Crypto custody options compared: exchange, self-custody and institutions

What does crypto custody mean for your holdings?

Crypto custody describes who controls the private keys that move your coins. The holder of the keys decides when coins can be sent, so custody sets who carries the risks of theft, error, and failure. 3 routes cover nearly every situation: an exchange account, a wallet you control yourself, and a regulated institution that holds assets for clients. Reading the custody terms before you deposit anything gives you a clear view of who answers when something goes wrong.

The choice looks technical, yet it works like a decision about where to store cash. A wallet in your pocket, a bank account, and a safe each carry different protections and different effort. Crypto offers the same range, and the best answer depends on the amount held, how often you trade, and who else relies on the assets.

How does exchange custody of crypto work?

At an exchange, the platform holds the keys and your account shows a balance. You trade instantly, reset a password through support, and often earn interest-like products. The platform decides its own security design, so your protection rests on its controls, its finances, and its terms of service, which you accept when you open the account. Exchanges also differ in how they store reserves, so ask each one for its published description.

The main question is what happens in a stress event. Platforms may limit withdrawals, and customer claims may follow a legal process when a company fails. A careful holder therefore reads the terms, checks whether client assets are kept apart from company funds, and keeps at an exchange only the balance needed for active trading.

What does self-custody of crypto ask from you?

In self-custody, you hold the keys in a wallet that you control. No platform sits between you and the coins, so a platform failure does not affect them. The page on crypto cold wallets covers the offline version in detail. Software wallets on a phone or computer offer convenience, with a higher exposure to malware.

Self-custody asks for 3 habits: a protected recovery phrase, a tested backup, and careful checking of every address and every site that requests a signature. Nobody can reset a lost phrase for you. Holders who follow the habits gain full control, and holders who prefer support desks often choose an institution instead.

When do institutions hold crypto for clients?

Institutional custodians are companies licensed to hold digital assets for clients, such as trust companies, banks, and specialist firms. They offer segregated accounts, approval workflows for transfers, audits, and insurance in some cases. The legal agreement states who owns the assets, which matters to boards, funds, and family groups that need clear documentation. Boards value this paper trail because it shows who may move assets and who must approve.

The service carries a fee and a longer onboarding process, since the custodian checks identity and source of funds. Licensing differs by country, so confirm that the custodian holds the licence that applies in its jurisdiction and ask which entity holds your assets. In Singapore, ASEAN, and Hong Kong, this check belongs on every due diligence list.

How do crypto custody options compare side by side?

Exchanges lead on convenience and trading speed. Self-custody leads on direct control and independence from any company. Institutions lead on legal clarity, process, and reporting. No single route leads on every criterion, which explains why many holders and treasuries combine 2 of them and assign each a role.

A common pattern keeps a small trading balance at an exchange, a long-term core in self-custody or with an institution, and a documented policy that names who may approve transfers. The pattern limits the damage from any single failure. Write down the shares, and review them each quarter or after large market moves.

Which questions test any crypto custody provider?

5 questions cover the essentials. Does the provider publish audited proof of reserves? Are client assets segregated from company funds? Does the provider lend out client assets, and with what consent? What are the withdrawal terms in a stress event? Which licence applies, and who is the legal entity that holds your assets? Clear written answers signal a mature provider.

Compare answers across providers in a simple table and keep the dated reply for your records. A provider that answers promptly and in detail earns trust, and vague replies are information too. Repeat the questions each year, since terms, owners, and licences change. Dated replies also give you a record if a dispute arises later.

How do you choose a crypto custody mix for your situation?

Start with the amount that would hurt to lose, then match each part of your holdings to a route. Frequent trades fit an exchange, long-term holdings fit self-custody or an institution, and shared holdings fit an institution with approval rules. Confirm the choice with the questions above and put the plan in writing. Revisit the plan whenever your holdings double or a provider changes its terms.

Decision makers in Asia can test the mix in a 30-minute pre-diagnostic with EQOS Asia, and larger treasuries can read the enterprise page for formats. For the full set of safety checks, return to the guide on keeping crypto safe, or read the crypto crash hub for the wider series.

Frequently asked questions

About the author

Stéphane Jambu

President, EQOS Forecast Asia

Stéphane Jambu leads EQOS Forecast Asia and works as a consultant in e-commerce, search visibility, and AI. LinkedIn profile