Legal Custody Risk

Overview

Legal custody risk arises when the legal status of assets held by a custodian is uncertain or differs from operational expectations. Issues include beneficial ownership, segregation, insolvency treatment, liens, rehypothecation, jurisdiction, subcustody, and enforceability of withdrawal rights.

Technical control of private keys does not by itself determine legal ownership, and on-chain balances may not show client liabilities or encumbrances. Contract language can also conflict with mandatory insolvency, property, sanctions, or court rules.

Organizations should review custody agreements, governing law, asset segregation, client claims, subcustodian terms, insolvency opinions, and dispute procedures. Exposure limits and diversified arrangements can reduce dependence, while records must reconcile legal entitlements with controlled assets.

Legal custody risk is the possibility that ownership, segregation, recovery, or access rights over safeguarded assets fail under applicable law or contract. Custody safety depends on enforceable ownership and recovery rights as well as technical key control and accurate asset records.

For Legal Custody Risk, the assessment should evaluate the possibility that ownership, segregation, recovery, or access rights over safeguarded assets fail under applicable law or contract. The assessment record should separate observed evidence supporting the possibility that ownership, segregation, recovery, or access rights over safeguarded assets fail under applicable law or contract from assumptions, state the time horizon and existing controls, and identify who owns any remaining exposure. Monitoring should test whether the conditions described in the possibility that ownership, segregation, recovery, or access rights over safeguarded assets fail under applicable law or contract have changed enough to require a new rating, treatment, or approval.

Decision-makers should use findings about the possibility that ownership, segregation, recovery, or access rights over safeguarded assets fail under applicable law or contract to select treatment, assign remediation, set review thresholds, and document why any residual exposure is accepted.