Custody
Pronunciation: KUS-tuh-dee
Definition
Custody is the responsibility and operational arrangement for safeguarding assets, controlling authorized access or transfer, maintaining records, and returning assets according to agreed rights. Operations require access controls, transaction approval, asset and network support, balance reconciliation, incident response, continuity, and tested return or migration procedures. A production model for Custody should state beneficial ownership, signing control, segregation, withdrawal rights, provider dependencies, and reconciliation responsibilities.
Overview
Custody can apply to physical, financial, or digital assets. In blockchain systems, it centers on control of private keys, smart-account permissions, or provider accounts that can authorize movement. It also includes deposits, withdrawals, reconciliation, reporting, recovery, and incident handling.
Self-custody, third-party custody, and collaborative custody distribute authority differently. Legal ownership, beneficial entitlement, and technical control may not belong to the same party. Asset segregation, account structure, and insolvency treatment must therefore be understood alongside the signing design.
A custody framework should identify owners, controllers, approved actions, storage tiers, access rules, records, service dependencies, and continuity. Good custody prevents unauthorized loss without making legitimate assets permanently inaccessible. It must address both confidentiality of control credentials and availability of authorized transaction capability.
Risks include key compromise, insider abuse, commingling, inaccurate books, unsupported tokens, provider insolvency, sub-custodian failure, blocked withdrawals, lost recovery material, and ambiguous liability. Controls should combine least privilege, separation of duties, verified destinations, asset segregation, limits, monitoring, and continuity tests.
Records for Custody should reconcile on-chain or provider balances with customer entitlements and the internal ledger by asset, network, account, and cutoff. Pending deposits, locked assets, staking, fees, conversions, forks, unsupported transfers, and manual adjustments require separate treatment and review.
Custody should be distinguished from investment ownership and from a software interface. For example, a provider may display an asset balance while holding pooled assets through another custodian; operations must verify contractual rights, segregation, withdrawal capability, and external evidence rather than rely on the screen alone.
The operating model for Custody should map legal ownership, beneficial entitlement, technical control, account structure, asset segregation, supported networks, signing policy, provider roles, contractual duties, and insolvency treatment. These dimensions can belong to different parties and must not be inferred from a wallet label.
Key Takeaway
Custody is the governed ability to protect and administer assets, combining technical control with records, rights, and reliable authorized access.
Sources
- Bitcoin.org Documentation: Wallets — Bitcoin.org (2026-07-30)
- NIST Documentation: Key Management — NIST (2026-07-30)