How Custodians Are Adapting to Tokenized Assets

BH

26 Apr 2026 (15 days ago)

23 min read

Share:

Tokenized asset custody is reshaping institutional finance — the market reached $708 billion in 2025 as custodians adopt MPC, HSMs, and new regulatory frameworks.

How Custodians Are Adapting to Tokenized Assets

Introduction

Tokenized asset custody is the institutional practice of safeguarding blockchain-based tokens — digital representations of ownership over financial or real-world assets — on behalf of clients. Traditional custodians hold ownership as entries in centralized databases, but tokenized assets are controlled by cryptographic private keys recorded on-chain. The entity holding the private key effectively controls the asset, which means custodians must now operate as active key infrastructure managers rather than passive record-keepers.

The global digital asset custody market reached $708.09 billion in 2025 and is projected to grow to $834.29 billion in 2026 at a compound annual growth rate (CAGR) of 17.8%. This growth is driven by institutional demand across multiple tokenized asset classes — US Treasuries, bonds, equities, real estate, and deposits — each requiring different security architectures and compliance frameworks. Custodians face a structural shift on three fronts simultaneously: private key security, regulatory compliance, and interoperability with legacy financial systems.

This article explains how institutional custodians are adapting their infrastructure and governance to meet that challenge. It covers the security models custodians use to protect private keys, the regulatory frameworks shaping qualified custodian status in the US and EU, the asset classes now held in institutional custody, and the operational challenges that remain.

Key Takeaways

  • In tokenized asset custody, ownership is recorded on a blockchain and controlled by a cryptographic private key, making key management the core operational responsibility for any custodian.
  • Institutional custodians use three primary security architectures — cold storage with Hardware Security Modules (HSMs), Multi-Party Computation (MPC), and multi-signature (multisig) — often combined in layered hybrid stacks.
  • In the US, the SEC confirmed in October 2025 that state-chartered trust companies meeting specific audit and reporting standards qualify as custodians for crypto assets; the OCC granted federal bank charters to BitGo, Fidelity Digital Assets, and others in December 2025.
  • Tokenized Treasury and money market fund assets reached $7.4 billion as of 2025 — an 80% year-on-year increase — while total tokenized real-world asset (RWA) value locked exceeded $65 billion across more than 200 institutional projects.
  • On-chain settlement enables atomic T+0 finality — both legs of a trade complete simultaneously — eliminating the 24-hour counterparty risk window that persists under traditional T+1 settlement.
  • BNY's tokenized deposit platform, launched in January 2026, and BitGo's OCC-chartered bank status, approved in December 2025, signal that tokenized custody is transitioning from specialist infrastructure into mainstream institutional finance.

What Is Tokenized Asset Custody and Why Does It Differ From Traditional Custody?

Ownership Records: Database Entries vs. Cryptographic Keys

In traditional custody, a custodian — an institution that safeguards assets on behalf of clients — holds ownership as entries in centralized databases or paper records. Multiple intermediaries maintain duplicate records, and reconciliation between parties takes time. Transferring an asset requires authorization across several counterparties before settlement completes.

Tokenized asset custody works differently. Ownership of a tokenized asset is recorded directly on a blockchain — a distributed, immutable ledger — and controlled by a cryptographic private key. The entity that holds the private key effectively controls the asset. No central authority can restore access if that key is lost.

Smart Contracts and On-Chain Programmability

A smart contract is a self-executing program on a blockchain that automatically carries out predefined actions when coded conditions are met. Smart contracts encode the rules of ownership: how many tokens exist, who can hold them, and how transfers execute. They also automate compliance functions — transfer restrictions, investor eligibility checks, and corporate actions — without requiring manual intermediary involvement.

This programmability creates a structural shift in what custodians must do. Traditional custodians are passive record-keepers that act on client instruction through established intermediary chains. Digital asset custodians must actively manage key infrastructure, monitor on-chain activity, and reconcile blockchain state with off-chain records — a fundamentally different operational role.

From Record-Keeping to Key Infrastructure Management

The shift from database records to on-chain ownership changes both the risk model and the operational requirements for custodians. In traditional finance, legal and regulatory mechanisms can reverse erroneous transactions. On a blockchain, confirmed transactions are irreversible — errors in key management or smart contract execution have permanent consequences.

