The Counterparty Risk Wealth Managers Overlook in Digital Asset Custody
Executive Summary
When advisors consider digital asset exposure for clients, custody often receives checkbox treatment. A regulated custodian is selected, and the risk conversation moves on. This reflects how custody works for traditional securities—and why it fails for digital assets.
Digital asset custody introduces counterparty risks that differ materially from conventional brokerage arrangements. Legal ownership structures vary. Segregation practices range from robust to nonexistent. Bankruptcy treatment remains untested in many jurisdictions.
None of this makes digital asset custody unmanageable. The institutional infrastructure has matured considerably. Qualified custodians with insurance, SOC reports, and regulatory oversight now serve the wealth management market.
But "regulated" has never meant "risk-free." The failures that have occurred in this space—and in traditional finance before it—share common features: inadequate segregation, opacity about asset location, and overreliance on trust in place of verification.
Custody Is Risk Transfer, Not Risk Elimination
The decision to use a custodian is a decision about where risk should live. It does not eliminate risk; it relocates it.
In traditional securities markets, this risk transfer is so well-established that advisors rarely examine it closely. Client assets held at a qualified custodian benefit from SIPC protection, SEC oversight, and decades of legal precedent governing customer claims.
Digital assets disrupt this comfortable assumption:
- SIPC does not cover cryptocurrency
- Bankruptcy treatment of digital assets held in custody remains inconsistent across jurisdictions
- The legal distinction between "your assets held by a custodian" and "the custodian's assets" is less settled than advisors might assume
This is not an argument against custodial arrangements. Self-custody introduces its own significant risks. The point is that custody selection requires active evaluation, not passive reliance on regulatory status.
The Custody Stack: Where Risk Accumulates
Digital asset custody involves multiple layers, each with distinct risk characteristics:
- Legal ownership versus beneficial ownership. When a custodian holds assets on behalf of a client, who owns what? The answer varies by custody agreement, jurisdiction, and asset type. In some arrangements, clients hold clear beneficial ownership with segregated claims. In others, they may be unsecured creditors if the custodian fails.
- Segregation models. Custodians may hold client assets in segregated wallets—distinct addresses with clear ownership records—or in omnibus structures where multiple clients' assets are pooled. Segregation provides cleaner audit trails and stronger bankruptcy protection but costs more to implement.
- On-chain versus off-chain custody. Digital assets can be secured directly on blockchain infrastructure ("on-chain") or represented through internal ledger entries at the custodian ("off-chain"). On-chain custody provides cryptographic verification that assets exist at specific addresses. Off-chain custody relies on the custodian's internal accounting.
Failure Modes That Don't Appear in Marketing Materials
Custody failures follow patterns. Understanding these patterns helps advisors ask better questions before problems emerge:
- Operational freezes and withdrawal restrictions. Custodians may restrict withdrawals during periods of market stress, operational disruption, or regulatory scrutiny. Understanding the circumstances under which a custodian can limit withdrawals—and for how long—is basic due diligence.
- Rehypothecation. Some custody arrangements permit the custodian to use client assets for its own purposes—lending them, posting them as collateral, or otherwise deploying them outside the client's direct control.
- Bankruptcy remoteness—or the lack thereof. When a custodian fails, what happens to client assets? The answer depends on legal structure, jurisdiction, and the specific terms of the custody agreement.
Lessons From Failures We've Already Seen
The history of financial services provides instructive parallels:
- MF Global: Client funds that were supposed to be segregated were not. The failure revealed that regulatory status and segregation requirements do not guarantee segregation in practice.
- Lehman prime brokerage: Clients who thought their assets were safely held discovered complex counterparty chains that delayed recovery for years.
- FTX: Commingling, governance failures, and the limits of trust in place of verification. Clients who assumed exchange custody was equivalent to institutional custody learned otherwise.
Each failure teaches the same lesson: verification beats trust, documentation beats assumption, and understanding the specific custody arrangement matters more than the custodian's marketing.
Evaluating a Crypto Custodian: A Practitioner's Checklist
- Balance sheet strength and insurance coverage. What is the custodian's financial position? What insurance covers client assets—and what are the actual limits and exclusions?
- Legal structure and jurisdiction. Where is the custodian incorporated? What regulatory framework applies? How would client claims be treated in bankruptcy?
- Segregation model and verification mechanisms. Are client assets held in segregated wallets? Can you verify asset location independently? What proof-of-reserves mechanisms exist?
- Recovery scenarios. What happens if the custodian fails? What is the expected timeline and process for recovering assets?
Why This Matters for Advisors
- Custody is a counterparty relationship, not a solved problem
- "Qualified custodian" status is necessary but not sufficient
- Segregation, legal structure, and verification mechanisms vary significantly across providers
- The due diligence questions are knowable—and should be asked before allocation