Custodian Risk

Overview

Custodian risk arises when an external or internal party controls assets, private keys, settlement access, or authoritative ownership records. Loss may result from theft, fraud, insolvency, weak segregation, legal seizure, operational failure, or unauthorized rehypothecation.

On-chain balances do not automatically prove client liabilities, beneficial ownership, unrestricted control, or absence of encumbrances. Legal structure, jurisdiction, contractual rights, governance, withdrawal processes, and key-management design affect whether assets remain available during stress.

Due diligence should examine financial condition, security, segregation, audits, insurance, incident history, legal terms, and recovery capability. Exposure limits, independent reconciliation, diversified custody, and test withdrawals reduce dependence but cannot eliminate custodial failure. Contingency plans should anticipate suspended withdrawals.

An auditable record of Custodian Risk should link enrollment, signing, approval, broadcast, confirmation, revocation, and recovery events to the governing policy or model version, source evidence, decision, approver, exception, action, and final outcome.

For Custodian Risk, production scope should name the relevant keys, signing policies, accounts, addresses, transactions, recovery paths, and custody boundaries, the decision being supported, the accountable owner, and the time and jurisdiction boundaries.

Custodian Risk is used to evaluate dependence on an external or internal asset holder; for example, valid on-chain reserves do not remove withdrawal, legal, key-management, or operational constraints.

Custodian risk is the possibility that an asset custodian loses, misuses, freezes, misrecords, or cannot return assets under its control. Custodian risk combines security, solvency, legal title, records, segregation, and withdrawal capability, not merely possession of visible on-chain assets.

For Custodian Risk, the assessment should evaluate the possibility that an asset custodian loses, misuses, freezes, misrecords, or cannot return assets under its control. The assessment record should separate observed evidence supporting the possibility that an asset custodian loses, misuses, freezes, misrecords, or cannot return assets under its control from assumptions, state the time horizon and existing controls, and identify who owns any remaining exposure. Monitoring should test whether the conditions described in the possibility that an asset custodian loses, misuses, freezes, misrecords, or cannot return assets under its control have changed enough to require a new rating, treatment, or approval.