When a listed treasury company announces it holds 50,000 bitcoin on its balance sheet, or when a spot ETF moves billions of dollars, the question that truly matters for the institutional investor is not the price at which the coins were bought, but who custodies those private keys and under what guarantees. Institutional crypto custody is the invisible layer on which all corporate Bitcoin rests: if the custodian fails, the investment thesis is irrelevant. This guide walks through what institutional custody is, who the main institutional cryptocurrency custody providers are, how treasuries and spot ETFs custody their Bitcoin, what technology and insurance they use, and what regulation requires on both sides of the Atlantic.
What institutional custody is and how it differs from self-custody
Institutional crypto custody is the professional service of safeguarding digital assets on behalf of third parties — funds, ETFs, listed companies, banks, family offices — subject to regulatory standards, operational controls and, usually, a fiduciary or financial licence. It is not the same as the retail investor's self-custody: where retail manages a hardware wallet and its seed phrase, an institution needs auditable processes, segregation of assets, insurance coverage, role-based access controls and the ability to pass the due diligence of an auditor or a regulator.
The key difference is not technological but one of responsibility and accountability. An institutional custody provider takes on contractual and legal obligations over the assets it holds: it must prove where the keys are, who can move them, how they are segregated from its own balance sheet and what happens if the entity goes bankrupt. That is why a regulated fund cannot simply "keep the Bitcoin in a safe": in many jurisdictions it is required to use a qualified custodian that meets specific requirements.
Against pure self-custody, institutional custody removes the single point of failure — the seed in the hands of one person — in exchange for introducing counterparty risk. Good institutional custody minimises that risk with segregation, insurance and transparency. If you want the counterpoint from the retail investor's perspective, we develop it in our crypto custody guide for individuals; here we focus on how the Bitcoin that backs listed companies and ETFs is safeguarded.
Main institutional custody providers
The market of institutional cryptocurrency custody providers is dominated by a handful of specialised players, joined in 2026 by traditional banking. These are the main institutional crypto custody providers:
- Coinbase Custody / Coinbase Prime. It is the reference custodian for US institutional Bitcoin. It operates as a New York trust with qualified-custodian status and, in addition, received conditional approval from the OCC for a national fiduciary bank charter. It holds the bulk of the assets of US spot Bitcoin ETFs. - BitGo. A pioneer of institutional custody, built on offline cold storage and multi-sig and MPC schemes, with insurance policies over the assets it custodies. Widely used by exchanges, funds and treasuries. - Anchorage Digital. The first crypto bank with a federal charter in the US, supervised by the OCC. It combines qualified custody with digital-asset banking services. - Fidelity Digital Assets. Fidelity's digital-assets arm, which operates under a New York Trust Charter and custodies its own ETF and the assets of institutional clients. - Fireblocks. More than a pure custodian, it is the MPC technology infrastructure on which many institutions build their own custody and transfer operations. - Copper and Gemini Custody. They round out the group of institutional providers with segregated custody, off-exchange settlement and insurance coverage.
The big new development of 2026 is the entry of traditional banking. Citi announced the launch of an institutional Bitcoin custody service, and both Citi and Morgan Stanley are expanding their custody, trading and asset-tokenisation capabilities. The arrival of systemic banks in the custody business validates the sector and, at the same time, intensifies competition against the crypto-native players. You can compare each one's charter, technology and who they custody for in our institutional custodians comparison.
How corporate treasuries custody their Bitcoin
A Bitcoin treasury — a listed company whose balance sheet is, in essence, Bitcoin — rarely self-custodies its entire position. The norm is to split the Bitcoin across one or several qualified institutional custodians, sometimes combined with a self-custody component using multi-sig for part of the treasure. The goal is threefold: to comply with auditors and regulators, to diversify counterparty risk across several custodians and to be able to prove ownership of the assets to shareholders.
In practice, the treasury signs a custody agreement with a provider such as Coinbase Prime, BitGo or Anchorage, which keeps the keys in segregated cold storage in the client's name. Transfers are authorised through multi-sig schemes or role-based approvals, so that no single employee can move the Bitcoin. Some treasuries add a self-custody layer with multi-sig to reinforce sovereignty over a portion of the balance, especially those most aligned with the "not your keys, not your coins" philosophy.
The quality of custody is, in fact, an analytical criterion when comparing treasuries: a company that details who its custodians are, how it segregates assets and whether it publishes proof of reserves offers a very different guarantee from an opaque one. In the Bitcoin treasuries directory we track listed companies with Bitcoin on the balance sheet, and the strength of their custody model is part of what defines their risk profile.
Who custodies the Bitcoin of spot ETFs
Spot Bitcoin ETFs are the most visible — and most concentrated — case of institutional custody. The legal structure of a spot ETF requires the underlying Bitcoin to be held by a qualified custodian, separate from the fund manager. And here the data is striking: Coinbase Custody holds around 80-84% of the assets of US spot Bitcoin ETFs, a figure on the order of $74-77 billion, and acts as custodian for 9 of the 12 US spot ETFs.
