Wallets and custody solutions for managing crypto keys and risk
a[data-rs-seo-link]{text-decoration:underline!important;color:#1a56db!important;cursor:pointer!important;}a[data-rs-seo-link]{text-decoration:underline!important;color:#1a56db!important;cursor:pointer!important;}
Why custody choices matter now
Wallets and custody solutions are not simply places to store crypto. They determine who can authorize a transfer, how private keys are protected, what happens when a signer is unavailable, and whether a user can prove ownership if a platform fails. The right model depends on the user. An individual long-term holder may prioritize self-custody and disciplined recovery practices, while a fund, fintech, or treasury desk may need regulated custody, role-based approvals, audit trails, and asset segregation. No model removes risk. It shifts risk between the user, software, service provider, governance process, and legal framework. For more coverage in this category, see our wallets and custody solutions hub.
How crypto wallets and custody actually work
A crypto wallet does not hold coins in the way a physical wallet holds cash. Crypto assets remain recorded on a blockchain or other distributed ledger. The wallet manages the cryptographic keys or signing permissions needed to move those assets. In practice, custody is about control: who can sign, who can approve, who can recover access, and who is legally responsible for safeguarding customer assets.
This distinction matters because many crypto losses occur without a blockchain failure. A user may reveal a seed phrase, a signing device may be compromised, an internal operator may approve a fraudulent withdrawal, or a custodian may fail to keep client assets properly separated from its own assets. Custody is therefore both a technical issue and an operating model.
Hot, warm, and cold wallets
Hot wallets are connected to online systems and are useful for frequent transactions, market making, retail withdrawals, and applications that require fast settlement. They are also exposed to more attack paths. Cold wallets keep signing keys offline or isolated from routine internet access, which can reduce remote compromise risk but slows asset movement. Warm wallets sit between the two, often using stricter controls than hot wallets while remaining more accessible than deep cold storage.
Custodial, self-custodial, and hybrid control
Self-custody means the user controls the keys or signing credentials. Custodial solutions place control with a service provider that has contractual, technical, and often regulatory duties. Hybrid models split responsibilities. For example, a business may use an MPC wallet platform while retaining internal approval rules, or an investor may combine a hardware wallet with a recovery service. The key question is not whether a product calls itself a wallet, but who can actually cause assets to move.
The main custody models compared
Most custody decisions start with the same questions: the user’s risk profile, transaction frequency, governance requirements, and tolerance for counterparty exposure. The comparison below is a practical starting point, not a ranking.
| Model | Who controls signing | Main strengths | Main limits | Typical use |
|---|---|---|---|---|
| Software self-custody wallet | Individual user or device | Fast access, low setup cost, direct control | High dependence on user security and seed phrase handling | Small balances, learning, active on-chain use |
| Hardware wallet | User with dedicated signing device | Better key isolation than ordinary devices | Recovery phrase loss, physical theft, and user error remain material risks | Long-term individual holding |
| Multisignature wallet | Several independent keys based on a threshold rule | Reduces single-key failure and supports shared governance | Can be harder to operate across chains and signers | Teams, DAOs, family offices, treasury reserves |
| MPC wallet | Multiple parties compute signatures without exposing a full private key in one place | Flexible policies, institutional workflows, and reduced single-point key exposure | Requires careful vendor due diligence and recovery planning | Trading desks, fintechs, funds, high-volume operations |
| Regulated or institutional custodian | Custodian under client agreement and controls | Operational support, reporting, segregation controls, and potential regulatory oversight | Introduces counterparty, legal, and service-provider risk | Funds, advisers, corporates, platforms, large holders |
| Exchange custody | Exchange or platform | Convenient for trading and liquidity | May combine custody, trading, lending, and platform risk | Active traders with limited balances or strict withdrawal rules |
What regulation changed for custody providers
Custody has become one of the clearest points where crypto overlaps with traditional financial regulation. The legal position still depends on jurisdiction, asset type, client type, and provider structure, but several milestones have shaped current expectations.
| Date | Development | Why it matters |
|---|---|---|
| July 2020 | The U.S. Office of the Comptroller of the Currency issued Interpretive Letter 1170 on national bank authority to provide cryptocurrency custody services, including holding cryptographic keys. | It framed crypto key custody as a modern form of traditional custody activity for national banks and federal savings associations, subject to safe and sound banking practices. |
| December 30, 2024 | The EU Markets in Crypto-Assets Regulation became fully applicable for crypto-asset service providers. | MiCA created EU-level rules for crypto-asset services, including custody and administration of crypto-assets on behalf of clients. |
| January 17, 2025 | The EU Digital Operational Resilience Act began to apply. | DORA pushed regulated financial entities, including many crypto firms in scope, toward stronger ICT risk management, incident reporting, testing, and third-party technology oversight. |
| January 23 to 30, 2025 | The SEC issued Staff Accounting Bulletin 122, which rescinded SAB 121 effective January 30, 2025. | This changed the accounting guidance landscape for entities safeguarding crypto assets, but it did not itself approve any custody provider or remove the need for legal analysis. |
| May 7, 2025 | The OCC issued Interpretive Letter 1184 on crypto-asset custody and execution services. | The letter clarified that national banks and federal savings associations may buy and sell assets held in custody at a customer’s direction and may outsource permissible activities subject to third-party risk management. |
| September 30, 2025 | The New York Department of Financial Services updated guidance on custodial structures for customer protection in an insolvency scenario. | The guidance emphasized segregation, separate accounting, limited use of customer virtual currency, sub-custody arrangements, and customer disclosure. |
| July 1, 2026 | ESMA stated that the MiCA transitional period expired across the EU. | After that date, entities providing crypto-asset services to EU clients without a MiCA license risk breaching EU law, and client migration or wind-down planning became critical. |
| October 1, 2026 | The SEC proposed a crypto custody framework for investment advisers and regulated funds. | As a proposal, it is not a final rule, but it signals continued U.S. regulatory focus on permitted custodians, client protection, and the custody of crypto assets by advisers and funds. |
For buyers, this means custody due diligence cannot stop at technical security. They should ask which entity is the legal custodian, what rules apply to that entity, whether sub-custodians are used, and how client assets are treated if the provider enters insolvency.
