Custody Provider

Overview

Services can include key custody, account administration, deposits, withdrawals, transaction approval, reconciliation, reporting, staking, and asset servicing. Providers may operate their own technology or rely on sub-custodians, key-management vendors, cloud services, and blockchain infrastructure.

The provider’s legal status and client protections vary by jurisdiction and product. Users should not infer asset segregation, fiduciary duty, insurance, or deposit protection from the word custody alone. The agreement and actual account structure determine important rights during insolvency or service suspension.

Due diligence should cover governance, financial condition, licensing where relevant, key controls, supported assets, audits, incident history, insurance, continuity, subcontractors, and withdrawal testing. A provider should also offer clear records and a workable exit path. Outsourcing custody changes the risk owner, but does not eliminate custody risk.

Custody Provider should be distinguished from investment ownership and from a software interface. For example, a provider may display an asset balance while holding pooled assets through another custodian; operations must verify contractual rights, segregation, withdrawal capability, and external evidence rather than rely on the screen alone.

Records for Custody Provider should reconcile on-chain or provider balances with customer entitlements and the internal ledger by asset, network, account, and cutoff. For Custody Provider, pending deposits, locked assets, staking, fees, conversions, forks, unsupported transfers, and manual adjustments require separate treatment and review.

For Custody Provider, risks include key compromise, insider abuse, commingling, inaccurate books, unsupported tokens, provider insolvency, sub-custodian failure, blocked withdrawals, lost recovery material, and ambiguous liability. For Custody Provider, controls should combine least privilege, separation of duties, verified destinations, asset segregation, limits, monitoring, and continuity tests.