Custody Models-Self-Custody, Third-Party, Hybrid, and Prime Brokerage
Learning Objectives
Compare different custody model structures and their characteristics
Evaluate the compliance implications of each custody approach
Assess operational requirements for different custody models
Identify appropriate custody models for different institutional types
Design multi-custodian strategies for risk diversification
Choosing a custodian is just one decision. The broader question is: what custody model best serves your institution's needs?
A hedge fund might use prime brokerage for integrated services. A family office might prefer direct custody for control. A corporate treasury might split between self-custody and third-party for different purposes. Understanding these models—and when each is appropriate—is essential for institutional custody strategy.
THIRD-PARTY CUSTODY OVERVIEW:
- Assets held by external qualified custodian
- Custodian controls private keys
- Institution has beneficial ownership
- Standard institutional approach
Structure:
┌──────────────────────────────────────┐
│ Institution (Client) │
│ (Beneficial Owner of Assets) │
└────────────────┬─────────────────────┘
│
Custody Agreement
│
↓
┌──────────────────────────────────────┐
│ Qualified Custodian │
│ (Controls Keys, Holds Assets) │
│ │
│ - Key generation/storage │
│ - Transaction execution │
│ - Reporting │
│ - Insurance │
└──────────────────────────────────────┘
LEGAL FRAMEWORK:
Definition of assets covered
Custodian duties and standards
Transaction authorization procedures
Reporting requirements
Liability allocation
Termination and transition
Governing law and disputes
Beneficial ownership
Transaction authorization
Reporting receipt
Audit access (usually)
Termination rights
ADVANTAGES:
Compliance:
✅ Clearly satisfies qualified custodian requirement
✅ Standard regulatory approach
✅ Examination-ready structure
✅ Auditor familiarity
Operational:
✅ Professional key management
✅ Established security infrastructure
✅ 24/7 operations (typically)
✅ Disaster recovery included
Risk Transfer:
✅ Custodian bears operational risk
✅ Insurance coverage (custodian's)
✅ Professional liability
✅ Errors and omissions protection
Simplicity:
✅ Single point of contact
✅ Consolidated reporting
✅ Standardized processes
✅ Clear accountability
LIMITATIONS:
Control:
⚠️ Don't control keys directly
⚠️ Dependent on custodian operations
⚠️ Transaction speed limited
⚠️ Custodian policies apply
Counterparty Risk:
⚠️ Custodian failure risk
⚠️ Concentration with single party
⚠️ Bankruptcy exposure
⚠️ Operational dependency
Cost:
⚠️ Custody fees (ongoing)
⚠️ Transaction fees
⚠️ Minimum asset requirements
⚠️ Premium for services
Flexibility:
⚠️ Limited customization
⚠️ Asset support constraints
⚠️ Standard terms apply
⚠️ Process limitations
SELF-CUSTODY REGULATORY LANDSCAPE:
- Custody Rule requires qualified custodian
- Self-custody creates custody (the problem)
- May trigger additional requirements
- Limited exceptions
- Own assets, not client assets
- Fiduciary duty to shareholders
- Board governance applies
- No qualified custodian requirement
- No outside investors: More flexibility
- Outside investors: Custody Rule applies
- "Family office" exclusion requirements
- State law considerations
- Qualified custodian required
- Fund own assets (GP capital) possible
- Structure matters
- Audit implications
SELF-CUSTODY STRUCTURE:
When Permitted:
For own assets (corporate treasury, certain family offices)
Implementation Requirements:
Board-approved policy
Risk committee oversight
Documented procedures
Regular review
Multi-signature required (internal)
Geographic distribution
Succession planning
Disaster recovery
Segregation of duties
Dual control on transactions
Audit trail
Regular reconciliation
HSM implementation
Cold storage (majority)
Access controls
Monitoring systems
Example Corporate Treasury Setup:
┌─────────────────────────────────────┐
│ Corporate Treasury Self-Custody │
├─────────────────────────────────────┤
│ GOVERNANCE │
│ - Board-approved crypto policy │
