Choosing a Custodian for a Digital Asset Fund: What Institutional Allocators Expect

Related Articles







Operations & Infrastructure
Custody is the single most scrutinised operational dimension of any digital asset fund due diligence process. Getting it right is not merely a compliance exercise. It is the foundation on which institutional investor trust is built, maintained, and defended under stress.
By CV5 Capital | April 2026
Of all the operational questions that institutional allocators ask when evaluating a digital asset fund, none receives more sustained attention than custody. The question of where assets are held, by whom, under what legal and technical framework, and what would happen to those assets in a range of adverse scenarios has moved from a secondary operational concern to a primary investment decision criterion. For the overwhelming majority of institutional investors with a formal mandate to allocate to digital asset strategies, an unsatisfactory custody answer is disqualifying, regardless of the quality of the investment team or the appeal of the strategy.
The reasons for this elevated scrutiny are not difficult to understand. The failures of 2022 and 2023 demonstrated with devastating clarity what happens when digital asset funds operate without genuine asset segregation, independent custody oversight, and the structural protections that institutional investors would consider baseline requirements in any other asset class. In several of the most prominent collapses of that period, investor assets were not held in segregated custody at all. They were commingled with the proprietary assets of the operating entity, creating the conditions under which investor capital could be, and in multiple cases was, deployed without investor knowledge or consent.
The institutional response to those events has been a fundamental recalibration of custody standards. Allocators who previously accepted custody descriptions that were vague or incomplete now require precise, documented, verifiable answers to a comprehensive set of custody-specific questions. Managers who cannot provide those answers clearly and consistently will not progress through institutional due diligence, regardless of their performance record or the sophistication of their investment process.
Before examining the specific due diligence questions that arise in this area, it is worth establishing the underlying criteria that institutional investors apply when evaluating a fund's custody arrangements. These criteria are not arbitrary. They reflect the lessons of operational failures across both traditional and digital asset markets, and they map directly to the specific failure modes that have caused institutional investors to lose capital in funds where custody was inadequate.
"The custody question is not a technical footnote in institutional due diligence. It is the foundation. An allocator who cannot verify where the assets are, who holds them, and what protects them in an adverse scenario cannot make a responsible investment decision, regardless of what the return record shows."
Digital asset funds operate across a spectrum of custody models, and institutional allocators evaluate each model differently. Understanding how the three primary approaches, qualified institutional custody, specialist digital asset custody, and self-custody, perform against institutional expectations is essential for managers designing their custody framework and for allocators evaluating the arrangements they encounter.
Custody Model Comparison
Institutional Allocator Evaluation CriteriaThe entry of regulated banks and trust companies into digital asset custody has been one of the most significant structural developments in the institutional digital asset market over the past two years. For institutional allocators with strict custodian approval requirements, particularly those governed by investment policy statements that require assets to be held with a qualified custodian as defined under traditional securities regulation, the availability of bank-grade custody for digital assets has materially broadened the investable universe. The regulatory standing, asset segregation frameworks, and insurance arrangements associated with bank custody carry the strongest institutional credibility of any custody model. The trade-off is a typically narrower range of supported assets and limited or no access to on-chain activities including DeFi protocol interaction and staking.
Specialist digital asset custodians, purpose-built for the requirements of digital asset fund managers, offer a combination of institutional-grade technical architecture and broader asset coverage than most bank custodians can currently provide. The key management infrastructure of leading specialist custodians typically employs multi-party computation technology, which distributes the cryptographic signing process across multiple parties and devices without any single point of failure or key reconstruction, combined with institutional governance controls over transaction approval workflows. For managers running strategies that require access to a broad digital asset universe including altcoins, on-chain protocol interactions, and staking activities, specialist custodians provide the operational flexibility that bank custody currently cannot match.
Institutional due diligence on specialist custodians focuses particularly on their regulatory status, the jurisdiction in which they are licensed, the scope of activities covered by that licence, the financial strength of the organisation, and the specifics of their insurance arrangements. Allocators have become considerably more granular in their assessment of specialist custodian arrangements, and managers who rely on the name recognition of a well-known specialist custodian without being able to provide detailed answers to insurance, segregation, and technical architecture questions will find that name recognition alone does not satisfy institutional scrutiny.
Self-custody, where the investment manager controls the private keys to fund assets rather than delegating that control to an independent custodian, is not an acceptable arrangement for the overwhelming majority of institutional investors. The fundamental problem is not technical. A manager may have excellent key management practices and sophisticated multi-signature controls. The problem is structural. When the investment manager also controls the assets, the independence of the custody function is eliminated, and the investor has no recourse to an independent third party if the manager's key management fails or if the manager acts contrary to investor interests. For institutional investors whose fiduciary obligations require genuine asset segregation, self-custody arrangements are disqualifying regardless of the quality of the manager's technical controls.
