Institutional Crypto Custody: Providers, MPC vs Multisig and What It Costs

If you run a fund, a corporate treasury, an exchange or a fintech, “where do we keep the keys?” is not a technology question you can delegate to a wallet vendor. It decides whether your clients’ assets are ring-fenced if a provider fails, whether your auditor and regulator accept the setup, and how much operational risk sits with your own staff. Most pages ranking for this search are news items about one SEC action, or vendor guides that recommend their own model.

This guide covers the rules first (US, EU and the other main hubs, dated), then compares multisig, MPC, HSM and cold storage with named failures for each, then describes the main providers from their own disclosures and regulator registers, and ends with what is and is not published about cost. There are no affiliate links on this page, and no provider paid to be included.

Last updated 14 October 2026.

What is institutional crypto custody?

Crypto custody means holding and controlling, on someone’s behalf, either the crypto assets or the means of access to them. The EU’s MiCA regulation defines the service as “the safekeeping or controlling, on behalf of clients, of crypto-assets or of the means of access to such crypto-assets” (Article 3(1), point 17, of Regulation (EU) 2023/1114). In practice the “means of access” is the private key, so custody is key management plus legal title plus operations.

Institutional custody differs from a retail exchange account in three ways: the custodian is usually a separately chartered or licensed entity (a trust company, a national trust bank, an authorised crypto-asset service provider), client assets are contractually and operationally segregated from the custodian’s own, and the client gets controls a retail user does not, such as approval policies, whitelists, audit logs and SOC reports. Google’s AI Overview for this search (checked 14 October 2026) gives a one-line definition along these lines and cites BitGo and AMINA Bank, both of which sell custody.

What is self-custody with crypto, and when do institutions use it?

Self-custody means you hold the keys yourself, with no third party able to move or freeze the assets. Institutions do it with enterprise wallet technology (MPC platforms, multisig, HSM-based systems) rather than a single hardware wallet, and it is common for exchanges and trading firms that need fast hot-wallet operations. The trade-off is that every operational failure is yours, and some regulated clients (US investment advisers in particular) are generally required to use a qualified custodian. The SEC’s October 2026 proposal, covered below, would allow adviser self-custody only when no permitted custodian is available for a specific asset. For individuals, the basics are in the site’s guide to what a seed phrase is and how to store one.

The rules: qualified custodians, charters and MiCA (as of 14 October 2026)

United States: the SEC custody rule and the October 2026 proposal

Registered investment advisers that hold client assets must keep them with a “qualified custodian” under the Advisers Act custody rule (Rule 206(4)-2). The SEC’s own release describes a qualified custodian as limited to a bank or savings association, a broker-dealer and certain other entities. For crypto, that created a gap: few such entities could custody crypto, and it was unclear whether state-chartered trust companies counted as “banks”. Here is how the position has changed, in order:

• December 2020: the SEC created a time-limited safe harbor for special purpose broker-dealers to custody digital asset securities. The SEC’s 2026 release says few broker-dealers used it.
• 23 January 2025: SEC staff issued Staff Accounting Bulletin 122, rescinding SAB 121 (effective 30 January 2025). SAB 121 had required firms safeguarding crypto for others to book a liability and matching asset on their balance sheet, which made custody expensive for banks. Under SAB 122, firms decide whether to recognise a loss liability under the general contingency rules (ASC 450-20 or IAS 37).
• 12 June 2025: the SEC formally withdrew its 2023 “Safeguarding Advisory Client Assets” proposal, which had never been adopted.
• 30 September 2025: SEC staff issued a no-action letter saying they would not recommend enforcement against advisers or regulated funds that treat a state trust company as a bank for crypto custody, subject to conditions. The SEC’s 2026 release notes the letter has no legal force.
• 1 October 2026: the Commission proposed new custody rules for crypto held by advisers and regulated funds (SEC press release 2026-100, release IA-7023). It is a proposal, not a final rule, with comments open for 60 days after publication in the Federal Register.