That concentration is one of the most discussed systemic risks in the sector: an enormous share of listed "paper" Bitcoin depends operationally on a single custodian. That is why some issuers have diversified:
- BlackRock IBIT, the largest spot ETF, added Anchorage Digital as an additional custodian alongside Coinbase, spreading counterparty risk. - VanEck HODL started with Gemini as custodian and later added Coinbase. - Fidelity is the notable exception: it custodies its own ETF through Fidelity Digital Assets, its New York trust, without relying on Coinbase.
For the investor, understanding who custodies each ETF's Bitcoin is part of the risk analysis. In the Bitcoin ETFs section we track the flows and characteristics of the main listed products, and the identity of the custodian is a structural data point, not an anecdotal one.
Institutional custody solutions and technology
Crypto custody solutions for institutions are built on several layers worth distinguishing:
Cold storage. The standard of institutional custody is to keep the vast majority of keys in cold storage, that is, on devices completely disconnected from the internet, in secure, geographically distributed physical locations. Only a minimal fraction of assets remains "hot" for daily operations. The 2026 trend is the shift from pure cold storage to hybrid models that incorporate support for the Lightning Network and other layer 2s, enabling instant liquidity without sacrificing the security of the bulk of the treasure.
Multi-sig versus MPC. There are two dominant architectures for avoiding a single point of failure. Multi-sig distributes several independent keys and requires a quorum (for example, 3 of 5) to move funds. MPC (multi-party computation) cryptographically splits a single key into several "shares" that are never reconstructed in full in a single place. Multi-sig is native to Bitcoin and highly transparent; MPC is more flexible across different blockchains and faster operationally. Many providers combine both.
Asset segregation. A good custodian keeps each client's assets separate from its own and from those of other clients, so that in the event of the custodian's bankruptcy the client's Bitcoin does not enter the insolvency estate. This is one of the central requirements of both European and US regulators.
Insurance. Serious institutional custodians take out policies covering theft, loss of keys and, in some cases, internal fraud. The scope and limits of insurance vary widely, and they are a key point of due diligence.
Proof of reserves. More and more custodians and treasuries publish proof of reserves: a cryptographic or audited demonstration that the custodied assets genuinely exist and match the liabilities. After the collapses of the last generation of platforms, verifiable transparency has become a competitive differentiator.
Regulation: MiCA in Europe and qualified custodians in the US
Institutional custody cannot be understood without its regulatory framework, which diverges between Europe and the United States.
In Europe, the MiCA regulation (Markets in Crypto-Assets) is the reference. MiCA requires anyone providing crypto-asset custody services to be authorised as a CASP (Crypto-Asset Service Provider). Among its requirements: minimum regulatory capital, segregation of client assets from the custodian's own balance sheet, governance and internal controls, and — especially relevant — liability of the custodian for the loss of the crypto-assets it custodies. This materially raises the bar for who can offer institutional custody in the EU and grants the institutional client legal protection that did not exist before.
In the United States, the central concept is that of the qualified custodian. Many regulated institutions can only hold assets with custodians that meet certain fiduciary requirements. The main routes are the New York trust charter (used by Coinbase Custody and Fidelity Digital Assets) and the federal fiduciary bank charter supervised by the OCC, which Anchorage Digital already holds and to which Coinbase aspires with its conditional approval. The existence of these charters is what allows a spot ETF or a regulated fund to custody Bitcoin in compliance with securities rules.
The convergence of both frameworks in 2026 points the same way: institutional custody is ceasing to be a "best effort" service and becoming a regulated activity with explicit legal liability.
How to choose an institutional custodian: a checklist
For a treasury team, a fund or an ETF issuer, choosing a custody provider is a governance decision. A practical checklist:
- Regulatory status. Is it a qualified custodian, a trust charter or a bank with an OCC charter? Is it authorised as a CASP under MiCA in the EU? - Asset segregation. Are client assets legally separated from the custodian's balance sheet and safe in the event of bankruptcy? - Technical architecture. Offline cold storage for the bulk? Multi-sig, MPC or both? Geographic distribution of keys? - Insurance. What exactly does the policy cover and with what limits? Theft, loss of keys, internal fraud? - Proof of reserves and audit. Does it publish proof of reserves? Are there independent controls audits (SOC-type)? - Diversification. Is it worth using more than one custodian so as not to concentrate all counterparty risk in a single one, as some ETFs already do? - Provider strength. Track record, financial backing, governance and a history free of serious incidents.
Diversifying across custodians, demanding legal segregation and verifying proof of reserves are best practices today, not luxuries.
Conclusion
Institutional crypto custody is the silent infrastructure that sustains all corporate Bitcoin: listed treasuries, spot ETFs and, increasingly, traditional banking. The 2026 snapshot shows a concentrated market — with Coinbase custodying the bulk of US ETFs — but in full diversification and professionalisation, with MiCA raising the standard in Europe and fiduciary charters articulating the model in the US. For the investor analysing a treasury or an ETF, knowing who custodies the Bitcoin, under what guarantees and with what transparency is no longer a technical detail: it is a central part of the risk thesis.