│ - CFO oversight │
│ - Risk committee quarterly review │
├─────────────────────────────────────┤
│ KEY STRUCTURE (3-of-5) │
│ - Treasurer (key 1) │
│ - Controller (key 2) │
│ - IT Security (key 3) │
│ - External counsel (key 4) │
│ - DR backup (key 5) │
├─────────────────────────────────────┤
│ STORAGE │
│ - 95% cold (HSM, geographic dist.) │
│ - 5% operational (warm wallet) │
└─────────────────────────────────────┘
```
SELF-CUSTODY RISKS:
- Internal key compromise
- Employee errors
- Process failures
- Technology failures
- Inadequate oversight
- Key person dependency
- Succession failures
- Policy gaps
- Limited commercial coverage
- Crime insurance limitations
- E&O coverage gaps
- Board liability exposure
- Evolving standards
- Potential future requirements
- Audit challenges
- Examiner questions
WHEN SELF-CUSTODY FAILS:
- Lost keys = lost assets
- No custodian insurance
- No counterparty to sue
- Full internal responsibility
Case Study: Corporate Key Loss
Company self-custodied crypto
Key holder left without documentation
Backup procedures inadequate
Assets permanently inaccessible
→ Internal controls matter
---
HYBRID CUSTODY CONCEPT:
- Third-party for some assets
- Self-custody for others
- Or multiple third-parties
- Strategic allocation
Common Hybrid Structures:
STRUCTURE 1: OPERATIONAL SPLIT
┌────────────────────────────────────┐
│ Long-Term Holdings (80%) │
│ → Third-Party Cold Custody │
│ → Maximum security │
├────────────────────────────────────┤
│ Operational Holdings (20%) │
│ → Self-Custody (if permitted) │
│ → Or Third-Party Hot │
│ → Trading flexibility │
└────────────────────────────────────┘
STRUCTURE 2: CUSTODIAN DIVERSIFICATION
┌────────────────────────────────────┐
│ Primary Custodian (60%) │
│ → Largest position │
│ → Primary relationship │
├────────────────────────────────────┤
│ Secondary Custodian (30%) │
│ → Diversification │
│ → Different jurisdiction │
├────────────────────────────────────┤
│ Tertiary/Operational (10%) │
│ → Trading/liquidity │
│ → Prime broker │
└────────────────────────────────────┘
STRUCTURE 3: ASSET-TYPE SPLIT
┌────────────────────────────────────┐
│ XRP/Major Assets │
│ → Primary institutional custodian │
├────────────────────────────────────┤
│ Other Digital Assets │
│ → Specialty custodian │
├────────────────────────────────────┤
│ DeFi/Yield Positions │
│ → Self-custody/specialist │
└────────────────────────────────────┘
```
HYBRID MODEL ADVANTAGES:
Risk Diversification:
✅ No single custodian concentration
✅ Survives individual custodian failure
✅ Jurisdiction diversification
✅ Counterparty risk management
Operational Flexibility:
✅ Right tool for each purpose
✅ Trading speed where needed
✅ Security where needed
✅ Cost optimization possible
Resilience:
✅ Continuity if one fails
✅ Transition capability
✅ Not fully dependent
✅ Operational backup
HYBRID MODEL CHALLENGES:
Complexity:
⚠️ Multiple relationships
⚠️ Different agreements
⚠️ Coordination requirements
⚠️ Reconciliation challenges
Cost:
⚠️ Multiple minimum fees
⚠️ Potentially higher total cost
⚠️ Duplicate compliance work
⚠️ Management overhead
Reporting:
⚠️ Consolidated reporting harder
⚠️ Different formats
⚠️ Reconciliation required
⚠️ Audit complexity
Compliance:
⚠️ Multiple custodian due diligence
⚠️ Different agreements to monitor
⚠️ Allocation documentation
⚠️ Policy complexity
```
MULTI-CUSTODIAN IMPLEMENTATION:
- Counterparty limits (e.g., max 50% with one)
- Geographic diversification requirements
- Asset-type requirements
- Operational needs
- Different regulatory frameworks
- Different geographies (headquarters)
- Different technology stacks
- Complementary capabilities
- Custody agreement
- Service level agreement
- Due diligence documentation
- Ongoing monitoring plan
- Allocation methodology
- Rebalancing triggers
- Transfer procedures
- Emergency procedures
- Allocation compliance
- Custodian performance
- Due diligence updates
- Incident tracking
EXAMPLE POLICY:
"No single custodian shall hold more than 50%
of digital asset custody value.