What the October 2026 proposal would do, from the SEC’s fact sheet:

• State trust companies as custodians: allowed if the adviser or fund confirms, before engaging and annually, that the state banking authority has authorised the trust company to custody crypto, that it has written safeguarding policies, and after reviewing its latest audited financial statements and internal control report. Client crypto must be segregated from the trust company’s proprietary assets.
• Adviser self-custody, as a fallback: only after determining, and reassessing quarterly, that “a permitted custodian is not available” for that asset. Conditions include documented expertise for each asset, private key management in the safeguarding system, joint authorisation of transactions “by at least two people”, addresses that hold only one client’s assets, an independent accountant’s internal control report within six months and annually, quarterly statements to clients, and a written agreement to treat the assets as “financial assets” under state law.
• Regulated funds: may self-custody through their adviser under the same conditions, with board review of the “no custodian available” finding each quarter.
• Definition: a crypto asset is “any digital representation of value that is recorded on a cryptographically secured distributed ledger”, which the release says is generally consistent with the GENIUS Act’s digital asset definition.

One summary page ranking for this keyword says the proposal adds CFTC-registered entities as permissible custodians “under the CLARITY Act framework”. The SEC fact sheet names state trust companies and does not say that, and the CLARITY Act is not law (see the site’s CLARITY Act explainer). Rely on the SEC’s own documents.

Does the SEC have jurisdiction over crypto custody?

For the firms it regulates, yes: the custody rule applies to SEC-registered investment advisers and the Investment Company Act rules to registered funds, whatever the asset. The SEC does not charter custodians. Trust companies are chartered by state banking regulators (such as the New York Department of Financial Services) or, for national trust banks, by the Office of the Comptroller of the Currency (OCC).

Trust charters: NYDFS and the OCC

Two charter routes matter for US institutional custody:

• New York limited purpose trust companies (NYDFS). Coinbase Custody Trust Company, LLC, for example, describes itself as chartered this way and as “a fiduciary under New York state banking law and a Qualified Custodian”. NYDFS’s updated custody guidance of 30 September 2025 tells BitLicensees and trust companies to segregate customer crypto from corporate assets on-chain and on internal ledgers, keep “equitable and beneficial interest always remaining with the customer”, never use customer assets to secure their own obligations, and get prior approval for any new sub-custodian, which must hold accounts titled “for the benefit of” customers.
• National trust banks (OCC). Anchorage Digital Bank, National Association was the first crypto firm with a federal trust charter, according to CoinDesk. On 12 December 2025 the OCC conditionally approved five more (Circle, Ripple, BitGo, Fidelity Digital Assets and Paxos), each converting a state charter, as CoinDesk reported that day.

Sources: provider websites and the news reports named, checked 14 October 2026. “Conditional” means the firm must still meet OCC conditions before the charter is fully operative. Confirm current status in the OCC’s own records before relying on it.

European Union: MiCA custody as a CASP service

Under MiCA, custody and administration of crypto-assets on behalf of clients is a licensed crypto-asset service. Providers need authorisation as a crypto-asset service provider (CASP) from their home national regulator, then can passport across the EU. MiCA’s recitals say custodians must sign an agreement with clients on mandatory terms, publish a custody policy, and be “held liable for any losses resulting from an incident related to information and communication technology”.

The transition period ended on 1 July 2026: under Article 143(3), firms operating under national law could continue only “until 1 July 2026 or until they are granted or refused a MiCA authorisation” (ESMA MiCA page, checked 14 October 2026). ESMA’s interim register lists, for example, BitGo Europe GmbH (BaFin, Germany), BNY SA/NV (National Bank of Belgium, notified 20 July 2026) and Crypto Finance (Deutschland) GmbH (BaFin) as authorised for custody and administration. If an EU provider is not in that register, ask which authorisation it is relying on.

Other hubs, briefly

For the licence routes themselves, country by country, see the site’s guide to VASP licences and what they cost.

Segregation and bankruptcy remoteness: what actually protects you

Technology protects keys from thieves. Only the legal structure protects your assets from the custodian’s creditors. The clearest court example is Celsius. In early January 2023, Chief Judge Martin Glenn of the US Bankruptcy Court for the Southern District of New York ruled that about $4.2 billion of crypto in Celsius “Earn” accounts belonged to the bankrupt estate, relying on Celsius’s “unambiguous Terms of Use” (CoinDesk, 5 January 2023). Customers in Celsius’s separate “Custody” accounts were treated differently: in December 2022 the judge ordered about $44 million returned to 15,680 customers who had kept assets in pure custody the whole time (Decrypt, 8 December 2022).

