Crypto Custodian Risk Explained: What Happens if a Custodian Fails?

Custodian risk is one of the least understood but potentially devastating threats in the crypto ecosystem. When a custodian fails, the fate of your funds ultimately depends on a mix of several factors, including contract terms, asset segregation, and local law.

Unfortunately, however, most people who store crypto with a third party never read the fine print. They assume their assets are safe, ring-fenced, and returnable on demand.

However, history shows how costly that assumption can be: The spectacular failures at Celsius, FTX, and Prime Trust are prime examples of that — billions of dollars in customer funds were wiped out in these three incidents alone.

This article breaks down what actually happens when a crypto custodian fails, what determines whether you get your assets back, and, more importantly, what you can do to protect yourself before a crisis hits.

KEY TAKEAWAYS
➤ A crypto custodian failure can take many forms, from insolvency and hacks to fraud and operational freezes.
➤ Whether customers recover assets depends on segregation, contract terms, account structure, and local law.
➤ Terms of service can quietly transfer ownership of deposited crypto from customer to custodian.
➤ Crypto custody has no equivalent to FDIC or SIPC protection for bank and brokerage accounts.

What is a crypto custodian?

A crypto custodian is a company whose services include holding and protecting digital assets on your behalf.

So, in practice, that means the custodian controls the private keys that authorize transactions (from your fund) on the blockchain.

For instance, when you deposit Bitcoin (BTC) or Ether (ETH) with a custodian, you hand over direct control of those assets to them in exchange for a promise that they will keep the funds safe.

Note that this arrangement is different from a traditional bank account or brokerage in several ways: For example, a bank deposit in the US is protected by FDIC insurance up to $250,000. Similarly, a brokerage account holds securities in your name, backed by SIPC coverage.

Crypto custody operates without either of those protections.

At the same time, it is also different from how crypto exchanges operate. An exchange typically combines trading, lending, and custody into a single platform, which means customer assets can be exposed to risks from all three activities at once. This structure means the same pool of assets may be exposed to several types of risk at once. Problems in one part of the business can quickly affect funds held in custody.

In contrast, a dedicated custodian focuses only on safekeeping. However, that separation reduces risk only if the custodian’s legal and operational framework truly protects customer assets.

Platform type	Primary role	Custody risk exposure
Custodian	Safekeeping assets	Key security and insolvency
Exchange	Trading platform	Custody + liquidity + leverage
Crypto lender	Lending/borrowing	Counterparty credit risk

How crypto custodian risk shows up in practice

Custodian failure rarely begins with a single dramatic event. In most cases, risk appears through a series of operational or financial problems that gradually undermine the platform’s ability to protect customer assets.

One possibility is insolvency. The custodian runs out of money, cannot meet obligations, and enters bankruptcy proceedings. For instance, FTX filed for Chapter 11 in November 2022 with an $8 billion shortfall between customer deposits and available assets.

Security breaches pose another big threat to the custodian model. A successful attack on the custodian’s security apparatus can drain wallets or compromise key infrastructure, which could then leave customers unable to recover their funds.

Mt. Gox lost 850,000 bitcoin through undetected security breaches over several years. The Bybit breach in early 2025 resulted in a theft of Ether worth $1.5 billion, though the platform survived on its reserves.

Misuse of customer assets can produce similar consequences. Some platforms use deposited crypto for trading, lending, or other financial activities. If those positions collapse or counterparties fail, the custodian may no longer hold enough assets to honor customer balances.

Fraud is the most extreme scenario. QuadrigaCX customers discovered the platform’s $190 million in reserves were fiction only after the CEO’s death in 2019.

To cut a long story short, each of these situations can produce a different legal and financial outcome. What happens next depends on how the custodian structured its custody model and how courts interpret the relationship between the platform and its customers.

Crypto custodian risk is not limited to bankruptcy. Hacks, key loss, asset misuse, and operational failures can all freeze or destroy customer holdings before any court filing takes place.

What happens to customer assets after a failure?