Security controls that separate mature custody from simple storage
Strong custody programs use layered controls because private-key compromise, phishing, insider abuse, vendor failure, and governance mistakes are different problems. Chainalysis reported that private key compromises accounted for the largest share of stolen crypto in 2024, and its later reporting for 2025 described large losses tied to attacks on private-key infrastructure and signing processes. Those findings point to a practical lesson: key storage matters, but signing governance matters just as much.
Key generation and key storage
Mature systems define how keys are generated, where key material can exist, who witnesses key ceremonies, and how backup material is protected. Hardware security modules, secure enclaves, air-gapped devices, and non-exportable keys can reduce exposure, but the control design should be documented and testable. A provider should be able to explain whether it uses single-key custody, multisignature, MPC, or another architecture without relying on vague security language.
Transaction governance
Good custody design treats every transfer as a controlled event. Common controls include role-based access, withdrawal allowlists, transaction limits, time delays, dual approvals, separation of duties, out-of-band verification, and automated policy checks. For institutional users, the question is whether the policy engine reflects real governance. A two-person approval rule is weak if both approvers operate through the same compromised messaging channel.
Recovery, continuity, and auditability
Recovery is often where otherwise attractive wallet designs fail. A self-custody user needs a plan for death, device loss, fire, theft, or memory failure. A business needs continuity if an employee leaves, a signer is unavailable, or a vendor outage blocks transaction approval. Custodians should provide statements, audit trails, asset reconciliation, and clear evidence of client asset segregation. Where omnibus wallets are used, the internal ledger must be strong enough to identify each customer’s beneficial interest at all times. See also: Blockchain Technology.
How to evaluate a wallet or custodian
Before choosing a wallet or custodian, define the job the solution must perform. A wallet for daily DeFi interaction is not the same as custody for a pension-linked allocation, and a corporate treasury reserve is not the same as an exchange trading account.
- Control model: Identify who can sign transactions, who can approve them, and whether any single person or vendor can move assets alone.
- Supported assets and chains: Check whether security controls apply equally across all supported assets or only the largest networks.
- Recovery process: Understand what happens after device loss, signer loss, employee turnover, or suspected compromise.
- Segregation: Ask whether assets are held in separate on-chain addresses, omnibus wallets with individual ledgering, or another structure.
- Sub-custody: Determine whether the provider uses another custodian or technology vendor and what happens if that party fails.
- Insurance and limits: Review what coverage exists, what exclusions apply, and whether policy limits are shared across customers.
- Reporting: Look for statements, reconciliations, audit logs, tax exports, and evidence that can support internal controls.
- Regulatory status: Verify licenses, registrations, or supervisory status in the relevant jurisdiction rather than relying on generic claims.
- Incident history: Review known outages, exploit responses, disclosure practices, and customer communication quality.
- Exit plan: Confirm how assets can be withdrawn, migrated, or transferred if the relationship ends.
Common trade-offs for different users
Individuals often focus on whether to keep assets on an exchange or move them to a hardware wallet. The trade-off is convenience versus personal responsibility. Moving assets off an exchange can reduce platform counterparty risk, but losing the recovery phrase may be final. The right answer depends on balance size, transaction frequency, and the user’s ability to secure backup materials.
Professional investors face a different problem. They need access controls, compliance records, independent verification, and service continuity. A regulated custodian may meet some of those needs, but it introduces vendor and legal risks that must be reviewed in contracts. Trading desks may also split assets across hot, warm, and cold tiers so only limited balances are exposed to faster-moving systems.
Crypto-native teams and DAOs often prefer multisignature or smart-account structures because they make governance visible and distribute control. Those models can work well, but they still need signer discipline, clear quorum rules, tested recovery paths, and procedures for emergency upgrades. A multisig with inactive signers or poorly stored keys can be less resilient than it appears.
Frequently asked questions
Is a hardware wallet a custody solution?
Yes. A hardware wallet is a self-custody solution because it helps the user protect and use private keys. It can reduce exposure to ordinary computer malware, but it does not remove the need to protect the recovery phrase, verify transactions, and plan for inheritance or emergency access.
Is MPC safer than multisig?
Not automatically. MPC and multisig solve similar problems in different ways. Multisig is often transparent on-chain and easy to reason about where supported. MPC can offer flexible institutional workflows and broader asset support, but buyers must understand the vendor architecture, recovery process, and operational controls.
Do regulated custodians make crypto risk-free?
No. Regulation and supervision can improve accountability, disclosure, and operational standards, but they do not eliminate market volatility, software risk, insider risk, insolvency risk, or mistakes in transaction approval. Custody is one layer of risk management, not a guarantee.
What is the biggest mistake when choosing wallets and custody solutions?
The biggest mistake is choosing based only on convenience or headline security claims. A better approach is to map assets, users, signing authority, recovery needs, legal obligations, and exit plans first, then select the custody model that matches those requirements.
