Hot Custody

Definition

Hot custody is a custody model in which some signing authority remains connected or readily accessible for fast, automated asset movement. A production model for Hot Custody should state beneficial ownership, signing control, segregation, withdrawal rights, provider dependencies, and reconciliation responsibilities. Operations for Hot Custody should connect legal entitlement with the accounts, wallets, approvals, external balances, and records used to safeguard and return the assets.

Overview

Meaning and scope

Mechanism and operation

Hot custody supports frequent withdrawals, settlements, or treasury operations by keeping keys or signing services available to online systems. Compromised applications, administrators, APIs, policies, or signing services may reach assets before human intervention. Operators should cap hot balances, restrict destinations and velocity, separate duties, require step-up approval for exceptional transfers, and sweep excess funds to colder storage. Monitoring must connect transaction intent, authorization, signing, broadcast, and settlement. Incident procedures should revoke access and move remaining value without depending on the compromised environment. Records for Hot Custody should reconcile on-chain or provider balances with customer entitlements and the internal ledger by asset, network, account, and cutoff.

Practical payment example

A custodian keeps limited signing funds online for rapid payouts and holds most reserves in more restricted environments.

Operational checks

For Hot Custody, pending deposits, locked assets, staking, fees, conversions, forks, unsupported transfers, and manual adjustments require separate treatment and review. Hot Custody should be distinguished from investment ownership and from a software interface. The operating model for Hot Custody should map legal ownership, beneficial entitlement, technical control, account structure, asset segregation, supported networks, signing policy, provider roles, contractual duties, and insolvency treatment.

Distinctions and limits

It may use secure hardware, policy engines, distributed signing, or managed custody infrastructure rather than exposing a raw private key. Strong technology does not remove the need to limit the value and permissions available through the hot path.

Related definitions: custody.

Example