Custodian Failure Scenario

Overview

Meaning and scope

Custodian Failure Scenario is a defined stress case describing how a custodian could become unable or unwilling to safeguard, transfer, return, or accurately report customer assets. It is a planning model rather than a prediction and should include technical, financial, legal, and operational causes.

How it works

Operationally, teams model cyber compromise, insolvency, withdrawal suspension, key loss, sanctions, legal action, data corruption, and prolonged outage, then assign response actions. Failures can take the form of inaccessible systems, liquidity constraints, lost or compromised keys, legal freezes or insolvency. Each scenario calls for different evidence and recovery procedures.

Operational checks and limits

Failure planning covers insolvency, operational outage, lost or compromised keys, frozen withdrawals and mismatched custody ledgers. Distinct scenarios require different contingencies.

Practical example

A custodian pauses withdrawals during an infrastructure incident, so a merchant activates preapproved alternate liquidity rather than promising instant settlement.

Distinctions

Custodian failure is an institutional or technical access event; an on-chain network failure can occur independently.

How to evaluate it

Asset availability and authority to move an asset are different questions; for Custodian Failure Scenario, map who can initiate, approve, sign, recover, and audit a movement, and which keys or institutions control each step. When evaluating Custodian Failure Scenario, the recovery plan should consider compromised credentials, unavailable signers, incorrect destination information, and frozen or delayed transfers; test access changes without assuming that a displayed balance guarantees immediate spendability.

Operational edge cases

A company should know which records it can export before access disappears, which assets it can move independently, and what contractual claim remains if withdrawal is suspended. Stress tests should not assume the institution will be available to assist. Related concepts: Proof of Control; Proof of Reserves; Custodian.