain modest. The strategic prize is not simply a fee for storing bitcoin. It is a position within the operating architecture through which tokenised financial assets may eventually be issued, exchanged and administered.<\/span><\/p>\n Not every pilot will become a scalable market, and institutions should remain sceptical of demonstrations that depend on closed networks or artificial liquidity. Yet custody is one of the areas where digital finance is becoming less speculative and more infrastructural.<\/span><\/p>\n The institutional question has therefore changed. It is no longer whether a private key can be stored securely. It is whether a provider can combine technological control, legal certainty, operational resilience and regulatory accountability at the standard expected elsewhere in finance. Those that can do so are likely to become less visible as crypto companies and more important as financial-market infrastructure.<\/span><\/p>\n Custody Is More Than Keeping Tokens Offline<\/span><\/h2>\n
The Market Is Moving Towards Regulated Providers<\/span><\/h2>\n
Regulation Is Becoming More Concrete<\/span><\/h2>\n
The ETF Effect Changes The Custody Debate<\/span><\/h2>\n
What Institutions Should Examine<\/span><\/h2>\n
Staking Introduces A Different Risk Layer<\/span><\/h2>\n
Tokenisation Will Expand The Custodian\u2019s Role<\/span><\/h2>\n
\n