Crypto Custody Solutions

Why Custody Is Different in Digital Assets

In traditional finance, custody is straightforward. A custodian bank holds securities in street name, the legal framework for asset segregation is well-established, and insurance programs (SIPC in the US) provide a safety net. The custodian is an operational convenience, not an existential dependency.

In digital assets, custody is existential. Whoever controls the private keys controls the assets. There is no central authority to reverse unauthorized transfers. There is no SIPC equivalent that automatically protects custodied digital assets. A failure in key management can result in permanent, irrecoverable loss.

This reality has driven the development of specialized custody infrastructure that has no parallel in traditional finance. Institutional custodians use multi-party computation (MPC), multi-signature wallets, hardware security modules (HSMs), geographic distribution of key material, and sophisticated governance frameworks to protect digital assets.

For institutional allocators, the choice of custodian affects not only security but also operational efficiency. How quickly can assets be moved from cold storage to a trading venue? How does the custodian handle multi-chain assets? What are the withdrawal approval workflows? Does the custodian integrate with the institution's trading platform? These operational questions are as important as security architecture for a fund that trades actively.

• Private key control equals asset control, with no recourse for unauthorized transfers
• No SIPC equivalent for digital assets, making custodian due diligence critical
• Specialized technologies: MPC, multi-sig, HSMs, geographic key distribution
• Operational efficiency: cold-to-hot transfer speed, multi-chain support, approval workflows
• Integration requirements: custodian must connect seamlessly with trading infrastructure

The FSB sets out international recommendations in its global regulatory framework for crypto-asset activities.

Custody covers more than storage. A usable setup has policies for approvals and roles, a way to move assets to trading venues, support for the chains an institution holds, and records an auditor can follow. In the US, the OCC has said national banks may offer cryptocurrency custody services.

Liquid Mercury, the Chicago-based institutional digital asset infrastructure provider, is not a custodian. It builds trading and settlement software that connects to custodians, which is the subject of the connected trading section below.

Custody models: direct, sub-custody and self-custody

The right model depends on the regulatory status you need, the staff you have and how often you move assets. Many institutions combine models, for example self-custody for long-term holdings and a third-party custodian for assets used in trading. US banking agencies set out their view of crypto-asset risks in a joint statement.

Key Custody Technologies: MPC, Multi-Sig, and HSMs

Three core technologies underpin institutional crypto custody, each with distinct security properties and operational trade-offs.

Multi-party computation (MPC) distributes the private key across multiple parties so that no single party ever holds the complete key. To sign a transaction, a threshold number of parties must contribute their key shares through a cryptographic protocol that produces a valid signature without ever reconstructing the full key. MPC offers strong security guarantees and operational flexibility, as key shares can be refreshed and redistributed without changing the underlying wallet address. Fireblocks has popularized MPC-based custody with its institutional platform.

Multi-signature (multi-sig) wallets require multiple independent private keys to authorize a transaction. A 3-of-5 multi-sig wallet, for example, requires three out of five designated keys to sign before a transaction is valid. Multi-sig is implemented at the blockchain protocol level (natively on Bitcoin, through smart contracts on Ethereum) and provides transparent, on-chain verification of the signing policy. BitGo pioneered institutional multi-sig custody and remains a leading provider.

Hardware security modules (HSMs) are tamper-resistant physical devices that store key material and perform cryptographic operations in an isolated environment. HSMs ensure that private keys never exist in software memory where they could be extracted by malware. Enterprise-grade HSMs meet FIPS 140-2 Level 3 or higher standards and are used by custodians as a foundational layer underneath MPC or multi-sig implementations.

Most institutional custodians combine these technologies. A typical architecture might use MPC for key generation and signing, backed by HSMs for key storage, with multi-sig governance for high-value transfers. The specific combination reflects each custodian's security philosophy and the regulatory requirements they operate under.

• MPC: distributed key shares, threshold signing, key refresh without address changes
• Multi-sig: multiple independent keys required, on-chain verification, protocol-level security
• HSMs: tamper-resistant hardware, FIPS 140-2 certified, keys never in software memory
• Combined architectures: MPC signing + HSM storage + multi-sig governance for layered security
• Trade-offs: MPC offers flexibility, multi-sig offers transparency, HSMs offer physical isolation

Custody providers combine several storage and signing methods. Each has an honest trade-off.

