FTX's Collapse Reframed Institutional Crypto Custody as a Core Risk Question

Institutional crypto custody is one of the least glamorous yet most consequential pieces of the digital asset infrastructure stack. When a sovereign wealth fund, pension manager, or hedge fund allocates to Bitcoin, the question of how those assets are held is not an afterthought — it is the primary risk management question. The collapse of FTX in November 2022 made this viscerally clear: billions in client assets were commingled, misappropriated, and ultimately lost, not because blockchain technology failed, but because custody arrangements were fatally inadequate.

The Core Problem: Crypto Custody Is Not Like Holding Equities

Traditional financial assets — equities, bonds, derivatives — are held by regulated custodians like BNY Mellon or State Street, who maintain records within a centralised settlement system. Ownership is a legal claim backed by regulatory frameworks that have been tested over decades. Crypto is structurally different. Ownership of a Bitcoin or Ether position is determined entirely by control of the private key: a cryptographic string that authorises transactions on the blockchain. Whoever controls the private key controls the asset. There is no central authority to reverse a mistaken transfer or recover a stolen key.

This creates a custody problem that has no clean analogue in traditional finance. Losing a private key is economically equivalent to losing a bearer instrument with no serial number, no issuer, and no recovery mechanism. This is why institutional custody is not simply about "storing crypto" — it is about designing systems that protect private keys from loss, theft, and unauthorised access at a scale that satisfies institutional risk committees and, increasingly, regulatory requirements. For deeper context on how traditional and digital asset classes compare structurally, see our guide on Crypto vs Traditional Asset Classes.

The Three Models: Self-Custody, Exchange Custody, and Qualified Custodians

Institutional-grade custody typically operates across three distinct models, each with different risk profiles. Self-custody — where the institution directly controls its own private keys — offers maximum sovereignty but requires dedicated security infrastructure, air-gapped hardware security modules (HSMs), multi-signature signing ceremonies, and sophisticated internal controls. Very few institutions outside of crypto-native firms have the operational capacity to do this safely at scale.

Exchange custody, where assets sit on a centralised platform's omnibus wallet, is the operationally simplest but riskiest model. The FTX collapse is the canonical failure case. Assets held on an exchange represent an unsecured claim against a counterparty, not direct blockchain ownership. Regulated institutions largely abandoned this model following 2022, though smaller allocators still use it for liquidity purposes on portions of their portfolio.

The third and now dominant model for regulated institutions is third-party qualified custody. Firms such as Coinbase Custody, BitGo, Anchorage Digital (a federally chartered crypto bank), and Fidelity Digital Assets operate as regulated custodians, holding client keys in segregated cold storage arrangements with institutional-grade security audits, insurance coverage, and regulatory oversight. In the United States, the SEC's custody rule debate — which has evolved significantly through 2024 and 2025 — has centred precisely on what qualifies as an acceptable custodian for investment advisers holding client crypto assets.

A notable stress test of custodial risk appeared in early 2026 when Tether-backed exchange Orionx announced it would shut down after an audit flagged a $7 million custody gap — a reminder that even crypto-native firms with prominent backing can carry unresolved custodial risk that only surfaces under formal examination.

Multi-Signature and MPC: How Keys Are Actually Protected

Within qualified custody arrangements, two primary cryptographic techniques dominate: multi-signature (multisig) and multi-party computation (MPC). Multisig wallets require a defined threshold of key-holders to co-sign a transaction — for example, three out of five designated signatories. This eliminates single points of failure: no individual employee or server can unilaterally move funds. Multisig is transparent and auditable on-chain, which appeals to compliance teams.

MPC is a more recent and increasingly preferred approach. Rather than splitting a key into pieces, MPC distributes the key generation itself across multiple parties, so the full private key never exists in one place at any point. Transactions are authorised through cryptographic collaboration between separate secure environments. Firms including Fireblocks and Copper have built institutional businesses around MPC infrastructure. The advantage over multisig is that MPC can be implemented without creating on-chain visibility into the signing arrangement, which can be strategically useful for large funds.

Cold storage remains the security baseline for the bulk of institutional holdings. Assets intended for long-term hold are kept in air-gapped environments with physical access controls, HSMs, and geographically distributed key shards. Hot wallets — connected to the internet for liquidity and operational use — hold only the fraction needed for active trading and settlement. The ratio between cold and hot holdings is itself a risk management decision that qualified custodians document for regulatory purposes.

What to Watch: Regulation, Insurance, and Institutional Flows

The maturation of institutional custody is directly tied to regulatory clarity. The SEC's evolving position on what constitutes a qualified custodian for crypto assets remains one of the most consequential open questions for institutional adoption. Similarly, the development of Lloyd's of London and other specialty markets for crypto custody insurance — covering both theft and operational failure — is a key indicator of how seriously traditional risk capital views the sector's infrastructure.

Bitcoin ETF inflows hitting $3.8 billion in the strongest three-week stretch of 2026 (per recent market data) illustrates the scale at which institutional capital is now flowing through these structures — all of which rely on qualified custodians holding the underlying BTC on behalf of fund investors. As that flow accelerates, custody operational capacity becomes a genuine bottleneck and risk concentration point worth monitoring. With the Fear and Greed Index sitting at 73 (Greed), sentiment is constructive, but it is precisely in these periods that custody risk management tends to get underweighted. For context on how institutions are allocating within this environment, visit WealthWatchPro investment intelligence.

Custody is infrastructure, not narrative — but infrastructure failures are what end bull markets abruptly. The institutions now entering crypto through ETF structures and qualified custodians are betting that the lessons of 2022 have been systematically absorbed. The regulatory and audit frameworks now in development will determine whether that bet pays off. For a broader perspective on the blockchain architecture underpinning these systems, our guide on Solana Explained covers how high-throughput Layer 1 design choices create their own custodial and operational risk trade-offs.