What Institutional Custody Actually Looks Like

Retail self-custody and institutional custody solve the same problem with almost nothing in common. Understanding the institutional version explains why large holders behave the way they do.

The requirements institutions actually have

A fund cannot simply hold a seed phrase. Its obligations include:

• Segregation. Client assets must be identifiable and separate from the custodian’s own balance sheet.
• Auditability. An external auditor must be able to verify holdings at a point in time.
• Authorisation controls. No single employee can move assets.
• Insurance. Coverage against theft, with terms a compliance officer will accept.
• Regulatory standing. A custodian that meets the definition of a qualified custodian in the relevant jurisdiction.

None of these are technical problems. They are governance problems, and the technology exists to serve them.

The mechanisms

Multi-party computation. The private key is never assembled in one place. Signing is performed jointly by several parties holding shares of the key, so compromising one machine yields nothing. This is now the dominant approach for active institutional holdings.

Multi-signature wallets. A transaction requires several independent approvals, typically held by different people in different locations. Slower than MPC and easier to audit, which suits long-term holdings.

Deep cold storage. Keys generated and stored offline, often in geographically separated facilities, with a retrieval process measured in hours or days. Used for the portion of a holding that is not expected to move.

Most large custodians use all three, tiered by how quickly the assets need to be accessible.

What this explains about market behaviour

Large holders move slowly. A withdrawal from deep cold storage involves scheduled procedures and multiple approvers. Institutions cannot react to a price move within the hour, which dampens some of the volatility their size might otherwise create.

Flows cluster around business hours. Creations and redemptions follow the working day of the jurisdictions involved, which is visible in on-chain activity.

Counterparty concentration is high. A small number of custodians hold a large share of institutional crypto. That is an efficiency in normal conditions and a systemic risk in bad ones.

The question worth asking about any custodian

Three things matter more than branding.

1. Is it a qualified custodian under the rules that apply to the holder?
2. Are client assets bankruptcy-remote from the custodian’s own balance sheet?
3. What does the insurance actually cover, and what is the per-incident limit?

The third question has the least satisfying answer in most cases. Insurance in this sector typically covers theft from cold storage, often excludes losses arising from an employee with legitimate access, and carries limits well below the assets held.

For everyone else

None of this applies directly to an individual holding a modest amount. The useful transfer is the principle: separate what must move from what must not, require more than one thing to go right before assets can leave, and know in advance what your insurance does not cover.

For individuals the practical version is simpler. Buy on a platform where withdrawal to your own address is supported, such as an OTC desk that quotes a firm price, move the long-term portion off it, and keep the working balance small enough that losing it would be irritating rather than serious.