The answer depends on four factors that interact in ways most users never consider until a crisis is already underway:

• The first is asset segregation. If the custodian kept your crypto in a separate wallet clearly labeled as yours, those assets have a stronger claim to being excluded from the company’s general pool. On the other hand, if everything were pooled in a single omnibus wallet, the picture becomes much harder to sort out.

• The second is the customer agreement. The contract you signed determines the legal nature of the relationship. Some agreements establish a trust or agency arrangement. Others quietly transfer ownership to the custodian, turning your deposit into something closer to a loan.

• The third is account structure. Custodians that operate under a trust charter or banking license may offer stronger protections than unregulated platforms.

• The fourth is jurisdiction. Property rights in digital assets vary from country to country and state to state. A custodian regulated in New York faces different requirements than one based in the Cayman Islands. That difference can determine whether your assets are returned or absorbed into a bankruptcy estate.

Are your assets part of the bankruptcy estate?

This is the question that matters most in a custodian insolvency, and the Celsius case provided the first major answer.

In January 2023, a U.S. bankruptcy court ruled that digital assets deposited into Celsius Earn accounts were property of the Celsius bankruptcy estate, not property of the customers.

The court’s reasoning was straightforward. The Celsius Terms of Use stated that customers “grant Celsius all right and title to such Digital Assets, including ownership rights.” That language, the court found, “unequivocally transferred title and ownership” at the moment of deposit.

The practical consequence was severe. Celsius held roughly $2.6 billion in assets against approximately $5.1 billion in customer liabilities. Customers, therefore, became unsecured creditors, meaning they stood in line behind secured lenders and received only a fraction of what they had deposited.

The court also noted that these were clickwrap agreements, meaning users accepted them by clicking a button without necessarily reading the full text. Under New York law, that form of acceptance is enforceable. The lesson for every crypto holder is that terms of service are not just formalities. They are the legal documents that determine whether you own your assets or have in fact lent them to the custodian.

In the Celsius bankruptcy, the court ruled that Terms of Use language transferred ownership of deposited crypto to Celsius. Customers who assumed they still owned their tokens became unsecured creditors with limited recovery.

Why asset segregation matters more than marketing

Many custodians advertise that they hold assets “for your benefit” or “in trust.” Those phrases sound protective, but their legal weight depends entirely on how the custodian actually stores and accounts for your crypto.

Segregated custody means the custodian maintains individual wallets or clearly separated account records for each customer.

In this arrangement, your assets are identifiable, traceable, and can be separated from the custodian’s own holdings. Commingled or omnibus storage, on the other hand, pools all customer assets into shared wallets. The custodian tracks who owns what through internal records, but on-chain, everything sits in the same address.

The New York Department of Financial Services addressed this directly in its January 2023 guidance, updated in September 2025.

NYDFS expects licensed custodians to separately account for and segregate customer virtual currency from corporate assets, both on-chain and in internal ledger accounts. When omnibus wallets are used, the custodian must hold them “as agent or trustee for the benefit of those customers.”

Switzerland’s FINMA takes a similarly protective stance. Under the DLT Blanket Act, Swiss financial institutions may offer custody within a bankruptcy-proof framework, provided crypto-based assets are held in readiness for customers at all times with clear individual or collective custody arrangements.

Custody model	On-chain Structure	Insolvency protection	Traceability
Individual segregated wallets	Separate wallet per customer	Strongest	High
Omnibus wallet with trust language	Shared wallet, custodian as trustee	Moderate to strong	Depends on records
Commingled without trust terms	Shared wallet, no trust structure	Weak	Low

The gap between a marketing claim and a legally enforceable segregation practice can mean the difference between getting your assets back and standing in a creditor line.

Sub-custodians and the risk most users miss

A sub-custodian is a third party that your custodian hires to store some or all of the assets it holds on your behalf. This creates an additional layer of crypto custodian risk that most users never see.

The arrangement is common. Many custodians lack the infrastructure to manage every blockchain or asset type directly, so they delegate storage to specialized firms.

