Crypto Custody Explained
Three custody models — self, qualified, commingled — and what each means for safety.
Short answer
Three custody models: (1) Self-custody — you hold keys, zero platform risk. (2) Qualified custodian — regulated trust/bank holds segregated customer assets that survive platform bankruptcy (Coinbase Custody Trust, Sygnum, MiCA Article 75 CASPs). (3) Commingled balance-sheet custody — platform uses customer crypto in lending/operations; bankruptcy makes you unsecured creditor (pre-2022 Celsius/BlockFi model, now heavily regulated).
Why custody matters
Custody structure determines what happens to your crypto if something goes wrong with the platform. This is arguably the single most important safety characteristic — more important than Trustpilot score, more important than regulatory footprint breadth, more important than yield advertised. A platform can tick every superficial safety box and still be structurally at risk if its custody model is commingled.
The three custody models
1. Self-custody
Who holds keys: You.
Tools: Hardware wallet (Ledger, Trezor, ColdCard), software wallet (MetaMask, Rabby, Phantom), paper/steel seed backup.
Platform bankruptcy risk: Zero. No intermediary can fail.
Other risks: Losing the seed phrase, phishing attacks, physical theft, forgetting access (inheritance risk).
Best for: Long-term holdings you won\'t need to transact with daily.
2. Qualified custody
Who holds keys: A regulated custody entity (bank, trust company, SEC-qualified custodian).
Legal structure: Customer assets segregated from the custodian\'s balance sheet. In bankruptcy, segregated customer assets are typically not part of the insolvency estate.
Examples:
- Coinbase Custody Trust Company — NY-chartered trust company; holds most Coinbase customer crypto.
- Fidelity Digital Assets — NY-chartered trust; institutional focus.
- BitGo Trust Company — South Dakota trust; institutional.
- Anchorage Digital Bank — Federal OCC national trust charter.
- Sygnum Bank — FINMA-licensed Swiss bank with explicit crypto-asset segregation under Swiss banking law.
- Gemini Trust Company — NY-chartered trust.
- Kraken Bank (Payward Bank) — Wyoming SPDI with segregated custody for crypto.
- EU MiCA CASPs — Article 75 requires segregation; applies to Revolut Bank UAB, Nexo, Crypto.com EU entities, Bitpanda, Bitstamp, etc.
Platform bankruptcy risk: Low. Segregated assets should survive parent-entity bankruptcy.
Remaining risks: Operational risk at the custodian (hot wallet hack, key management failure), regulatory actions restricting access, account-level compliance freezes.
3. Commingled balance-sheet custody
Who holds keys: The platform, on its own balance sheet.
Legal structure: Your crypto deposit is a claim against the platform, not a segregated asset. The platform may lend your crypto to institutional borrowers, use it in trading operations, or use it as collateral.
Historical examples: Celsius Earn, BlockFi Interest Account, Voyager, FTX customer accounts.
Platform bankruptcy risk: High. In bankruptcy, you become a general unsecured creditor; recovery depends on bankruptcy court + asset-recovery efforts.
Celsius outcome: ~40-70% recovery, 18+ months.
FTX outcome: ~25-90% depending on claim type and timing.
Post-2022, this model has been heavily regulated down in the US and explicitly restricted in EU under MiCA. But some platforms still use it structurally — particularly for yield products where yield is necessarily funded by lending.
Reading the terms of service
To determine which custody model a platform uses, look for these specific signals:
- Named custody entity with its own regulatory licence: "Customer crypto is held at [Entity Name], a [jurisdiction]-chartered [trust company / bank]" = qualified custody.
- "Segregated accounts" without a named licensed entity: weaker. Verify what the segregation is legally backed by.
- "Your crypto is used to earn yield by being lent to institutional borrowers": explicit commingled/lending. Treat as at-risk capital.
- "Deposit/Savings Account" vs "Earn Account" distinction: Ledn has this explicit split — Custody Account = segregated, Growth Account = lent.
- "Not a bank" disclosures: most exchanges warn you their products are not deposit-insured; read what they\'re positively claiming about custody.
- Proof of Reserves + Liabilities: see proof of reserves explained. PoR tells you on-chain assets match claimed liabilities at snapshot, but doesn\'t itself prove segregation structure.
Custody mapping by platform (our coverage)
| Platform | Custody model | Named entity |
|---|---|---|
| Coinbase | Qualified | Coinbase Custody Trust Company (NY) |
| Kraken | Qualified (crypto) + FDIC (USD) | Payward Interactive / Kraken Bank SPDI |
| Gemini | Qualified | Gemini Trust Company (NY) |
| Sygnum | Qualified (Swiss bank) | Sygnum Bank AG |
| Revolut | Qualified (MiCA Art. 75) | Revolut Bank UAB + sub-custodians |
| Nexo | Qualified (MiCA Art. 75 in EU) | Nexo Capital + partner custodians |
| Crypto.com | Qualified (MiCA / local) | Varies by jurisdiction |
| Ledn Custody Account | Segregated (custody-only) | Ledn + partner custodian |
| Ledn Growth Account | Commingled / lending | Lent to institutional borrowers |
| Binance (global) | Mix — varies by jurisdiction | Binance entities + sub-custodians |
This is indicative; always verify current structure in the platform\'s terms of service.
What to do with this knowledge
- For long-term holdings: self-custody (hardware wallet).
- For active trading: qualified custodian (Coinbase, Kraken) beats commingled.
- For yield products: accept that yield comes from lending, which implies commingled risk. Treat as at-risk capital, not savings.
- For institutional scale: qualified custodian with explicit segregation + insurance + proof-of-reserves (Sygnum, Fidelity Digital Assets, Anchorage).