Custodians therefore carry a new category of responsibility: securing private keys with the same rigor previously applied to physical asset vaults. Institutional digital asset custodians hold keys in segregated, secure environments and act on client instruction, reducing the operational risk that comes with self-custody.

What Security Models Do Digital Asset Custodians Use to Protect Tokenized Holdings?

Three Dominant Architectures for Key Protection

Institutional custodians use three core security architectures to protect private keys. The first is cold storage with a Hardware Security Module (HSM) — a tamper-resistant physical device that generates, stores, and signs cryptographic operations without ever exposing the private key. HSMs operate fully air-gapped from internet-connected systems, meeting FIPS 140-2 Level 3 or higher certification standards. Private keys processed inside an HSM never leave the device itself.

The second architecture is Multi-Party Computation (MPC) — a cryptographic method that splits a private key into multiple encrypted shares distributed across separate parties. No single party ever holds a complete key, eliminating the single point of failure common in earlier custody models. A typical institutional configuration uses a 2-of-3 threshold: any two of three designated key-share holders must participate to authorize a transaction.

The third architecture is multi-signature (multisig) custody, which requires multiple independent private keys — each held by a different authorized party or system — to co-sign a transaction before it executes. BitGo pioneered institutional Bitcoin multisig custody in 2013, and multisig remains widely used for Bitcoin holdings where MPC is less natively supported. Leading custodians increasingly combine all three approaches into layered security stacks.

Security Model Comparison

Table 1: Digital Asset Custody Security Models

 

Cold Storage / HSM

Description: Air-gapped key storage in FIPS-certified hardware device

Key Benefit: Strongest physical and logical isolation

Key Risk: Operational complexity; hardware failure risk

Custodians Using It: Fidelity Digital Assets, BitGo

MPC

Description: Key split into encrypted shares across multiple parties

Key Benefit: No single point of failure; flexible governance

Key Risk: Implementation complexity; protocol-specific support

Custodians Using It: Coinbase Custody, Cobo, Fireblocks

Multisig

Description: Multiple independent keys required to sign each transaction

Key Benefit: Clear separation of duties; audit transparency

Key Risk: Limited cross-chain support; slower signing workflows

Custodians Using It: BitGo, Anchorage Digital

TEE (Trusted Execution Environment)

Description: Isolated computation enclave within a processor

Key Benefit: Software-level key isolation without dedicated hardware

Key Risk: Vulnerability to processor-level exploits

Custodians Using It: Fireblocks, select hybrid providers

Hybrid

Description: Combination of MPC, HSM, and cold storage in layered architecture

Key Benefit: Defense-in-depth; operational resilience

Key Risk: Higher integration and maintenance overhead

Custodians Using It: Cobo, BitGo, Anchorage Digital

 

Data current as of April 2026.

Layered Architectures in Practice

No single security model covers every threat scenario. Institutional custodians therefore combine models: cold HSM storage for deep-reserve holdings, MPC for operational transaction signing, and multisig for governance approvals requiring multiple organizational stakeholders. Cobo's institutional architecture, for example, uses MPC with flexible M-of-N threshold configurations — such as 2-of-3 or 3-of-5 — matched to each client's internal approval policies. This layered approach reduces both the risk of external compromise and insider threats simultaneously.

How Does Regulatory Compliance Shape Crypto Custody Institutions Today?

The US Framework: Qualified Custodians and OCC Charters

In the United States, the SEC Custody Rule — Rule 206(4)-2 under the Advisers Act — requires registered investment advisers (RIAs) to maintain client assets with a qualified custodian, defined as a bank, savings association, broker-dealer, futures commission merchant, or certain foreign institutions. Applying this definition to crypto assets created years of regulatory ambiguity, as it was unclear whether digital asset custodians met the "bank" definition. In September 2025, the SEC's Division of Investment Management issued a no-action letter confirming that state-chartered trust companies meeting specific conditions — including audited GAAP financials and a SOC 1 or SOC 2 Type II report — can serve as qualified custodians for crypto assets.

The OCC federal bank charter provides the clearest qualified custodian status. Anchorage Digital holds an OCC federal bank charter, making it the first federally chartered digital asset bank in the US. In December 2025, BitGo received full, unconditional OCC approval to convert BitGo Trust Company to BitGo Bank \& Trust, National Association — a conversion that establishes its standing as a qualified custodian under the Advisers Act. Conditional OCC approvals were also granted to Fidelity Digital Assets and Paxos Trust Company during the same period.

