What is institutional crypto custody? It refers to the full set of arrangements that institutions such as funds, exchanges, payment institutions, banks and corporate treasuries use to safeguard digital assets for themselves or their clients. Compared with general crypto asset safekeeping, institutional custody adds three layers of requirements: signing authority must be distributed across multiple people, client assets must be separated from the institution’s own assets, and the entire process must withstand regulatory and audit scrutiny.
What Does Institutional Custody Require Beyond General Crypto Safekeeping?
The first is separation of authority: no single person or key can move assets alone. Take the custody rule proposal released by the US SEC in October 2026 as an example: when an investment adviser self-custodies, only designated personnel may manage private keys, and every transaction requires authorization from at least two people, one of whom must be from management.
The second is segregation: client assets must be kept separate from the institution’s own assets, and each client’s share must be clearly identified. The EU’s MiCA requires custodians to maintain a register of positions for each client and provide position statements at least quarterly; the SEC proposal requires each client’s crypto assets to be held at addresses that belong only to that client.
The third is auditability. The SEC proposal requires investment advisers that self-custody to obtain an internal control report from an independent accountant within six months of starting, and annually thereafter; Hong Kong also lists independent audits among the considerations for its custodian license.
What Custody Models Can Institutions Choose?
The first is to use a third-party custodian or custodian bank, the second is self-custody, where the institution holds signing authority itself, and the third is a hybrid model combining the two. The biggest difference between third-party custody and self-custody is who holds signing authority. Where neither regulation nor fund documents require a qualified custodian, institutions can choose or combine models based on their business and operational capabilities.
Do Institutions Need a License for Crypto Custody?
It depends on whether they safeguard assets for clients and where they operate. Custody licenses target businesses that hold assets on behalf of clients, and jurisdictions apply a similar test: whether the service provider can move assets without the client’s consent. Institutions that provide custody for clients need CASP authorization in the EU and a DPT license in Singapore, and in Hong Kong will need a separate virtual asset custodian license. Custody regulation across jurisdictions differs in its specific requirements on asset segregation, cold storage and liability for compensation.
How Should Institutions Assess the Cost and Risk of Custody Solutions?
There is no standard pricing. A common structure charges basis points on assets under custody, plus per-transaction and per-wallet fees, so comparing custody fees requires calculating total cost of ownership. Risk is not limited to external attacks: crypto custody risks also include insider misconduct, theft of high-privilege credentials and failures at the custodian itself. When choosing a third party, confirm that client assets remain protected if the custodian goes bankrupt.
Conclusion
The core of institutional crypto custody is subjecting signing authority to separation of authority, segregation and auditability, while meeting the licensing requirements of the jurisdictions where the institution operates. Choosing a model, determining whether a license is needed, and assessing cost and risk should all start from these three layers of requirements. Safeheron’s MPC Wallet-as-a-Service provides businesses with MPC key management and a policy engine.
Is your institution ready on separation of authority, segregation and auditability?
Looking for a secure way to manage digital assets?
Talk to our experts and find the right solution for your business.
Request a DemoLooking for a secure way to manage digital assets?
Talk to our experts and find the right solution for your business.