The lesson for an institution is that the contract decides. Before you sign, check:

• Custodial, not debtor-creditor: the agreement should say you keep beneficial ownership and the custodian holds as agent or trustee. NYDFS guidance asks for exactly this.
• Segregated or properly recorded omnibus wallets: separate wallets per client, or omnibus wallets holding only client assets with records that show each client’s interest at all times.
• No rehypothecation: the custodian must not lend, pledge or use your assets. The SEC’s 2025 no-action letter conditions and the NYDFS guidance both address this.
• Sub-custody: who else holds your assets, under which licence, and in whose name the accounts are titled.
• Staking and lending carve-outs: assets moved into yield products may fall outside the custodial protections, as the Celsius Earn ruling shows.

MPC vs multisig vs HSM vs cold storage

These are not four competing products. They are layers, and most institutional setups combine several: Komainu describes “MPC and HSM wallet technology”, Ledger Enterprise offers HSM-based signing alongside a multisig product, and Coinbase describes its vault as “more than cold storage”. What you need to know is where the approval threshold lives and what fails when something goes wrong.

What is a multisig wallet?

A multisig (multi-signature) wallet requires a set number of separate keys, say 3 of 5, to sign before funds move. The rule is enforced by the blockchain itself: natively in Bitcoin script, or by a smart contract such as a Safe account on EVM chains. Because the signer set and threshold sit on-chain, anyone can verify them, which is good for audit. The cost is that each chain needs its own multisig support, and changing a signer means an on-chain transaction. Which multisig is “best” depends on the chain you use (Safe smart contract accounts are one widely used EVM option), and the Bybit incident below shows that the interface around a multisig matters as much as the contract.

What is multi-party computation (MPC)?

NIST describes threshold schemes as protocols that “apply principles of secure multiparty computation (MPC)” to spread trust across several parties instead of one. In an MPC wallet, the private key is never assembled in one place: several parties hold key shares and jointly compute a normal signature. To the blockchain it looks like an ordinary single-key transaction, so MPC works on almost any chain and costs no extra fees, but the quorum “lives in the provider’s infrastructure, invisible to auditors reading the ledger”, as one vendor-neutral guide puts it (Eco, July 2026).

Shares can be refreshed on a schedule without changing the address. The main risks are implementation bugs and lock-in: shares generated under one provider’s protocol do not move to another, so migration means new keys and moving every asset on-chain. NIST published its final first call for multi-party threshold schemes (NIST IR 8214C) on 20 January 2026, so standardisation is still under way.

HSMs and cold storage

A hardware security module (HSM) is tamper-resistant hardware that generates and uses keys without exposing them. Validation is done under NIST’s Cryptographic Module Validation Program: FIPS 140-3 is the current standard, and FIPS 140-2 validated modules could be accepted only “through September 21, 2026”, after which they move to the historical list for existing systems. If a vendor’s materials still cite FIPS 140-2 (Ledger Enterprise’s page cites FIPS 140-2 Level 3 and EAL6+, checked 14 October 2026), ask for its FIPS 140-3 status. Cold storage simply means keys kept offline, which removes network attack paths but slows withdrawals; it still depends on how signing requests are prepared and checked.

Comparison table

Built from the sources cited in this section, checked 14 October 2026. Rows describe typical designs; individual products vary.

Named failures, and what each one teaches

The pattern across these: thresholds failed when one organisation controlled enough of the signers (Ronin), when signers could not see what they were signing (Bybit), and when one person controlled operations (Multichain). Cryptography alone did not cause any of the thefts above. Whatever model you choose, ask how signers verify transaction content independently, who controls each share or key, and how access is revoked.

Institutional custody providers, from their own disclosures

The table separates custodians (a regulated entity holds your assets) from technology providers (you, or your custodian, run their software and keep control). Everything below comes from each firm’s own website, ESMA’s MiCA register and the dated news reports named, checked 14 October 2026. Claims about security are the companies’ own. This is not a ranking.

Sources: each provider’s website; ESMA interim MiCA register (CASPS file); CoinDesk (12 Dec 2025), Decrypt (23 Feb 2026) and The Paypers (Apr 2026) for OCC approvals. All checked 14 October 2026. Insurance terms vary by policy; ask for the policy summary.