The EU Framework: MiCA Authorization for CASPs

In the European Union, the Markets in Crypto-Assets Regulation (MiCA) — the EU-wide framework governing crypto services — requires any entity providing custody and administration of crypto assets on behalf of clients to obtain authorization as a Crypto-Asset Service Provider (CASP) from its national competent authority. Custody providers must segregate client assets from firm assets, maintain minimum permanent capital of €150,000, and implement documented private key management procedures subject to independent security audits. Non-custodial wallet providers, where clients retain sole control of private keys, fall outside MiCA's scope in most cases.

MiCA also imposes AML/KYC obligations aligned with the EU's existing Anti-Money Laundering Directive. CASPs authorized in one EU member state can passport their services across all other member states without requiring additional national licenses. This passporting mechanism creates a structural advantage for early-authorized custodians seeking to serve institutional clients across the EU market.

Regulatory Compliance as a Market Differentiator

Regulatory status now functions as a competitive differentiator in institutional custody. RIAs and registered funds must perform initial and ongoing annual due diligence on any custodian — assessing private key management, cybersecurity practices, and SOC report quality — before allocating client assets. Custodians that have secured OCC charters or MiCA CASP authorizations reduce this due diligence burden for institutional clients. The SEC also rescinded Staff Accounting Bulletin 121 in January 2025, removing an accounting obstacle that had previously discouraged banks from offering crypto custody services.

Which Types of Tokenized Assets Are Custodians Now Supporting and How Do They Compare?

From Treasuries to Real Estate: The Expanding Custody Universe

Institutional custodians now support a broad and growing range of tokenized asset classes. Tokenized US Treasuries and money market funds represent the largest segment by value, reaching $7.4 billion as of 2025 — an 80% increase year-to-date. Institutional demand for these instruments is driven by their yield-bearing characteristics and suitability as on-chain collateral. Real-world asset (RWA) tokenization — the process of representing ownership of physical or financial assets as blockchain tokens — reached a total value locked of $65 billion across more than 200 institutional projects in 2025, up 800% from 2023.

Tokenized bonds and structured notes are also gaining traction. DBS Bank, Singapore's largest bank, issued its first blockchain bond — an SGD 15 million ($11 million) digital bond on DBS Digital Exchange — as early as 2021. In August 2025, DBS expanded its tokenization program by issuing Ethereum-based tokenized structured notes distributed across third-party digital investment platforms including ADDX, DigiFT, and HydraX. Each asset class requires distinct custody infrastructure: tokenized Treasuries demand robust on-chain settlement rails, while tokenized real estate requires custodians to manage fractional ownership records and complex transfer restrictions.

Asset Taxonomy and Custody Requirements

Table 2: Tokenized Asset Classes and Custody Requirements

Tokenized Treasuries \& MMFs

Real-World Example: BlackRock BUIDL fund, OpenEden TBILL

On-Chain Standard: ERC-20

Custody Requirements: Real-time settlement rails, on-chain cash pairing

Compliance Framework: SEC qualified custodian, AML/KYC

Market Size / Note: $7.4B as of 2025, +80% YTD

Tokenized Bonds

Real-World Example: DBS $11M digital bond (2021)

On-Chain Standard: ERC-20 / private chain

Custody Requirements: Transfer restriction enforcement, investor eligibility

Compliance Framework: MAS, SEC, or MiCA authorization

Market Size / Note: Early-stage; growing institutional pipeline

Tokenized Equities

Real-World Example: Russell 1000 stocks (DTCC pilot)

On-Chain Standard: DLT-based entitlement record

Custody Requirements: DTC participant integration, entitlement reconciliation

Compliance Framework: SEC no-action relief, Advisers Act

Market Size / Note: Pilot launch planned H2 2026

Tokenized Real Estate

Real-World Example: St. Regis Aspen Resort (Elevated Returns)

On-Chain Standard: ERC-20 security token

Custody Requirements: Fractional ownership records, transfer restrictions

Compliance Framework: SEC Reg D / Reg S, AML/KYC

Market Size / Note: ~$20B market as of 2025

Tokenized Deposits

Real-World Example: BNY on-chain deposit representation (Jan 2026)

On-Chain Standard: Proprietary / permissioned chain

Custody Requirements: Real-time collateral management, intraday liquidity

Compliance Framework: OCC bank charter, Fed oversight

Market Size / Note: Institutional; intraday collateral use case

 

Data current as of April 2026.

