Crypto custody is the service of holding digital assets for someone else. The custodian controls the private keys that can move the coins, and the client holds a contractual claim on the custodian. That is the mirror image of self-custody, where the owner holds the keys directly.
What a custodian actually does
- Key generation and storage — usually split across hardware security modules, offline "cold" storage and multi-party signing, so that no single person or machine can sign alone.
- Transaction approval — policies governing who may authorise a withdrawal, to which addresses, and after what delay.
- Segregation and record-keeping — tracking which client owns which balance, and keeping client assets apart from the firm's own.
- Layered services — staking, lending and settlement built on top of the custody account itself.
Qualified custodians and the regulatory layer
"Qualified custodian" is a regulatory label rather than a marketing one. In several jurisdictions a regulated fund or adviser may place client assets only with a custodian licensed for the job — a trust company, a bank, or a firm holding a specific digital-asset charter. The label matters because it determines what happens in an insolvency and who supervises the firm's controls. Requirements differ by jurisdiction, so the same company can be a qualified custodian in one country and not in another.
Why custody is not a synonym for safety
A custodian removes the burden of key management and replaces it with counterparty risk. If the firm fails, is breached, or halts withdrawals, clients become creditors. Custody arrangements differ widely in whether assets are segregated, insured, or held on the firm's own balance sheet, and those differences tend to become visible only in a failure.
In MoonWire analysis
Institutional custody has been one of the steadiest threads in our coverage: banks and platforms adding staking to custody accounts, and settlement networks naming custodians among their founding participants — see our note on Circle's Arc validators and the crypto security hub. A custody arrangement describes who bears which risk. It is never an assurance about either party.