Share
Home Features Op-eds Institutional custody of cryptocurrencies: Beyond the ‘not your keys’ myth

Institutional custody of cryptocurrencies: Beyond the ‘not your keys’ myth

Digital asset custody for institutions is a game of operational resilience, multi-layer security, and audit trails
Institutional custody of cryptocurrencies: Beyond the ‘not your keys’ myth
Self-custody sounds cool when you’re managing a few tokens here and there. But when you scale up to billions in assets, things start to look a little different.

Ah, the classic rallying cry of the crypto world: “Not your keys, not your coins!” You can practically hear it echoing through X (formerly Twitter) threads and Discord channels. It’s catchy, it’s memorable, and it’s got that cryptopunk vibe that makes you want to buy a hardware wallet and go off the grid. But what if I told you that applying this motto universally is like deciding that because your cat doesn’t like the vet, hospitals must be terrible for humans too?

Let’s talk about why the industry’s knee-jerk “not your keys, not your coins” attitude might be completely missing the point for institutional custody — and why, just maybe, trusting a well-regulated custodian could save you from a lot more than losing sleep.

It’s not just about storage, it’s about survival

For institutional investors, managing digital assets isn’t about taking a hardware wallet and throwing it in a safe like it’s a spy movie USB with state secrets. We’re talking about managing millions, sometimes billions, of dollars in assets. It’s about keeping those assets safe while also meeting compliance requirements, preparing for audits, and keeping everyone from the regulator to the board members happy. And let’s face it: no one wants to be the guy or gal that had to explain to investors that their coins vanished because Bob from accounting decided to “safely” self-custody them under his mattress.

Read: Is Bitcoin a bubble? Sure, if bubbles could last for decades

A recent 2023 report by Deloitte highlighted that 60 percent of institutions investing in digital assets use third-party custodians, and for a good reason. Digital asset custody for institutions is a game of operational resilience, multi-layer security, and audit trails — not a game of “hide the keys”. Institutions need custodians who not only keep assets safe but also create a process that regulators can sleep at night knowing exists.

Not your average custodian

Another common myth is that third-party custodians are just a fancier version of self-custody. That couldn’t be further from the truth. Think of institutional-grade custodians as Fort Knox on steroids — armed with everything from multi-signature wallet technology to advanced insurance policies. They have auditors coming in and kicking tires, ensuring every coin is accounted for. Chainalysis found that 92 percent of large funds use a custodian to prevent insider threats and human error — because, newsflash, sometimes the biggest risk to your assets is the well-meaning but forgetful human who accidentally leaves the recovery phrase written on a Post-it.

Read | Bitcoin: A divisive asset the world can’t ignore

In the spirit of humor, picture an investment firm’s chief compliance officer with a framed motto on the wall: “Trust Bob, but verify Bob has a custodian”. Human error accounts for up to 95 percent of all data breaches, according to IBM’s 2022 Security Report, and that statistic includes crypto breaches. So, sure, “not your keys” sounds empowering — until you realize that keeping those keys secure involves putting more trust in fallible humans than most of us have in our teenagers to remember the Wi-Fi password.

It’s also about scalability

Self-custody sounds cool when you’re managing a few tokens here and there. But when you scale up to billions in assets, things start to look a little different. You’re not just holding crypto, you’re holding your clients’ livelihoods, your company’s reputation, and possibly, the market’s next potential heart attack. BlackRock’s recent research on institutional adoption found that 75 percent of institutional respondents cited regulatory compliance as their top concern when it comes to digital assets — something third-party custodians excel at, while self-custody… doesn’t quite.

Custody isn’t just about keeping assets safe — it’s about operational efficiency, ease of audit, and compliance. It’s about not getting a call from your regulator asking why 400 million dollars’ worth of tokens went “poof”. (Hint: “We trusted Bob” isn’t going to cut it.)

How about “Not Your Keys, Not Your Legal Liability”?

Sure, the idea of being the master of your own keys sounds romantic — like a modern crypto-era knight defending your digital castle. But here’s where the plot twist comes in: for institutions, third-party custody isn’t about relinquishing control, it’s about having the best combination of security, insurance, and accountability in place. It’s about making sure there’s an army at the gate and not just a lone knight who overslept because, you know, “Bob forgot the keys”.

And if you’re wondering about the legal side, consider this: regulated custodians provide insurance. They offer accountability frameworks. They have documented disaster recovery plans. If your self-custody “disaster recovery plan” involves scribbling a seed phrase on the back of a napkin, then I’d recommend getting acquainted with the term “institutional grade”.

Custody isn’t one-size-fits-all

So, what’s the takeaway here? The industry has got it wrong if it thinks institutional custody is all about being a paranoid coin hoarder. Institutions have bigger fish to fry: legal frameworks, client obligations, regulatory compliance, risk management — all things that Bob’s garage wallet isn’t going to cut it for.

Next time someone waves the “Not your keys, not your coins” banner, feel free to remind them that if Bob from accounting has the keys, it’s probably still not your coins… or your peace of mind. Custodians are here for a reason — to keep digital assets secure at a scale, to navigate regulations, and most importantly, to keep Bob from becoming an internet meme.

Amir Tabch is a war-time and peace-time CEO

Amir Tabch, a war-time and peace-time CEO, is known for his visionary leadership in the regulated financial services and fintech markets. His expertise in investment banking, wealth management, brokerage, multi-asset class trading, and custody, combined with his knowledge of fintech, blockchain and Web3, has positioned him as a key figure in the industry. As chairman and CEO, Tabch has spearheaded several initiatives that have accelerated growth across global markets. A board member in various fintech companies, he has driven forward cutting-edge wealthtech and regtech solutions, contributing to technological advancements through the development of sophisticated portfolio management systems, automated trading platforms, and advanced investment advisory services.

Disclaimer: Opinions conveyed in this article are solely those of the author. The information presented in this article is intended for informational purposes only. It does not constitute advice on tax and legal matters; neither are they financial or investment recommendations. Refer to our full disclaimer policy here.