When a listed treasury companyCorporate TreasuryA company that adopts Bitcoin as a primary or significant balance-sheet asset.View term → announces it holds 50,000 bitcoin on its balance sheet, or when a spot ETF moves billions of dollars, the question that truly matters for the institutional investor is not the price at which the coins were bought, but who custodies those private keys and under what guarantees. Institutional crypto custody is the invisible layer on which all corporate Bitcoin rests: if the custodian fails, the investment thesis is irrelevant. This guide walks through what institutional custodyCrypto CustodySafeguarding the private keys to Bitcoin or other cryptocurrencies — yourself (self-custody) or by delegating it to a professional provider that is accountable for their security.View term → is, who the main institutional cryptocurrency custody providers are, how treasuries and spot ETFs custody their Bitcoin, what technology and insurance they use, and what regulation requires on both sides of the Atlantic.
What institutional custody is and how it differs from self-custody
Institutional crypto custody is the professional service of safeguarding digital assets on behalf of third parties — funds, ETFs, listed companies, banks, family offices — subject to regulatory standards, operational controls and, usually, a fiduciary or financial licence. It is not the same as the retail investor's self-custodySelf-CustodyDirect control of Bitcoin private keys without relying on a third party.View term →: where retail manages a hardware wallet and its seed phrase, an institution needs auditable processes, segregation of assets, insurance coverage, role-based access controls and the ability to pass the due diligence of an auditor or a regulator.
The key difference is not technological but one of responsibility and accountability. An institutional custody provider takes on contractual and legal obligations over the assets it holds: it must prove where the keys are, who can move them, how they are segregated from its own balance sheet and what happens if the entity goes bankrupt. That is why a regulated fund cannot simply "keep the Bitcoin in a safe": in many jurisdictions it is required to use a qualified custodian that meets specific requirements.
Against pure self-custody, institutional custody removes the single point of failure — the seed in the hands of one person — in exchange for introducing counterparty risk. Good institutional custody minimises that risk with segregation, insurance and transparency. The counterpoint from the retail investor's perspective is covered further down this page; in this first part we focus on how the Bitcoin that backs listed companies and ETFs is safeguarded.
Main institutional custody providers
The market of institutional cryptocurrency custody providers is dominated by a handful of specialised players, joined in 2026 by traditional banking. These are the main institutional crypto custody providers:
- Coinbase Custody / Coinbase Prime. It is the reference custodian for US institutional Bitcoin. It operates as a New York trust with qualified-custodian status and, in addition, received conditional approval from the OCC for a national fiduciary bank charter. It holds the bulk of the assets of US spot Bitcoin ETFs. - BitGo. A pioneer of institutional custody, built on offline cold storageCold StorageStoring Bitcoin in wallets with no internet connection.View term → and multi-sigMulti-SigCustody scheme requiring multiple private keys to authorize a transaction.View term → and MPC schemes, with insurance policies over the assets it custodies. Widely used by exchanges, funds and treasuries. - Anchorage Digital. The first crypto bank with a federal charter in the US, supervised by the OCC. It combines qualified custody with digital-asset banking services. - Fidelity Digital Assets. Fidelity's digital-assets arm, which operates under a New York Trust Charter and custodies its own ETF and the assets of institutional clients. - Fireblocks. More than a pure custodian, it is the MPC technology infrastructure on which many institutions build their own custody and transfer operations. - Copper and Gemini Custody. They round out the group of institutional providers with segregated custody, off-exchange settlement and insurance coverage.
The big new development of 2026 is the entry of traditional banking. Citi announced the launch of an institutional Bitcoin custody service, and both Citi and Morgan Stanley are expanding their custody, trading and asset-tokenisation capabilities. The arrival of systemic banks in the custody business validates the sector and, at the same time, intensifies competition against the crypto-native players. You can compare each one's charter, technology and who they custody for in the comparison table further up this page.