The DTCC Pilot: Tokenized Equities Enter Institutional Custody

The DTCC Tokenization Services pilot marks the most significant expansion of tokenized custody into mainstream securities. On 11 December 2025, the SEC granted a no-action letter to The Depository Trust Company (DTC), permitting DTC participants to record their security entitlements using distributed ledger technology. The pilot covers securities in the Russell 1000 Index, US Treasury securities, and ETFs tracking major indices such as the S&P 500 and Nasdaq-100. The planned launch is scheduled for the second half of 2026 and runs for a three-year relief period.

How Are Legacy Financial Institutions Integrating On-Chain and Off-Chain Custody Systems?

BNY and State Street: Building Hybrid Infrastructure

BNY — the world's largest custodian bank, with $57.8 trillion in assets under custody as of January 2026 — launched its Digital Assets platform on 8 January 2026, enabling on-chain mirrored representations of client deposit balances. The platform operates on BNY's own private, permissioned blockchain and targets collateral and margin payment use cases for institutional clients. Early participants included Intercontinental Exchange (ICE), Citadel Securities, DRW, and stablecoin issuer Circle.

Client balances on the BNY platform remain simultaneously recorded in BNY's traditional core banking systems to preserve regulatory and reporting integrity. This dual-ledger approach — maintaining both on-chain and off-chain records in parallel — is the defining characteristic of hybrid custody infrastructure. State Street launched its own Digital Asset Platform in January 2026, extending custody and administration services to tokenized funds and digital cash instruments.

What Role Do Permissioned Blockchains Play in Institutional Custody?

A permissioned blockchain is a distributed ledger where access is restricted to a defined set of vetted participants, in contrast to public blockchains where any entity can join and validate transactions. Institutional custodians prefer permissioned architectures for three reasons: participant sets are known and contractually bound, transaction data remains confidential to the network, and the ledger produces audit trails compatible with existing regulatory reporting obligations.

Permissioned blockchains also offer the governance controls that institutional operations require. Network administrators can enforce rules — such as transfer restrictions or investor eligibility checks — at the protocol level without relying on external smart contract calls. Validated permissioned blockchain frameworks have demonstrated throughput of 118 transactions per second under research conditions, sufficient for intraday collateral and margin settlement workflows. This architecture preserves on-chain programmability while meeting the auditability standards regulators expect.

What Are the Main Operational Challenges Custodians Face With Tokenized Assets?

Four Structural Challenges in Tokenized Custody

Key management is the most fundamental operational challenge in tokenized asset custody. Private key loss results in permanent, unrecoverable asset loss — there is no central authority to restore access. An estimated $2.2 billion in crypto assets were lost through key theft or mismanagement in 2024. Institutional custodians mitigate this through MPC key-share distribution, HSM cold storage, and strict quorum-based authorization policies that prevent any single employee from controlling a complete key.

Interoperability presents the second major challenge. Tokenized assets are frequently issued on different blockchains — Ethereum, Solana, or private permissioned networks — and custody systems must communicate across all of them simultaneously. Separate blockchains cannot natively exchange data or transfer assets; custodians must integrate cross-chain protocols such as Chainlink's Cross-Chain Interoperability Protocol (CCIP) to move assets and transmit settlement messages between networks. Without standardized interoperability, tokenized assets become siloed within individual chain ecosystems, limiting liquidity and increasing reconciliation workloads.

Operational Risk Matrix

Table 3: Operational Challenges in Tokenized Asset Custody

ChallengeDescriptionImpact LevelMitigation ApproachCustodian Example
Key ManagementPrivate key loss or theft causes permanent, unrecoverable asset lossCriticalMPC key-share distribution; HSM cold storage; quorum authorizationCobo, BitGo
Smart Contract RiskBugs or exploits in deployed smart contracts can be irreversibleHighPre-deployment third-party audits; formal verification; proxy upgrade mechanismsAnchorage Digital, Fidelity Digital Assets
InteroperabilityAssets issued across multiple chains require cross-chain settlement coordinationHighCCIP and oracle networks; standardized token standards (ERC-20); middleware integrationTaurus (via Chainlink CCIP)
Corporate ActionsDividends, voting rights, and corporate events require automated smart contract execution or manual reconciliationMediumSmart contract automation of distributions; transfer agent integrationBNY, State Street

Data current as of April 2026.

