Custody Operations

Overview

Daily work can include address creation, deposit monitoring, withdrawal review, transaction construction, signing coordination, fee funding, wallet sweeping, policy administration, user access, and balance reconciliation. Teams also manage asset onboarding, forks, upgrades, staking, and exception cases.

Operational correctness depends on clear states and responsibilities. A signed transaction is not necessarily broadcast, a confirmed transfer may not yet be credited, and a custody ledger can disagree with controlled on-chain holdings. Runbooks must distinguish each stage and identify the authoritative record.

Strong operations use segregation of duties, least privilege, transaction limits, monitoring, evidence retention, incident escalation, and tested continuity. Metrics should track pending age, failed transfers, reconciliation breaks, signer availability, policy exceptions, and recovery times. Custody security fails when routine processes are improvised under pressure.

For Custody Operations, risks include key compromise, insider abuse, commingling, inaccurate books, unsupported tokens, provider insolvency, sub-custodian failure, blocked withdrawals, lost recovery material, and ambiguous liability. For Custody Operations, controls should combine least privilege, separation of duties, verified destinations, asset segregation, limits, monitoring, and continuity tests.

Custody Operations should be distinguished from investment ownership and from a software interface. For example, a provider may display an asset balance while holding pooled assets through another custodian; operations must verify contractual rights, segregation, withdrawal capability, and external evidence rather than rely on the screen alone.

The operating model for Custody Operations should map legal ownership, beneficial entitlement, technical control, account structure, asset segregation, supported networks, signing policy, provider roles, contractual duties, and insolvency treatment. For Custody Operations, these dimensions can belong to different parties and must not be inferred from a wallet label.