How corporate treasuries custody their Bitcoin
A Bitcoin treasury — a listed company whose balance sheet is, in essence, Bitcoin — rarely self-custodies its entire position. The norm is to split the Bitcoin across one or several qualified institutional custodians, sometimes combined with a self-custody component using multi-sig for part of the treasure. The goal is threefold: to comply with auditors and regulators, to diversify counterparty risk across several custodians and to be able to prove ownership of the assets to shareholders.
In practice, the treasury signs a custody agreement with a provider such as Coinbase Prime, BitGo or Anchorage, which keeps the keys in segregated cold storage in the client's name. Transfers are authorised through multi-sig schemes or role-based approvals, so that no single employee can move the Bitcoin. Some treasuries add a self-custody layer with multi-sig to reinforce sovereignty over a portion of the balance, especially those most aligned with the "not your keys, not your coins" philosophy.
The quality of custody is, in fact, an analytical criterion when comparing treasuries: a company that details who its custodians are, how it segregates assets and whether it publishes proof of reservesProof of ReservesA cryptographic, audited demonstration that a custodian or exchange actually holds the assets it claims to custody for its clients.View term → offers a very different guarantee from an opaque one. In the Bitcoin treasuries directory we track listed companies with Bitcoin on the balance sheet, and the strength of their custody model is part of what defines their risk profile.
Who custodies the Bitcoin of spot ETFs
Spot Bitcoin ETFs are the most visible — and most concentrated — case of institutional custody. The legal structure of a spot ETF requires the underlying Bitcoin to be held by a qualified custodianQualified CustodianA regulated entity — a bank or chartered trust — that meets the legal requirements to custody the assets of clients such as funds, RIAs and ETFs.View term →, separate from the fund manager. And here the data is striking: Coinbase Custody holds around 80-84% of the assets of US spot Bitcoin ETFs, a figure on the order of $74-77 billion, and acts as custodian for 9 of the 12 US spot ETFs.
That concentration is one of the most discussed systemic risks in the sector: an enormous share of listed "paper" Bitcoin depends operationally on a single custodian. That is why some issuers have diversified:
- BlackRock IBIT, the largest spot ETF, added Anchorage Digital as an additional custodian alongside Coinbase, spreading counterparty risk. - VanEck HODL started with Gemini as custodian and later added Coinbase. - Fidelity is the notable exception: it custodies its own ETF through Fidelity Digital Assets, its New York trust, without relying on Coinbase.
For the investor, understanding who custodies each ETF's Bitcoin is part of the risk analysis. In the Bitcoin ETFs section we track the flows and characteristics of the main listed products, and the identity of the custodian is a structural data point, not an anecdotal one.
Institutional custody solutions and technology
Crypto custody solutions for institutions are built on several layers worth distinguishing:
Cold storage. The standard of institutional custody is to keep the vast majority of keys in cold storage, that is, on devices completely disconnected from the internet, in secure, geographically distributed physical locations. Only a minimal fraction of assets remains "hot" for daily operations. The 2026 trend is the shift from pure cold storage to hybrid models that incorporate support for the Lightning NetworkLightning NetworkLayer 2 for instant payments on top of Bitcoin, designed for low-cost transactions.View term → and other layer 2s, enabling instant liquidity without sacrificing the security of the bulk of the treasure.
Multi-sig versus MPC. There are two dominant architectures for avoiding a single point of failure. Multi-sig distributes several independent keys and requires a quorum (for example, 3 of 5) to move funds. MPC (multi-party computation) cryptographically splits a single key into several "shares" that are never reconstructed in full in a single place. Multi-sig is native to Bitcoin and highly transparent; MPC is more flexible across different blockchains and faster operationally. Many providers combine both.
Asset segregation. A good custodian keeps each client's assets separate from its own and from those of other clients, so that in the event of the custodian's bankruptcy the client's Bitcoin does not enter the insolvency estate. This is one of the central requirements of both European and US regulators.