Which institutional custody provider is best for crypto?

None of them is best in general. Google’s own answer to this question (checked 14 October 2026) says the same and cites listicles and a credit-rating firm. A practical way to narrow it down:

• US registered adviser or fund: start with custodians that are clearly qualified custodians today (a national trust bank or a state trust company meeting the conditions in the September 2025 no-action letter), and track the October 2026 proposal.
• EU firm or EU clients: a provider listed in ESMA’s register for custody and administration, with the passporting you need.
• Exchange or trading firm needing fast settlement: MPC or HSM wallet technology for operational wallets, plus a custodian or off-exchange settlement network for reserves.
• Bank or custodian building its own service: technology providers (Fireblocks, Ledger Enterprise and others) rather than another custodian.

MPC wallet providers and MPC wallet-as-a-service

“MPC wallet as a service” means a vendor runs MPC key management for you through an API, while the keys stay under a policy you set. For institutions, the questions are the same as for any custody technology: who holds which shares (you, the vendor, a backup provider), whether the vendor can move funds alone, which MPC protocol it uses and whether it was affected by BitForge, how you migrate out, and what SOC 2 report covers the service. Embedded-wallet services built for consumer apps are a different market and not covered here.

What institutional crypto custody costs

Most custodians do not publish fees. Zodia’s pricing page, for example, says fees are set in a fee letter and depend on account set-up and maintenance, transactions, asset type and the number of assets held. Coinbase, BitGo, Anchorage, Fidelity, Komainu, Copper and BNY showed no fee schedule on the pages checked. The one large provider with list prices is a technology vendor:

How to model a quote. Custody fees are usually expressed in basis points (bps) of assets held a year, sometimes with minimums and per-transaction or per-wallet fees. A simple model, using illustrative inputs rather than any provider’s rate: on $100 million under custody, each 1 bp is $10,000 a year, so a 10 bp fee is $100,000 and a 25 bp fee is $250,000. At Fireblocks’ published Off Exchange range of 3 to 30 bps, the same $100 million would cost $30,000 to $300,000 a year for that add-on alone. Ask every provider to quote on the same basis: your expected assets by coin, monthly withdrawals, number of wallets and users, and staking needs.

Costs that sit outside the fee: your own staff for approvals and key ceremonies; audit and SOC report review; insurance above what the custodian carries; integration with your trading, accounting and compliance systems (see the site’s guide to crypto compliance tooling); and the exit cost of moving assets and rebuilding wallets if you change provider, which is highest with MPC.

Red flags before you sign

• “Qualified custodian” claims without the entity: ask which legal entity holds your assets and which charter or licence it relies on, then check the regulator’s register.
• Conditional charters presented as final: several OCC approvals were conditional when announced.
• Debtor-creditor terms: any clause that transfers title, allows lending or pledging, or pools assets without clear client records.
• Insurance headlines: ask whether a limit is shared across all clients, and note that it may apply only when the custodian holds all keys (BitGo states its $250 million figure on that basis).
• Undisclosed sub-custodians: NYDFS requires approval and “for the benefit of” titling; ask whether your provider does the same in every jurisdiction.
• Signers who cannot verify content: after Bybit, ask how each approver independently checks the destination, amount and contract call.
• Outdated security validation: FIPS 140-2 certificates moved to the historical list after 21 September 2026.

What this means for you

As of 14 October 2026, choose institutional crypto custody in this order: the legal entity and charter that will hold your assets, the contract terms that keep them out of that entity’s estate, the signing model and how its approvers verify transactions, and only then the fee.

If you are a US adviser or fund, read the SEC’s October 2026 proposal before committing to a structure, because the final rule may change which custodians and self-custody setups are allowed. If you serve EU clients, confirm the provider’s MiCA authorisation in ESMA’s register now that the transition period has ended. Every figure here is dated; this page is reviewed monthly and sooner if a custodian named here is hacked, fails or changes its charter.

Provider write-ups live in Wallet & Custody Providers. For the exchange side of custody, see whether Coinbase is safe, and for the US law that could reshape crypto market structure, the site’s CLARITY Act explainer.