At least two qualified custodians shall be
maintained at all times.
If single custodian exceeds 50%, rebalancing
shall occur within 30 days."
---
PRIME BROKERAGE CONCEPT:
- Custody
- Execution
- Financing (leverage)
- Securities lending
- Reporting
- Settlement
- Clearing
- Goldman Sachs
- Morgan Stanley
- JP Morgan
- Coinbase Prime
- Hidden Road (Ripple)
- Galaxy Digital
- Falcon X
- B2C2
PRIME BROKERAGE SERVICE COMPONENTS:
- Integrated with trading
- Hot wallet for trading
- Cold storage for holdings
- Single account view
- Access to multiple venues
- Best execution pursuit
- Algorithmic trading
- Large order handling
- Margin/leverage
- Collateral management
- Short selling facilitation
- Liquidity provision
- Consolidated view
- Real-time positions
- P&L reporting
- Tax lot tracking
- Trade settlement
- Delivery vs. payment
- Cross-platform settlement
- Netting services
- Capital introduction
- Research access
- Technology services
- Consulting
PRIME BROKERAGE ADVANTAGES:
Integration:
✅ Single relationship
✅ Consolidated operations
✅ Integrated reporting
✅ Operational efficiency
Services:
✅ Leverage available
✅ Short selling possible
✅ Better execution
✅ Research access
Relationship:
✅ Dedicated support
✅ Custom solutions
✅ Capital introduction
✅ Industry access
PRIME BROKERAGE CONCERNS:
Concentration:
⚠️ All eggs in one basket
⚠️ Counterparty concentration
⚠️ Custody bundled with trading
⚠️ Hard to separate
Complexity:
⚠️ Custody/trading comingled
⚠️ Rehypothecation common
⚠️ Agreement complexity
⚠️ Harder to monitor
Cost:
⚠️ Premium pricing
⚠️ Financing costs
⚠️ Execution markup
⚠️ Minimum requirements
Risk:
⚠️ Prime broker failure risk
⚠️ Financing recall risk
⚠️ Margin call exposure
⚠️ Operational dependency
CRITICAL QUESTIONS FOR PRIME BROKERAGE:
- Is custody segregated from trading?
- What are rehypothecation terms?
- How is custody insurance separate?
- What happens in PB failure?
- Can custody be separated if needed?
- What are margin call procedures?
