Cold Custody

Definition

Cold custody is a custody model that keeps the private keys or signing shares for protected assets offline except through tightly controlled transaction procedures.

Overview

Contents Hide

Context and purpose
How it works
Practical checks and failure points
Related concepts

Context and purpose

A custodian using cold custody may generate keys in isolated hardware, store them across secure locations, and require multiple people or devices to authorize movement. Online systems can monitor balances and prepare unsigned transactions without obtaining direct signing access. Offline storage reduces remote attack exposure but increases operational complexity and withdrawal latency. Physical compromise, insider collusion, damaged media, unavailable signers, flawed ceremonies, and unsafe transfer of transaction data remain possible. Not every asset or smart-contract action is compatible with the same cold process. The custody design should document key generation, storage, quorum, access logging, transaction verification, backup, recovery, rotation, and emergency availability. Organizations also need enough operational liquidity outside cold custody. Cold controls are effective when the full signing workflow remains secure and usable, not merely when a key-bearing device lacks internet access. Cold Custody should be distinguished from investment ownership and from a software interface.

How it works

Cold custody stores or controls signing keys in environments isolated from routine online systems. A transaction generally moves through preparation, offline authorization and broadcast; physical and procedural controls determine the actual security gain.

Practical checks and failure points

Maintain backups, recovery drills, independent verification of display data and strict access logs.

Custody Controls · Custody Incident

Example

A business prepares a large treasury payout online but signs it on an isolated device after checking recipient, network and amount. The signed transaction is then transferred to an online broadcaster.

Comparison

Cold storage reduces online exposure; it does not protect against every insider error or malicious transaction proposal.

Key Takeaway