How to Custody Digital Assets: An Institutional Guide

What does it mean to custody digital assets?

To custody a digital asset is to control the private key that can move it, and to be able to prove that control to someone else. A Bitcoin or a tokenized fund share does not sit in a vault; it sits on a public ledger, and whoever holds the key that signs for it owns it in every practical sense. Institutional custody adds a second requirement: the arrangement has to be verifiable by an auditor, a regulator, a trustee or a successor who was not in the room when the keys were generated.

That second requirement is what separates institutional custody from a hardware wallet in a drawer. Both may keep the keys safe. Only one can show a board, an auditor or a court who controls the assets, how a transaction is approved, and what happens if the person holding the device is unavailable. Everything in this guide on how to custody digital assets follows from that distinction: the three custody models are three ways of allocating key control, the legal term qualified custodian describes who may hold the keys for a registered adviser, and cold storage, multi-signature and MPC are techniques for keeping the keys safe inside whichever model you choose.

What is a qualified custodian for digital assets?

Qualified custodian is a legal term, not a technical one. Under Rule 206(4)-2 of the Investment Advisers Act, the SEC custody rule, a registered investment adviser that has custody of client funds or securities must maintain them with a qualified custodian. The rule defines qualified custodians to include banks and savings associations, registered broker-dealers, registered futures commission merchants and certain foreign financial institutions. Assets must be held in an account either in the client's name or in the adviser's name as agent or trustee for clients.

Applying this to digital assets raises questions the rule did not anticipate. Whether a particular token is a fund or security for the rule's purposes, whether a state-chartered trust company qualifies as a bank, and how control of a private key maps to custody of an asset are all points on which the SEC has issued guidance and proposals, and on which the position continues to develop.

For a family office or institution, the practical reading is this: if you work with a registered adviser, ask which qualified custodian holds your assets and in whose name. The Abra explainer on qualified custodians covers the definitions and the open questions in more detail.

What are the different custody models?

Self-custody means the institution controls its own private keys, usually through hardware wallets or a multi-signature arrangement that requires several keyholders to approve a transaction. Its advantage is reduced reliance on a third-party custodian, while the institution assumes the operational and key-management risks directly. Its cost is that the institution carries the full operational burden: key generation, secure storage, access control, succession and recovery. A lost key or a compromised keyholder is the institution's problem alone.

Third-party custody means a regulated entity holds the keys on the client's behalf. Providers in the institutional market include Anchorage Digital, BitGo, Coinbase Prime and Fidelity Digital Assets, among others. The advantage is professional key management, audit reports, insurance programs, and a counterparty the institution's auditors recognize. The costs are fees, counterparty exposure, and reliance on the provider's regulatory standing and financial health.

Hybrid arrangements split control. A common form is a multi-signature or multi-party computation setup in which the client holds one or more keys and the custodian holds others, so neither can move assets alone. Hybrids reduce single-point-of-failure risk in both directions, at the cost of more complex operations and documentation. Institutions may use third-party or hybrid custody as holdings and governance requirements become more complex.

How does cold storage work?

Cold storage is a security technique, not a custody model. It means the private keys are generated and kept on devices that are never connected to the internet. Keys are typically created on an air-gapped machine, split or backed up onto physical media, and stored in geographically separated secure locations. Signing a transaction requires bringing the transaction to the device, signing it offline, and carrying the signed transaction back to a connected system.

Recovery procedures are the part most often neglected. A cold storage arrangement needs documented steps for restoring keys from backups, named people authorized to carry them out, and periodic tests that prove the procedure works without exposing the keys. Both self-custodians and third-party custodians use cold storage; the legal question of who has custody is separate from the technical question of how the keys are kept. An institution evaluating a custodian should ask to see the recovery procedure and the date it was last tested, not only the description of the vault.

What are multi-signature and MPC custody?

Multi-signature, or multi-sig, is an arrangement in which a transaction requires approval from a set number of keys out of a larger group, for example two of three. No single keyholder can move the assets alone. The keys can sit with different people, in different locations, or with different organizations, which is what makes multi-sig the building block of most hybrid custody arrangements. Its limits are practical: not every blockchain supports it natively, and the approval process is visible on-chain.