How Do Custodians Handle Smart Contract Risk in Tokenized Asset Management?

Smart contracts are immutable after deployment on most public blockchains — errors in contract logic cannot be patched without deploying an entirely new contract. Institutional custodians require pre-deployment security audits by independent third-party firms such as Trail of Bits or Certik before agreeing to custody any tokenized asset. Formal verification — mathematically proving that contract code behaves exactly as specified — provides additional assurance for high-value token contracts.

Where contract upgrades are unavoidable, proxy contract patterns allow administrators to redirect calls from an unchanging proxy address to a new implementation contract, preserving the token's on-chain identity. However, proxy patterns introduce their own governance risks: the upgrade authority itself becomes a high-value attack target. Custodians therefore require that upgrade keys are protected with the same MPC or multisig controls applied to asset-holding wallets.

How Does Tokenized Asset Custody Affect Settlement Speed and Operational Efficiency?

From T+1 to Near-Instant: The Settlement Gap Narrows

Traditional securities markets in the US moved to T+1 settlement — one business day after the trade date — in May 2024, halving the prior two-day cycle. Despite this improvement, a 24-hour gap remains between trade execution and final settlement, during which counterparty risk persists and capital is locked as margin collateral. Tokenized securities settle directly on-chain, where confirmation of a transaction simultaneously updates ownership records for all participants. This achieves T+0 — or atomic settlement, where both legs of a trade complete at the exact same instant, eliminating the window for one party to default before the other receives the asset.

Settlement speed varies by blockchain. Ethereum reaches probabilistic finality within approximately 12–15 minutes; Solana achieves finality in approximately 400 milliseconds. Faster settlement reduces the volatility component of clearinghouse margin requirements — the SEC estimated that moving from T+2 to T+1 alone cut this margin buffer by 41% in extreme market scenarios, implying further gains at T+0. Institutional appetite for T+0 remains selective, however: a 2024 survey of bond market participants found that only 16% preferred instant settlement, with 84% favouring longer cycles that preserve netting and liquidity management flexibility.

On-Chain Cash: Unlocking Intraday Liquidity

Settlement speed gains only materialise fully when cash moves as fast as the asset. The principal constraint in early tokenized securities markets was the absence of on-chain cash — institutions could transfer tokenized bonds or fund shares instantly, but payment still settled through conventional banking rails on a next-day basis. BNY's tokenized deposit platform, launched on 8 January 2026, directly addresses this gap by enabling near real-time movement of mirrored cash balances on-chain to satisfy margin calls and collateral transfers within seconds.

BNY's platform connects three digital cash rails — stablecoins, tokenized money market funds, and tokenized deposits — into a single institutional infrastructure layer. Institutions can shift tokenized balances across participants in seconds, eliminating dependence on batch processing cut-off times that constrain intraday liquidity management in traditional systems. J.P. Morgan Asset Management similarly identifies real-time collateral movement and 24/7 operations as the primary efficiency drivers that justify institutional investment in tokenized money market fund infrastructure.

Operational Cost Implications

Fewer intermediaries in the settlement chain translate directly into lower operational costs. Traditional post-trade processing involves custodians, clearing houses, central securities depositories, and transfer agents — each adding cost and reconciliation overhead. On-chain atomic settlement removes the need for bilateral reconciliation between counterparties, reducing the volume of failed settlements and associated penalty fees. Smart contracts automate margin calls, collateral valuation, and reporting processes, reducing manual operational overhead while eliminating reconciliation errors between counterparty ledgers.

Which Leading Crypto Custody Institutions Are Currently Supporting Tokenized Assets?

Five Institutions Defining the Tokenized Custody Landscape

Anchorage Digital holds the distinction of being the first federally chartered digital asset bank in the US, having received its OCC national trust charter in 2021. The bank supports tokenized securities, staking, and — since January 2026 — institutional ETH restaking through an integration with ether.fi, enabling clients to restake ETH directly within qualified custody. In early 2026, Anchorage Digital began targeting a $200–400 million funding round ahead of a speculated IPO, signalling continued institutional confidence in its compliance-first infrastructure.