RIPPLE'S HIDDEN ROAD ACQUISITION:
- $285 million purchase
- Full-service prime broker
- Institutional client base
- Global operations
- Prime brokerage
- Execution
- Clearing
- Financing
- FX trading
Strategic Implications:
Vertical integration
Institutional distribution
ODL integration potential
RLUSD distribution
Integrated XRP services possible
Custody + execution combined
Competitive pricing potential
Ecosystem benefits
Concentration with XRP issuer
Diversification considerations
Regulatory separation
Conflict management
CUSTODY MODEL SELECTION:
FACTOR 1: REGULATORY REQUIREMENTS
RIA with client assets:
→ Third-party custody required
Corporate treasury (own assets):
→ Self-custody or third-party
Hedge fund (investor assets):
→ Third-party + prime brokerage typical
FACTOR 2: OPERATIONAL NEEDS
Active trading:
→ Prime brokerage or hot custody
Buy and hold:
→ Cold custody focus
Mixed strategy:
→ Hybrid model likely
FACTOR 3: SCALE
<$10M:
→ Single custodian typical
$10M-$100M:
→ Consider diversification
>$100M:
→ Multi-custodian recommended
FACTOR 4: RISK TOLERANCE
Conservative:
→ Multiple custodians, cold storage focus
Moderate:
→ Primary + secondary custodian
Aggressive:
→ Prime brokerage acceptable
INSTITUTION-SPECIFIC RECOMMENDATIONS:
- ETF wrapper preferred
- Direct custody if needed
- No self-custody
- Maximum oversight
- Integrated trading/custody
- Leverage access needed
- Multiple PBs for large funds
- Clear asset segregation
- No outside investors: Flexible
- With investors: Third-party required
- Multi-custodian common
- Control often prioritized
- Own assets = flexibility
- Governance critical
- Board oversight required
- Consider insurance carefully
- Qualified custodian mandatory
- Multiple custodians for scale
- Audit-ready structure
- Clear documentation
---
✅ Third-party custody is the standard institutional approach - Provides clearest compliance path
✅ Multi-custodian strategies reduce concentration risk - Proven in traditional finance
✅ Prime brokerage integrates services effectively - Operational efficiency gains real
✅ Self-custody requires robust governance - When permitted, internal controls critical
⚠️ Optimal custodian diversification ratios - No established best practice
⚠️ Prime brokerage asset protection in failure - Limited crypto-specific precedent
⚠️ Self-custody insurance availability - Commercial coverage limited
⚠️ Hybrid model compliance interpretation - Regulatory guidance limited
📌 Single custodian concentration - Counterparty risk underestimated
📌 Assuming prime brokerage custody equals standalone custody - Different risk profile
📌 Self-custody without adequate governance - Key loss risk severe
📌 Not documenting custody model rationale - Regulatory defense requires documentation
The "best" custody model depends entirely on institutional context. A pension fund's needs differ fundamentally from a hedge fund's. What matters is choosing a model appropriate for your situation, implementing it properly, and documenting your rationale.
Assignment: Design a custody model for a specific institutional scenario.
Scenario: A multi-strategy hedge fund with $500M AUM is launching a digital asset strategy with an initial allocation of $50M (10%). Design the custody model.
- Part 1: Model Selection Rationale (1.5 pages)
- Part 2: Custody Structure Design (1.5 pages)
- Part 3: Risk Assessment (1 page)
- Part 4: Implementation Plan (1 page)
Format: Professional memo, 5 pages maximum
Time Investment: 3-4 hours
1. When is self-custody generally permitted for digital assets?
Answer: B - For corporate treasury or family offices without outside investors managing their own assets
2. What is the primary advantage of a hybrid custody model?
Answer: C - Risk diversification through reduced concentration with any single custodian
3. What is the key concern with prime brokerage custody?
Answer: A - Custody bundled with trading creates counterparty concentration and potential rehypothecation
4. What determines the appropriate custody model for an institution?
Answer: D - Regulatory requirements, operational needs, scale, and risk tolerance combined
5. Why might a $100M+ allocation use multiple custodians?
Answer: B - Concentration risk management and operational resilience
End of Lesson 5
Total Words: ~4,300
Estimated Completion Time: 55 minutes reading + 3-4 hours for deliverable
Key Takeaways
Third-party custody is the default institutional model
- Clearest compliance path
Self-custody is limited by regulation and operational complexity
- Only for own assets, requires strong governance
Hybrid models enable risk diversification
- Multiple custodians reduce concentration
Prime brokerage bundles custody with other services
- Convenience vs. concentration tradeoff
Model selection should match institutional requirements
- No one-size-fits-all answer ---