Multi-party computation, or MPC, achieves a similar result by a different route. Instead of several complete keys, one key is split into shares held by different parties, and the parties compute a signature together without any of them ever assembling the full key. The result looks like a single signature on-chain, works across chains, and lets policy rules govern which combinations of shares may approve which transactions. Both multi-sig and MPC are security techniques; either can sit inside self-custody, third-party or hybrid models. Abra's custody uses Fireblocks MPC infrastructure, described in the final section.

What should family offices consider when choosing custody?

Start with regulatory status. Ask what the custodian is: a bank, a trust company, a broker-dealer or something else, and in which jurisdiction. That determines which rules protect the assets and whether the arrangement satisfies the SEC custody rule if a registered adviser is involved. Then ask for the audit reports. A SOC 1 or SOC 2 report from an independent auditor describes the custodian's controls and whether they operate as described.

Insurance is the third question, and the answer needs reading closely. Ask what is covered, which events are excluded, whether the limit is per client or shared across all clients, and who the insured party is. Key recovery procedures are the fourth: how the custodian restores access if keys are lost, and how quickly.

Estate planning compatibility is the consideration family offices most often overlook. Confirm that the account can be titled to a trust or family entity, that successor trustees can be recognized under the account documentation, and that the custodian's process for a principal's death or incapacity is written down. The Abra family office page sets out how these questions fit the broader operating model.

• Regulatory status: what the custodian is, and where it is regulated.
• Audit reports: SOC 1 or SOC 2 from an independent auditor.
• Insurance: what is covered, what is excluded, per-client or shared limit, and who is insured.
• Key recovery: the documented procedure and how quickly access is restored.
• Estate compatibility: trust titling, successor trustee recognition, and the written process for death or incapacity.

What happens to custodied crypto if the custodian fails?

It depends on how the assets are held. Assets in segregated accounts titled to the client, with clear documentation that the custodian holds them as custodian rather than owner, are generally intended to remain client property outside the custodian's estate. Commingled or omnibus arrangements, or terms that permit the custodian to lend or use the assets, weaken that position. Counsel should review the custody agreement on this point before funding, not after a failure.

The 2022 failures made the distinction concrete. Customers of platforms that had pooled client assets on their own balance sheets and lent them onward became unsecured creditors when those platforms filed for bankruptcy. The question to ask any custodian, and any adviser arranging custody, is whether the assets can be rehypothecated: lent, pledged or reused. If the answer is yes, or if the agreement is silent, the client's claim in a failure may be a claim against the estate rather than a claim to specific assets. Insurance does not fill this gap. Institutional custodians typically carry crime and specie insurance covering theft from their storage, often with a shared limit across all clients; market loss, client-side compromise and a custodian's own insolvency are usually outside it. Digital assets are not FDIC insured.

How does Abra handle custody?

Abra Capital Management, LP is an SEC-registered investment adviser. Rule 206(4)-2 applies where ACM is deemed to have custody of client funds or securities, subject to the rule's scope and exceptions. Registration does not imply a certain level of skill or training. Certain eligible client assets may be held in separately managed, client-titled accounts with custody at Fireblocks Trust Company, LLC, using Fireblocks technology and applicable security controls. Assets moved to trading venues, protocols or other strategy locations are subject to the custody and counterparty characteristics of those arrangements. Multi-party computation splits key material so that no single party holds a complete key, and transactions require approvals under policy rules set at the account level.

ACM does not rehypothecate client assets for its own purposes. Assets may nevertheless be transferred, pledged or otherwise deployed when required to implement an authorized client strategy, subject to the applicable transaction and account documentation. Account activity is reported daily, and monthly statements show positions, transactions and valuations for each account.

Insurance coverage applicable to the custody arrangement is described in the custody documentation provided before funding. Clients and their counsel should review that documentation, Abra's Form ADV and the custodian's audit reports before opening an account. The Abra wealth management page describes how custody fits into the full advisory relationship.