Insurance. Serious institutional custodians take out policies covering theft, loss of keys and, in some cases, internal fraud. The scope and limits of insurance vary widely, and they are a key point of due diligence.
Proof of reserves. More and more custodians and treasuries publish proof of reserves: a cryptographic or audited demonstration that the custodied assets genuinely exist and match the liabilities. After the collapses of the last generation of platforms, verifiable transparency has become a competitive differentiator.
Regulation: MiCA in Europe and qualified custodians in the US
Institutional custody cannot be understood without its regulatory framework, which diverges between Europe and the United States.
In Europe, the MiCA regulation (Markets in Crypto-Assets) is the reference. MiCAMiCAMarkets in Crypto-Assets: the European Union's regulatory framework for digital assets, in force since 2024.View term → requires anyone providing crypto-asset custody services to be authorised as a CASP (Crypto-Asset Service Provider). Among its requirements: minimum regulatory capital, segregation of client assets from the custodian's own balance sheet, governance and internal controls, and — especially relevant — liability of the custodian for the loss of the crypto-assets it custodies. This materially raises the bar for who can offer institutional custody in the EU and grants the institutional client legal protection that did not exist before.
In the United States, the central concept is that of the qualified custodian. Many regulated institutions can only hold assets with custodians that meet certain fiduciary requirements. The main routes are the New York trust charter (used by Coinbase Custody and Fidelity Digital Assets) and the federal fiduciary bank charter supervised by the OCC, which Anchorage Digital already holds and to which Coinbase aspires with its conditional approval. The existence of these charters is what allows a spot ETF or a regulated fund to custody Bitcoin in compliance with securities rules.
The convergence of both frameworks in 2026 points the same way: institutional custody is ceasing to be a "best effort" service and becoming a regulated activity with explicit legal liability.
How to choose an institutional custodian: a checklist
For a treasury team, a fund or an ETF issuer, choosing a custody provider is a governance decision. A practical checklist:
- Regulatory status. Is it a qualified custodian, a trust charter or a bank with an OCC charter? Is it authorised as a CASP under MiCA in the EU? - Asset segregation. Are client assets legally separated from the custodian's balance sheet and safe in the event of bankruptcy? - Technical architecture. Offline cold storage for the bulk? Multi-sig, MPC or both? Geographic distribution of keys? - Insurance. What exactly does the policy cover and with what limits? Theft, loss of keys, internal fraud? - Proof of reserves and audit. Does it publish proof of reserves? Are there independent controls audits (SOC-type)? - Diversification. Is it worth using more than one custodian so as not to concentrate all counterparty risk in a single one, as some ETFs already do? - Provider strength. Track record, financial backing, governance and a history free of serious incidents.
Diversifying across custodians, demanding legal segregation and verifying proof of reserves are best practices today, not luxuries.
Custody is not only an institutional question. If you manage your own Bitcoin, the same principles apply at your scale. This second part walks through the custody models available to the individual investor and how to choose yours.
The three custody models (and the hybrid)
1. Exchange custody. The on-ramp for almost everyone. You buy on a platform and the balance "is there": in reality, the exchange controls the keys and you hold a credit claim against the company. It is convenient — password recovery, support, instant operations — and today, with the MiCA regulation in Europe, authorised providers must segregate client assets and are liable for their loss. But the sector's history is full of reminders that convenience concentrates risk: hacks, insolvencies and frozen withdrawals give no warning. Rule of thumb: on the exchange, only what you are actively trading.
2. Professional delegated custody. A step up are specialist custodians — Coinbase Custody, Fidelity Digital Assets, BitGo, Anchorage, Xapo Bank. This is the institutional-money model: cold storage, multisig schemes, fund segregation, insurance policies and audits. For a company or a meaningful estate that does not want to (or cannot) take on key operations, it is the route with auditable guarantees. The trade-off: fees, slower withdrawal processes and, again, counterparty risk — mitigated by regulation and insurance, but never zero.