BNY — with $57.8 trillion in assets under custody as of January 2026 — operates the most systemically significant tokenized custody program among traditional banks. BNY serves as primary custodian for OpenEden's TBILL fund, which held $287 million in assets under management as of January 2026. Fidelity Digital Assets — part of Fidelity Investments, which manages over $14 trillion in total assets — supports Bitcoin, Ethereum, and tokenized money market fund custody, and received conditional OCC charter approval in December 2025.

Provider Comparison Table

Table 4: Leading Crypto Custody Institutions for Tokenized Assets

Anchorage Digital

Regulatory Status: OCC federal bank charter (2021)

Supported Asset Types: Tokenized securities, ETH restaking, stablecoins

Tokenized Asset Support: Tokenized securities, liquid staking tokens

Security Model: MPC + multisig hybrid

Insurance Coverage: Institutional crime policy (undisclosed limit)

BNY Mellon

Regulatory Status: OCC-regulated bank; Fed oversight

Supported Asset Types: Tokenized deposits, MMFs, Treasuries, RWAs

Tokenized Asset Support: On-chain mirrored deposits; TBILL fund custody

Security Model: Permissioned chain + HSM

Insurance Coverage: Bank-level FDIC and regulatory protections

Fidelity Digital Assets

Regulatory Status: Conditional OCC charter (Dec 2025)

Supported Asset Types: BTC, ETH, tokenized MMFs

Tokenized Asset Support: Tokenized money market fund custody

Security Model: Cold storage + MPC

Insurance Coverage: Commercial crime policy (undisclosed limit)

Coinbase Custody

Regulatory Status: State-chartered trust (NY DFS); SOC 1 \& SOC 2 Type II

Supported Asset Types: 40+ blockchains, 470+ assets, tokenized Treasuries, RWAs

Tokenized Asset Support: Tokenized Treasuries, RWAs

Security Model: MPC + cold storage

Insurance Coverage: Commercial crime policy; industry-leading coverage

BitGo

Regulatory Status: OCC national bank charter approved Dec 2025; NYSE: BTGO

Supported Asset Types: BTC, ETH, tokenized securities, stablecoins

Tokenized Asset Support: Tokenized securities; USD1 stablecoin custody

Security Model: Multisig + MPC hybrid

Insurance Coverage: Up to $250M in qualified custody insurance

 

Data current as of April 2026.

Regulatory Milestones Reshaping the Competitive Field

The December 2025 OCC charter approvals — granted simultaneously to BitGo, Fidelity Digital Assets, Ripple, Paxos, and First National Digital Currency Bank — represent a structural shift in the US custody landscape. Federal charters give these institutions a single, uniform supervisory regime in place of a patchwork of state-level licences, reducing compliance overhead and simplifying the qualified custodian determination for RIA clients. BitGo completed its IPO in January 2026, raising $212.8 million at a valuation exceeding $2 billion, marking the first public listing by a dedicated digital asset custodian.

Summary

Custodians adapting to tokenized assets face a fundamental shift in their operating model. Where traditional custody depends on centralized database records and established intermediary chains, tokenized custody requires active management of cryptographic private key infrastructure, on-chain settlement rails, and smart contract risk. The three dominant security architectures — HSM cold storage, MPC key-share distribution, and multisig authorization — are increasingly deployed in layered hybrid configurations by institutions such as Cobo, BitGo, and Anchorage Digital. Regulatory frameworks in both the US and EU have advanced significantly: OCC federal bank charters issued to multiple custodians in December 2025 and MiCA CASP authorization requirements now give institutional clients clearer standards for selecting qualified custodians.

The market reflects this institutional commitment. The digital asset custody market reached $708.09 billion in 2025 and is projected to grow to $834.29 billion in 2026 at a 17.8% CAGR. Tokenized RWA total value locked surpassed $65 billion in 2025 — an 800% increase from 2023 — while BNY's January 2026 tokenized deposit platform connected on-chain cash to real-time collateral and margin workflows for institutional clients. The DTCC Tokenization Services pilot, backed by an SEC no-action letter issued in December 2025, is scheduled to extend tokenized custody to Russell 1000 equities and US Treasury securities in the second half of 2026.