Now, if the sub-custodian fails, or if the contractual relationship between your custodian and its sub-custodian is poorly structured, your assets can be caught in a dispute involving entities you never chose to do business with.

NYDFS requires licensed custodians to perform adequate due diligence on sub-custodians and to seek prior regulatory approval before entering sub-custody arrangements. The updated 2025 guidance adds that the service agreement must include an acknowledgment from the sub-custodian that all virtual currency will be handled according to NYDFS standards.

The OCC has taken a similar approach for national banks. Banks may outsource crypto custody to third parties, but only with appropriate third-party risk management practices, including rigorous due diligence, audit coverage, and ongoing monitoring.

If your custodian uses a sub-custodian, ask whether that arrangement is disclosed in your customer agreement, whether the sub-custodian meets regulatory standards, and how your assets would be treated if the sub-custodian failed.

What to check before you trust a custodian

One thing to understand before evaluating any custodian is that crypto custody has no government safety net. There is no FDIC insurance for custodied crypto. There is no SIPC protection.

Some jurisdictions offer stronger legal frameworks than others. The UK Law Commission, for instance, has recommended recognizing digital assets as a third category of personal property.

Similarly, FINMA’s framework in Switzerland provides bankruptcy protection when custody meets specific segregation standards. These protections are not universal, though.

That’s why at the end of the day, the onus of research and due diligence falls squarely on you.

Here are the questions that you should typically ask while evaluating a custodian:

• Segregation language should be the starting point. Does the customer agreement state that your assets will be held in segregated wallets or accounts separate from the custodian’s corporate funds? Does the agreement describe the custodian as an agent or trustee acting on your behalf?

• Property interest and ownership terms matter just as much. Does the agreement say you retain title? Or does it include transfer-of-title clauses that shift ownership upon deposit? Language granting the custodian rights to “pledge, rehypothecate, sell, lend, or otherwise transfer” your assets signals that you are not retaining ownership. NYDFS guidance now expects custodians to disclose the property interest a customer retains in custodied assets.

• Sub-custody disclosure is often missing. Does the custodian use sub-custodians? If so, are those arrangements disclosed in your agreement?

• Jurisdiction shapes the legal framework. Where is the custodian incorporated and regulated? Do the laws of that jurisdiction recognize crypto as property?

• Audits, internal controls, and insurance coverage offer clues about operational soundness. Does the custodian publish independent audit reports? Does it carry insurance, and what risks does that coverage actually include? Proof-of-reserves reports alone offer limited reassurance. The U.S. PCAOB has warned that such reports provide only a snapshot of assets and often omit liabilities.

• Withdrawal rights reveal how much control you actually have. Can you withdraw at any time, or can the custodian restrict withdrawals under certain conditions?

What to Do if a Custodian Freezes Withdrawals

If a custodian stops processing withdrawals or announces financial difficulties, there are practical steps you can take.

Document everything immediately. Screenshot your account balances, transaction history, and any communications from the custodian. Save copies of the current terms of service. These records become critical evidence if the situation moves to a legal proceeding.

Review your customer agreement. Look for language about withdrawal restrictions, dispute resolution, and governing law. Understanding your contractual position early gives you a clearer picture of your likely standing.

Monitor court filings. If the custodian enters bankruptcy, a court-appointed trustee typically establishes a process for creditor claims. Missing a filing deadline can reduce or eliminate your recovery.

Consider legal counsel. Crypto insolvency cases involve specialized questions about property rights and contract interpretation. A lawyer experienced in digital asset law can advise on whether your assets are likely to be treated as your property or as part of the bankruptcy estate.

Move remaining holdings to self-custody. If you hold assets on other platforms, transferring them to a non-custodial wallet eliminates third-party risk entirely.

Very few custodian failures offer advance warning. The strongest protection is preparation. Know your contractual rights, keep records, and maintain a plan for moving assets to self-custody if warning signs appear.

Frequently asked questions