• Hot storage. Keys on an internet-connected system. Fast to move, and the most exposed to attack.
• Warm storage. Keys on a system with limited connectivity or extra approval steps. A middle point between speed and exposure.
• Cold storage. Keys kept offline. Strongest against remote attack, slower to move, and dependent on careful procedures.
• Multi-signature. A transaction requires approval from several independent keys. Transparent on-chain policy, with more operational coordination.
• Multi-party computation (MPC). The key is split into shares so no single party holds the whole key, and a threshold of parties signs together. Flexible to administer, and it relies on the provider's cryptography and implementation.
• Hardware security modules (HSMs). Tamper-resistant devices that keep key material out of ordinary software memory. Strong physical isolation, usually used as a layer under other methods.

Most institutional custodians layer these rather than choosing one. If you are asking whether cold storage or hot storage is better, the answer is usually both: cold for reserves, a controlled warm or hot tier for working balances.

Why custody matters for trading firms

For a trading firm, custody is also a liquidity question. Keeping assets with a separate custodian can reduce direct exposure to a trading venue, but protection depends on legal segregation, collateral arrangements and settlement terms. Custody, operational and access risks remain, and assets may not be immediately available for trading. Assets pre-funded at a venue are ready to trade but exposed to that venue. Most firms manage this tension by splitting balances across tiers and moving between them on a schedule, which makes withdrawal workflows and settlement timing part of the trading plan, not just the security review.

Comparing Leading Institutional Custodians

The institutional custody landscape has matured significantly, with several providers establishing themselves as trusted solutions for funds, family offices, and corporate treasuries.

BitGo was the first qualified custodian for digital assets and remains one of the most widely used. It pioneered multi-sig custody for Bitcoin and has expanded to support hundreds of assets across multiple blockchains. BitGo Trust Company is a South Dakota chartered trust company, providing a regulated framework for asset segregation. Its custody solution includes a $250 million insurance policy, SOC 2 Type 2 compliance, and integration APIs that connect to major trading platforms. BitGo's strength is its track record and the breadth of its integration ecosystem.

Fireblocks built its platform around MPC technology and has become the infrastructure layer for a large portion of institutional crypto transactions. Rather than operating as a standalone custodian, Fireblocks provides a platform that combines MPC-based wallet infrastructure with a secure transfer network connecting exchanges, OTC desks, and counterparties. Its Network Transfer feature allows institutions to move assets between connected parties without on-chain transactions, reducing fees and settlement time. Fireblocks holds SOC 2 Type 2 certification and supports hundreds of blockchains and tokens.

Gemini Custody is operated by Gemini Trust Company, LLC, a New York trust company regulated by the New York State Department of Financial Services (NYDFS). NYDFS regulation is considered among the most stringent in the US, giving Gemini Custody a strong compliance position. It uses a combination of cold storage with offline key generation, HSMs, and multi-sig authorization. Gemini Custody carries insurance coverage and provides institutional-grade SLAs for withdrawal processing.

Other notable custodians include Coinbase Custody (part of Coinbase Prime, regulated as a NY trust company), Anchorage Digital (the first federally chartered digital asset bank in the US), and Copper (known for its ClearLoop off-exchange settlement network).

• BitGo: first qualified custodian, multi-sig pioneer, $250M insurance, SOC 2 Type 2, broad integrations
• Fireblocks: MPC-based platform, secure transfer network, off-chain transfers, 1,500+ token support
• Gemini Custody: NYDFS regulated, cold storage + HSM + multi-sig, stringent compliance framework
• Coinbase Custody: NY trust company, part of Coinbase Prime, broad asset support
• Anchorage Digital: first federally chartered digital asset bank, OCC regulated

The table lists the custodians that appear as integrations in Liquid Mercury's materials. It is not a ranking, and it does not claim any provider is better than another. Cells are taken from each provider's own public pages, accessed 2026-10-15. Fireblocks and Balance are omitted because their public pages could not be fetched for checking.