Conclusion

Tokenized asset custody is no longer an experimental service offered by specialist crypto-native firms. Traditional custodians including BNY, State Street, and Fidelity Digital Assets have built production-grade hybrid infrastructure combining permissioned blockchain rails with existing compliance and reporting systems. The convergence of OCC federal charters, MiCA CASP authorization, and the DTCC pilot establishes a regulatory foundation that closes the qualified custodian gap which had previously limited institutional participation.

Understanding how tokenized custody works equips institutional investors, compliance officers, and asset managers to evaluate custodian selection criteria — regulatory status, security model, supported asset classes, and insurance coverage — with precision. The core technical realities covered in this article — private key control determines asset control, smart contracts automate compliance but require pre-deployment audits, and atomic T+0 settlement eliminates counterparty risk windows — remain the foundational principles regardless of which platforms, blockchains, or custodians dominate the market.

Why You Might Be Interested?

Institutional investors, RIAs, compliance officers, and asset managers selecting custody providers for tokenized securities or RWAs need to understand how private key management, qualified custodian status, and security model choices directly affect counterparty risk, regulatory obligations, and settlement infrastructure — all areas where tokenized custody differs materially from traditional brokerage accounts.

Tokenized asset custodians must protect cryptographic private keys on behalf of clients — a fundamentally different infrastructure requirement from traditional custody — while meeting the same qualified custodian regulatory obligations as mainstream financial institutions.

Quick Stats

  • Digital asset custody market size: $708.09 billion (2025), projected $834.29 billion (2026) at 17.8% CAGR
  • Tokenized Treasury and money market fund assets: $7.4 billion as of 2025, up 80% year-on-year
  • Tokenized RWA total value locked: $65 billion as of 2025, up 800% from 2023, across 200+ institutional projects
  • BNY assets under custody: $57.8 trillion as of January 2026
  • OpenEden TBILL fund AUM: $287 million as of January 2026 (custodied by BNY)
  • BitGo IPO proceeds: $212.8 million raised in January 2026 at a valuation exceeding $2 billion — the first public listing by a dedicated digital asset custodian
  • BCG estimate: tokenized securities market cap projected to reach $16 trillion by 2030, equal to approximately 10% of global GDP
  • DTCC Tokenization Services pilot: covers Russell 1000 Index stocks, US Treasury securities, and major index ETFs; three-year relief period scheduled to begin H2 2026

Data current as of April 2026.

FAQ

?What happens to a client's tokenized assets if a custodian loses the private key?

Private key loss results in permanent, unrecoverable asset loss — there is no custodian-of-last-resort on a decentralized blockchain to restore access. Institutional custodians mitigate this risk by using MPC key-share distribution, where no single party ever holds a complete key, and HSM cold storage, where keys never leave a tamper-resistant hardware device. Clients should verify that any custodian uses quorum-based authorization policies — requiring multiple parties to approve any transaction — before entrusting tokenized assets to their platform.

?Is tokenized asset custody covered by deposit insurance or investor protection schemes?

Tokenized assets held with custodians are generally not covered by FDIC deposit insurance unless the custodian is a federally chartered bank holding funds in deposit form. BNY's on-chain mirrored deposit representations, launched in January 2026, carry bank-level regulatory protections as a federally regulated institution. Other custodians, including Coinbase Custody and BitGo, maintain commercial crime policies — BitGo offers up to $250 million in qualified custody insurance — but these are private insurance arrangements rather than government-backed schemes.

?Can a custodian support tokenized assets across multiple blockchains simultaneously?

Multi-chain support is technically possible but operationally complex. Each blockchain uses different token standards, consensus mechanisms, and finality times — Ethereum reaches finality in approximately 12–15 minutes while Solana achieves it in approximately 400 milliseconds. Custodians integrate cross-chain protocols such as Chainlink's Cross-Chain Interoperability Protocol (CCIP) and middleware layers to move assets and settlement messages between networks, though each integration increases operational overhead.

?How does MiCA affect non-EU custodians serving European institutional clients?

Under MiCA, any entity providing custody and administration of crypto assets on behalf of clients located in the EU must obtain CASP authorization from a national competent authority within an EU member state. Non-EU custodians without authorization cannot legally offer these services to EU clients without establishing an authorized EU entity. Once authorized in one member state, a CASP can passport its custody services across all EU member states without additional national licenses — creating a strong incentive for non-EU custodians to seek early authorization in a single jurisdiction.

?What is the difference between a tokenized deposit and a stablecoin?

