Direct Custody

Overview

Direct custody places the operational control relationship between the owner and the systems that hold or authorize assets. It can describe self-custody by an organization or custody performed by a directly contracted provider rather than through another platform or sub-custodian.

The term does not mean that every component is internal. Hardware, secure facilities, key-management software, cloud services, or settlement networks may still be used. What matters is who has legal responsibility, signing authority, account visibility, and the ability to move or recover the assets.

Organizations should document ownership, key holders, approval thresholds, recovery procedures, vendor dependencies, and segregation from customer or third-party funds. Direct control can improve transparency and reduce intermediary risk, but it also concentrates operational duties. Security, staffing, insurance, audit evidence, and continuity must match the value protected.

For Direct Custody, risks include key compromise, insider abuse, commingling, inaccurate books, unsupported tokens, provider insolvency, sub-custodian failure, blocked withdrawals, lost recovery material, and ambiguous liability. For Direct Custody, controls should combine least privilege, separation of duties, verified destinations, asset segregation, limits, monitoring, and continuity tests.

Records for Direct Custody should reconcile on-chain or provider balances with customer entitlements and the internal ledger by asset, network, account, and cutoff. For Direct Custody, pending deposits, locked assets, staking, fees, conversions, forks, unsupported transfers, and manual adjustments require separate treatment and review.

The operating model for Direct Custody should map legal ownership, beneficial entitlement, technical control, account structure, asset segregation, supported networks, signing policy, provider roles, contractual duties, and insolvency treatment. For Direct Custody, these dimensions can belong to different parties and must not be inferred from a wallet label.