Other custodians exist beyond this list. Using more than one is common, and a trading platform that integrates with several lets you keep assets with the custodian each use case needs. For how custody fits a broader service bundle, see crypto prime brokerage.

How to Evaluate a Crypto Custodian

Selecting a custodian requires evaluating multiple dimensions beyond headline security features. Institutional due diligence should cover security architecture, regulatory status, insurance, operational capabilities, and integration ecosystem.

Security architecture assessment should go beyond marketing materials. Request detailed documentation on key generation, storage, and signing processes. Understand the threat model: what attack vectors does the architecture protect against, and what are the residual risks? Review independent security audit reports and penetration test results. Ask about incident response procedures and whether the custodian has experienced any security events.

Regulatory status determines the legal framework protecting your assets. A custodian operating as a qualified custodian under the Investment Advisers Act, a state-chartered trust company, or a federally chartered bank provides stronger asset segregation and fiduciary protections than an unregulated provider. Verify the custodian's regulatory status directly with the relevant authority.

Insurance coverage varies significantly across providers. Understand what is covered (theft, internal fraud, operational errors), what is excluded (smart contract failures, protocol-level exploits), and what the per-client and aggregate limits are. Compare the insurance coverage against the value of assets you plan to custody.

Operational capabilities include withdrawal processing times (SLAs for moving assets from cold storage to a trading venue), multi-chain support (which blockchains and tokens are supported), staking support (for proof-of-stake assets), and governance features (approval workflows, role-based access controls, audit logs).

Integration ecosystem determines how the custodian fits into your trading workflow. Does it connect to your trading platform? Can it integrate with your portfolio management system? Does it support automated settlement workflows? A custodian with broad integration partnerships reduces the custom development required to build a seamless operational flow.

• Security: review key management architecture, independent audits, penetration tests, incident history
• Regulation: verify qualified custodian status, trust charter, or banking license directly
• Insurance: coverage types, exclusions, per-client limits, aggregate limits
• Operations: withdrawal SLAs, multi-chain support, staking, governance workflows
• Integration: trading platform connectivity, portfolio management compatibility, settlement automation

Look beyond the marketing page on five areas.

1. Status. Is the provider a qualified custodian, a chartered trust company or a licensed bank in your jurisdiction? Verify directly with the relevant authority.
2. Insurance. What is covered, what is excluded, and what are the per-client and aggregate limits?
3. Proof of reserves. Can you verify that assets held for clients exist?
4. Segregation. Are client assets segregated from the provider's own, and how is that documented?
5. Operations and connectivity. What are withdrawal approval workflows, supported chains, and audit logs? Does the custodian connect to your trading platform and portfolio systems?

Ask for written answers and compare them, rather than relying on one provider's summary of itself.

Custodian risk is one of five exposure layers a desk has to watch. See crypto prime brokerage risk management.

Custody-integrated trading

Custody and trading used to be separate worlds. Assets sat with a custodian, and moving them to an exchange or OTC desk was a manual step with time and operational risk attached. Custody-integrated trading connects the two so execution, the ledger and settlement work against the assets in custody.

In Liquid Mercury's platform, custody integration is a standard part of the stack. BitGo is the custody and Crypto-as-a-Service partner across Liquid Mercury products. Mercury Pro lists BitGo, Gemini Custody, Fireblocks and Balance as custody integrations, and Mercury OTC connects to custody and KYC partners so a desk's clients can deposit, withdraw and settle. For tokenized assets, Mercury RWA pairs BitGo custody integration with KYC verification, Mercury Ledger position keeping and delivery versus payment settlement, so the asset and the payment move together.

Executing block trades from qualified custody

A block trade is a large order that would move the price on a public order book. Handling one from qualified custody means the assets stay with the custodian until the trade is agreed, and the trade settles against them rather than against a balance pre-funded at a venue. In an electronic OTC workflow the sequence is quote, accept, confirm and settle.

For the market structure behind large trades, see crypto block trading, and for the counterparty exposure in these trades, counterparty risk in digital asset OTC trading.

Trading OTC from cold storage

Cold storage is offline by design, so trading from it means a controlled release of assets at settlement rather than a standing balance on a venue. The practical question for any setup is how long that release takes and who approves it. The wider OTC picture is in OTC trading in crypto.