B.BlockAxis⌕ Search
Menu

Digital asset custody: beyond key storage

Custody combines the authority to move assets with obligations to safeguard and account for them.

AdvancedContent revised · 21.09.20265 min reading · allow 5–10 more minutes for the workshopBlockAxis
← Challenge the system
Workshop · 20 XP

Awarded once after a correct answer.

The question we will work through

Reconcile control, entitlement and accounting

Useful first : Hot, warm and cold wallets · Multisig: policy, backups and recovery · Operational controls for digital assets

Challenge the system · Step 1 / 6

Key takeaway

Custody combines the authority to move assets with obligations to safeguard and account for them.

The essentials

Custody combines the authority to move assets with obligations to safeguard and account for them. A signing arrangement is only one part of the service. Client ownership, contractual rights, asset segregation, insolvency treatment and recovery responsibilities must be understood separately from the technical wallet architecture.

How it works

Distinguish an on-chain address structure from an internal client ledger. An omnibus wallet can hold assets attributed to several clients, while segregated addresses may simplify attribution without establishing legal segregation on their own. Reconcile controlled on-chain balances, the custody subledger and the general ledger, documenting timing differences and exceptions.

What to watch

Consider a withdrawal requiring two approvers and an automated policy check. The control is incomplete if one administrator can change both the destination allowlist and the approval rules. Test role separation, key recovery, emergency access and provider exit. Evidence should establish who approved, what was signed and which ledger entries were updated.

Build your analysis

In the EU, MiCA Article 75 requires in-scope custodians to distinguish client holdings from their own on the distributed ledger and to provide legal and operational segregation. A client omnibus address is not permission to mix client assets with the provider’s assets. Liability, return procedures and any subcontracted custody must also be assessed under the applicable rules.

Understand the details

A custodian must know both what it can move and what it owes each client. On-chain balances show assets at addresses, while a client subledger records entitlements. Neither automatically proves the other. Assets can be in transit, staked, lent or restricted, and each status changes availability and reconciliation requirements.

Boundaries and common mistakes

Control design should cover initiation, approval, signing, broadcast, confirmation and accounting. An independent reviewer needs evidence connecting these stages to the same instruction. Provider exit is also part of custody: a recovery process that requires the failed provider’s continued cooperation may not deliver the intended resilience.

The mechanism at a glance

SEE THE CONNECTIONS
Reconcile control, entitlement and accountingFour connected ideas
  1. 01Controlled on-chain assets
  2. 02Client entitlements
  3. 03Accounting records
  4. 04Investigated reconciliation

Read these as connected concepts, not necessarily consecutive steps.

Read the explanation

A custodian must know both what it can move and what it owes each client. On-chain balances show assets at addresses, while a client subledger records entitlements. Neither automatically proves the other. Assets can be in transit, staked, lent or restricted, and each status changes availability and reconciliation requirements.

The distinction that changes the analysis

01Technical control
02Recorded entitlement

An address can separate funds technically while internal records still fail to attribute them correctly. Reconcile the address balance, client ledger and governing arrangement. None of these three records should silently substitute for the others.

Explain it yourself

Revisit the case above. Name what is established, what remains to be checked and the evidence needed to conclude. A strong answer addresses both sides of the diagram.

Applied workshop · work at your own pace

Apply the lesson to a case

A firm controls 1,000 units on-chain and records client entitlements of 980. An operator proposes booking the difference as revenue. List possible timing differences, unallocated deposits and missing entries before drawing any conclusion.

Why is the 20-unit difference an exception to investigate rather than automatic profit?

Choose one answer.

Prepare a correction note

Describe the passage and the proposed correction. This creates a local note for you to share; it sends nothing. Do not include personal or confidential information.

Frequently asked questions

Does a separate address prove legal segregation?

No. On-chain separation can help attribution, but ownership, contractual rights, records and insolvency treatment require their own analysis.

Sources and references

Cases and suggested controls are teaching examples. Each cited framework has its own scope; it does not certify the arrangement described.

References reviewed on 21 September 2026. All sources →