Custody Risk

Custody risk is the risk of losing access to, or the value of, crypto assets because of how and by whom they are held. It applies whichever way assets are stored: when a third party such as an exchange or custodian holds them, the risk sits mostly with that business; when you hold them yourself, it sits with your own key management (see Kaavon's "Self-Custody" glossary definition).

With a third-party custodian, the main sources of custody risk are:

• Insolvency: if the custodian fails, customers' claim to their assets depends on the account terms and local law — in the 2023 Celsius bankruptcy, a US court ruled that crypto deposited in its "Earn" accounts belonged to the bankruptcy estate rather than to the customers who deposited it.
• Misuse or commingling of customer assets: customer funds mixed with the firm's own or lent out without clear consent (see Kaavon's "Rehypothecation" glossary definition) can leave a shortfall — the core of FTX's 2022 collapse.
• Security failures: hacks of a custodian's online (hot) wallets or compromised internal systems.
• Operational and legal risk: withdrawal freezes, account restrictions, or regulatory action in the custodian's jurisdiction.

Self-custody removes reliance on a third party but replaces it with your own operational risk: losing the seed phrase or private keys, having them stolen, or making an irreversible mistake when sending funds.

Common ways to reduce custody risk include holding assets with custodians that keep client assets segregated and bankruptcy-remote (see Kaavon's "Qualified Custodian" glossary definition), checking proof-of-reserves disclosures while understanding their limits (see Kaavon's "Proof of Reserves" glossary definition), reading what any custodial insurance actually covers (see Kaavon's "Custodial Insurance" glossary definition), using multisig or MPC setups for larger holdings (see Kaavon's "Multi-Party Computation" glossary definition), and not concentrating all assets with a single custodian.