A tokenized deposit is an on-chain representation of a balance held at a regulated bank — BNY's platform, for example, creates mirrored on-chain records of actual dollar deposits held within BNY's regulated banking infrastructure. A stablecoin is a separately issued token pegged to a reference asset (typically USD) but issued by a non-bank entity and backed by reserve assets that vary by issuer. Tokenized deposits carry bank regulatory protections and are subject to Fed oversight; most stablecoins currently do not.

?What due diligence must an RIA perform before using a digital asset custodian?

The SEC requires registered investment advisers to perform initial and ongoing annual due diligence on any custodian holding client assets. This includes assessing private key management procedures, cybersecurity practices, and the quality of SOC 1 or SOC 2 Type II audit reports. Custodians with OCC federal bank charters — such as Anchorage Digital and BitGo Bank \& Trust — simplify this process by providing a uniform, federally supervised regulatory framework that satisfies the qualified custodian standard under the Advisers Act.

References / Sources

Regulatory Frameworks

Primary regulatory sources covering qualified custodian rules, OCC charters, and MiCA authorization requirements.

  • Research and Markets: Digital Asset Custody Market Report 2026 (researchandmarkets.com, Jan 2026)
  • OCC: Corporate Decision #1366 — OCC National Trust Bank Charter Approvals (occ.gov, Feb 2026)
  • SEC / IQ-EQ: No-Action Relief for Crypto Custody — State-Chartered Trust Companies (iqeq.com, Oct 2025)
  • AMLBot: MiCA License Explained — CASP Requirements and EU Passporting (amlbot.com, Nov 2025)
  • Mayer Brown: SEC No-Action Relief for DTC Tokenization Pilot (mayerbrown.com, Dec 2025)
Custody Security and Operations

Technical and operational documentation on key management architectures, smart contract risk, and hybrid custody infrastructure.

  • BitGo: Tokenized Securities and the Future of Digital Asset Custody (bitgo.com, Oct 2025)
  • Cobo: Complete Guide to Evaluating Crypto Custody Firms for Institutional Investors (cobo.com, Jun 2025)
  • Liminal Custody: HSM vs. Hardware Wallets — Why Institutions Upgrade to HSM Cold Storage (liminalcustody.com, Mar 2026)
  • Chainlink: Digital Asset Custody and the Institutional Role of Chainlink (chain.link, Mar 2026)
  • Stout: Risk in the Age of Tokenization — What Audit Firms Need to Know (stout.com, May 2025)
Market Data and Institutional Activity

Market size statistics, tokenized asset volumes, and institutional custody program announcements.

  • BNY: BNY Extends Digital Cash Capabilities for Institutional Clients (bny.com, Jan 2026)
  • CoinLaw: Asset Tokenization Statistics 2026 (coinlaw.io, Aug 2025)
  • Ledger Insights: BNY Goes Live with Tokenized Deposits (ledgerinsights.com, Jan 2026)
  • Yahoo Finance / Bloomberg: BitGo Raises $212.8M in IPO — First Public Digital Asset Custodian (finance.yahoo.com, Jan 2026)
  • Chainlink: Real-Time Settlement — T+0 and Atomic Transactions (chain.link, Feb 2026)
Tokenized Asset Standards and Infrastructure

Technical and standards documentation on tokenized asset classes, blockchain settlement, and DLT infrastructure.

  • SEC / Cadwalader: DTCC DTC Tokenization Services No-Action Letter (cadwalader.com, Apr 2026)
  • Frontiers in Blockchain / Nature: Privacy-Preserving and Auditable Blockchain Framework for Institutional Use (nature.com, Sep 2025)
  • BCG / ADDX: Asset Tokenization Estimated to Reach $16 Trillion by 2030 (ledgerinsights.com, Sep 2022)
  • DBS Bank: DBS Expands Blockchain Capabilities — Tokenized Structured Notes (dbs.com, Aug 2025)

Related articles

Latest articles

Coinpaprika education

Discover practical guides, definitions, and deep dives to grow your crypto knowledge.

Cryptocurrencies are highly volatile and involve significant risk. You may lose part or all of your investment.

All information on Coinpaprika is provided for informational purposes only and does not constitute financial or investment advice. Always conduct your own research (DYOR) and consult a qualified financial advisor before making investment decisions.

Coinpaprika is not liable for any losses resulting from the use of this information.

Go back to Education