Who Holds Your Keys in Law: Custody Explained

Crypto custody is a legal question wearing a technical costume. Holding a private key is not the same as owning a claim, and holding a claim is not the same as being protected if the entity holding it fails. The words “segregated” and “bankruptcy-remote” are used loosely in marketing; in law they describe specific arrangements that either exist in the documentation or do not.

The practical consequence is that crypto custody splits into three arrangements with different failure modes: an exchange or custodian holds assets for you, you hold them yourself, or a regulated entity holds them under a bespoke regime with additional capital and governance requirements. Each answers a different question, and mixing up the answers is how holders discover the gap after the fact.

• Control is not ownership. A key held by a provider sits with the provider’s systems and legal estate, whatever the interface says.
• Segregation is about records. It means your assets are identified as yours in the provider’s books, not pooled with the firm’s own holdings.
• Bankruptcy-remote is a legal conclusion. It depends on the jurisdiction, the account structure and the documentation, not on a label.
• Self-custody trades counterparty risk for operational risk. You cannot be a creditor of a firm you never lent to, but you can lose the keys.

Three crypto custody models

The models differ on two axes: who can move the assets, and whose estate they fall into if something fails. Insurance, audits and attestations are secondary detail that supports those two facts.

Custodial arrangements

A provider controls the keys and you hold a contractual claim. The assets sit in accounts the provider operates, under its terms of service and the law governing that agreement. Your protection depends on how the accounts are structured, what the terms allow the provider to do with the assets, and what the local insolvency framework says about customer property. Many venues describe these holdings as held on your behalf; the operative question is whether the documents and the account structure support that description.

Self-custody

You control the keys, so no intermediary stands between you and the asset: no counterparty to fail, no withdrawal queue, no terms that can be amended. The trade is that recovery, inheritance and key management become your responsibility, and an unrecoverable key is a claim on nobody.

Qualified custody

Qualified custody is a regulated status, not a compliment. It typically brings authorisation under a specific regime, minimum capital, segregation duties, custody-specific governance and periodic supervisory review. The label is jurisdiction-specific: what qualifies in one market may have no equivalent in another, and a firm authorised for one activity may not be authorised for custody at all.

What segregated actually means

Segregation means customer assets are identified separately from the firm’s own assets in its records and, where the regime requires, held in separate accounts. It does not mean each customer has a separate on-chain address, and it does not decide what happens in an insolvency.

In an omnibus structure, many customers’ assets sit in one account and the provider maintains an internal ledger allocating them. In a segregated structure, assets sit in accounts designated for customers, sometimes sub-designated by client type. Omnibus is cheaper to operate and harder to reconcile; segregated is easier to trace and still depends on the ledger being accurate.

Where the record and the chain disagree

Discrepancies are the failure mode that matters. If the internal ledger says customers hold more than the on-chain balance supports, the shortfall surfaces at the worst moment, and recovery turns on how local law treats shortfalls in customer pools. Attestations and proof-of-reserves address part of this, but an attestation is a statement at a point in time, not a continuous guarantee, and it does not establish legal ownership.

Rehypothecation and use of assets

Some terms of service allow the provider to lend, pledge or otherwise use customer assets. Where that is permitted, the assets are no longer simply sitting in a segregated account, and the holder’s position in an insolvency can change materially. Read the clause on use of assets before assuming that a custody label implies the assets are untouched.

Separate accounts protect you from the firm’s trading losses. They do not protect you from a broken ledger, a permissive contract, or an insolvency regime that treats customer property as part of the estate.

What bankruptcy-remote claims, and what it does not

Bankruptcy-remote describes an arrangement intended to keep assets outside the provider’s estate if the provider fails. It is a conclusion about a specific structure under a specific law, established by the documentation, the account titling and the applicable insolvency rules.

In many jurisdictions, cryptoassets are treated as property, and customer assets held on trust or in a statutorily segregated pool may be returned ahead of general creditors. In others the treatment is less settled, the process slower, and commingled assets may be treated differently. Where assets have been lent out under the terms, the analysis changes again. A claim of bankruptcy remoteness is only as strong as the governing law behind it — usually chosen by the provider, not by you.

How crypto custody law differs by jurisdiction

It differs on three points that matter: whether custody is a licensed activity, how customer assets are treated on insolvency, and what the provider must disclose about how assets are held.

Some regimes have created dedicated custody categories with capital and segregation requirements. Others apply existing securities or payment rules by analogy, leaving uncertainty about which obligations bind. Some require independent assurance; others rely on general conduct rules. Two providers offering what looks like the same service can sit under very different protections, and the difference is invisible on a product page.

Four facts do more work than any label. Establish them in order, in writing, before the balance grows:

1. Identify the legal entity that would hold the assets, and whether custody is a licensed activity for that entity.
2. Confirm the governing law of the custody agreement and which courts would hear a dispute.
3. Establish whether customer assets are segregated, and how the internal ledger is reconciled against on-chain balances.
4. Read the clause on use, lending or pledge of customer assets, including any right to rehypothecate.
5. Match those answers against the local insolvency framework, and size the balance to what survives the weakest answer.

Rules change and vary by market, so reconfirm the position rather than relying on an older summary. None of this is legal advice.