3. Self-custody. Bitcoin's native option: your keys, your money, no intermediary. Self-custody removes counterparty risk entirely — no one can go bankrupt with your Bitcoin inside — in exchange for moving 100% of the operational responsibility to you: generating and storing the seed correctly, protecting it from physical and digital theft, and resolving transmission if you are gone.
The growing hybrid: collaborative multisig. Between pure self-custody and full delegation there is an increasingly used middle ground: 2-of-3 schemes where you hold one key, a provider holds another and a third is a backup. No single party can move funds; you do not depend on a single point of failure. For mid-to-high net worth without an extreme technical profile, it is probably the best risk/effort balance available today.
Hot wallet vs cold wallet
Within self-custody, the key distinction is whether the keys touch the internet.
Hot wallet: an app on your phone or computer, keys on a connected device. Perfect for small amounts and frequent use — it is your pocket wallet, not your safe. Its attack surface is your device: malware, phishing, SIM swapping.
Cold wallet: the keys are generated and live on an offline device — typically a hardware wallet. You sign transactions on the device and the private key never leaves it. It is the standard for long-term savings. Mistakes here are almost never the device's fault but the process's: buying the device second-hand, storing the seed in a phone photo or the cloud, or never testing recovery.
Three rules that avoid 90% of disasters: always buy the hardware wallet from the manufacturer or an official distributor; write the seed on physical media (paper or metal) and never digitise it — no photos, no password managers, no cloud; and run a recovery drill with small amounts before moving your real position there.
Is it safe to leave crypto on an exchange?
The honest answer: it depends on the exchange, the amount and the time horizon. In 2026, regulation works in the exchange's favour — MiCA requires European providers to hold authorisation, capital, asset segregationAsset SegregationKeeping client assets legally and operationally separate from the custodian's balance sheet, so they do not enter the bankruptcy estate if it fails.View term → and liability for loss, far from the wild west of a few years ago. Against it run concentration (you are a creditor, not an owner), the sector's track record, and a detail often forgotten: in a hack, even if the provider makes you whole, you can spend weeks without access.
The criterion we use: an amount that would hurt to lose + a horizon beyond a few months = off the exchange, into a cold wallet or regulated custodian. Operating balances and recent purchases can wait on the platform.
How to decide: three profiles
If you are starting out (under a few thousand): a regulated exchange with well-configured 2FA is reasonable. The jump to a hardware wallet comes when the balance would already keep you up at night.
If you are a long-term holder: a cold wallet as the base, with the seed on physical media and an inheritance plan resolved — a will that covers the keys and a procedure for your heirs to access them. For larger estates, collaborative multisig or a regulated custodian for part of it.
If you manage company money: an institutional custodian with segregation and audit, or multisig with a documented signing policy. Self-custody in the CFO's drawer does not pass due diligence — and should not.
The five mistakes that have lost the most Bitcoin
Neither sophisticated hacks nor protocol failures: most lost Bitcoin is lost to simple mistakes. The seed photographed or uploaded to the cloud. The exchange used as a safe for years. The hardware wallet bought on a second-hand marketplace. The passphrase so clever even its owner cannot remember it. And the inheritance with no plan: perfect keys that die with their holder. Each has a cheap remedy — and all are more likely than the movie scenario we tend to fear.
Custody is not a technical topic: it is managing the one Bitcoin risk that depends entirely on you. Choosing the right model for your profile — and executing it with discipline — is worth more than any price prediction.
Conclusion
Institutional crypto custody is the silent infrastructure that sustains all corporate Bitcoin: listed treasuries, spot ETFs and, increasingly, traditional banking. The 2026 snapshot shows a concentrated market — with Coinbase custodying the bulk of US ETFs — but in full diversification and professionalisation, with MiCA raising the standard in Europe and fiduciary charters articulating the model in the US. For the investor analysing a treasury or an ETF, knowing who custodies the Bitcoin, under what guarantees and with what transparency is no longer a technical detail: it is a central part of the risk thesis.