Counterparty Custody Risk
Pronunciation: KOWN-tur-pahr-tee KUS-tuh-dee RISK
Definition
Counterparty custody risk is the possibility that an external holder loses, freezes, misuses, or cannot return assets entrusted to its control.
Overview
What does Counterparty Custody Risk mean?
Counterparty custody risk is the possibility that an external holder loses, freezes, misuses, or cannot return assets entrusted to its control.
How it works in practice
Counterparty custody risk is the possibility of losing access to digital assets because a third party holding or controlling them fails, is hacked, freezes transfers or refuses delivery. Exposure analysis starts by mapping who controls signing keys, who can block withdrawals, what legal claim the merchant has, and where assets are actually held. Controls include counterparty diversification, withdrawal testing, balance limits, independent reconciliations and legally reviewed segregation arrangements.
Further operational details
Counterparty custody risk is the possibility that an external holder loses, freezes, misuses, or cannot return assets entrusted to its control. Entrusted assets remain exposed to the custodian's security, solvency, legal structure, records, access controls, and ability to honor withdrawals.
Counterparty custody risk arises when assets depend on another organization for safekeeping, key control, settlement, or withdrawal. Relevant counterparties include exchanges, custodians, banks, brokers, stablecoin issuers, wallet providers, and bridge operators.
Limits and common misunderstandings
Custody risk is not eliminated by a provider showing a wallet balance or publishing reserve addresses. A venue can have assets and still be unable to honor a specific withdrawal because of legal, operational or liquidity problems. Diversification should consider shared infrastructure and correlated failure modes.
Related glossary terms
Example
A payment company keeps $500,000 in stablecoins across two custodians. It tests scheduled withdrawals and monitors concentration by issuer and provider, rather than assuming two separate user accounts guarantee two independent risks.
Comparison
Counterparty risk includes failure to fulfill an obligation generally; custody risk specifically concerns safeguarding and returning assets. Smart-contract risk may exist even without a custodial intermediary.
Key Takeaway
Counterparty risk includes failure to fulfill an obligation generally; custody risk specifically concerns safeguarding and returning assets.
Sources
- NIST Documentation: Cyberframework — NIST (2026-07-30)