The technical architecture of a digital asset custodian's key management system is examined in considerably more detail in institutional due diligence processes today than was standard practice three years ago. Allocators, or the operational due diligence specialists they engage for this purpose, now ask questions about key management architecture that require custodians and managers to describe their technical controls in precise terms rather than at the level of marketing description.
The primary architectural distinction that institutional investors examine is between multi-signature schemes, where transaction authorisation requires a defined threshold of cryptographic signatures from a set of independently controlled keys, and multi-party computation, where the signing process itself is distributed across multiple parties without any single device ever holding a complete private key. Both approaches represent significant advances over single-key custody arrangements, but they have different technical properties, different failure modes, and different implications for the operational workflows involved in executing transactions. Investors are increasingly able to ask informed questions about these distinctions, and managers who cannot describe their custodian's approach at this level of technical specificity will find the conversation progressing uncomfortably.
Beyond the specific key management protocol, institutional due diligence examines the geographic distribution of key material and signing infrastructure, the business continuity arrangements in place to ensure the fund can continue operating if a data centre, geographic region, or key personnel becomes unavailable, and the process for key recovery in the event of catastrophic loss. The custodian's disaster recovery procedures, the frequency with which they are tested, and the documentation of test results are all areas of inquiry in a comprehensive custody due diligence review. Managers who have not requested this information from their custodian before entering due diligence are likely to encounter delays in responding to investor questions that could have been anticipated and prepared for.
The governance controls applied to individual transaction authorisations are an area of increasing due diligence focus. Institutional investors ask who within the investment manager's organisation has authority to initiate, approve, and execute transactions, what controls prevent any individual from initiating and approving a transaction without independent authorisation, how those controls are documented and enforced at the technical level, and how the custodian's own approval workflow interacts with the manager's internal authorisation controls. The ability to demonstrate that no single individual within the investment manager's team can unilaterally move fund assets without independent authorisation is a governance requirement that institutional investors treat as essential rather than preferable.
Asset segregation is the concept that an investor's assets are legally and operationally distinct from both the investment manager's assets and the custodian's own assets, such that in the event of the insolvency of either the manager or the custodian, the investor's assets are not available to satisfy the creditors of the insolvent entity. For traditional asset classes, the legal basis for asset segregation is well established and the operational processes that implement it are mature and widely understood. For digital assets, both the legal and the operational dimensions of segregation require more careful examination.
At the legal level, institutional investors ask whether the custodian maintains fund assets in individually segregated wallets or in omnibus wallets shared across multiple clients. The legal implications of each arrangement differ significantly. Individually segregated wallets provide the clearest legal separation, but may carry higher operational costs and create limitations on certain operational efficiencies. Omnibus arrangements are more common and operationally efficient, but require clear documentation of how individual client entitlements are tracked, how the custodian's obligations to individual clients are evidenced, and what the legal position of individual clients would be in the event of the custodian's insolvency.
At the operational level, investors ask how the custodian reconciles its own records of client entitlements with the on-chain position, how frequently that reconciliation occurs, and what the process is for resolving discrepancies. The daily reconciliation of on-chain positions with the custodian's internal ledger and the fund administrator's NAV calculation is a minimum operational standard that institutional investors expect, and the absence of a clear reconciliation process is a significant due diligence concern.
Insurance coverage for digital assets in custody is an area where the gap between marketing description and substantive protection is frequently wider than managers appreciate. Institutional investors have learned to examine custody insurance arrangements with considerable precision, asking not merely whether coverage exists but what the coverage specifically includes, what it explicitly excludes, what the aggregate and per-incident limits are, how those limits compare to the assets under custody, who the underwriter is and what their financial strength rating is, and what the claims process involves in the event of a loss.
The most common coverage categories for digital asset custody insurance include crime coverage for theft by external attackers and insider fraud, errors and omissions coverage for operational failures that result in asset loss, and specific technology-related coverage for losses arising from software vulnerabilities or system failures. The interaction between these categories, and the specific definitions of covered and excluded events within each, require careful examination. Several categories of loss that might appear to be covered by a general description of comprehensive insurance are in fact excluded under the specific terms of standard digital asset custody insurance policies.
Managers who have not reviewed their custodian's insurance documentation in detail, and who cannot answer specific investor questions about coverage limits, exclusions, and underwriter identity, will find the insurance section of custody due diligence a source of prolonged follow-up inquiry. The appropriate approach is to request and review the custodian's insurance certificates and policy summaries before entering investor due diligence, and to understand which categories of risk are and are not covered under the arrangements in place.
One of the most significant developments in institutional custody due diligence over the past two years has been the increasing expectation that funds be able to provide independently verifiable confirmation of their asset holdings, either through direct on-chain verification or through a formal proof-of-reserves process. This expectation reflects the recognition, crystallised by the failures of 2022, that traditional paper-based asset confirmation processes, where the fund relies on the custodian's own statement of assets held, are insufficient when the underlying asset exists on a public blockchain where the actual position can in principle be verified independently.
Institutional investors increasingly ask whether they can be provided with the on-chain wallet addresses associated with fund assets, or whether the fund's administrator or auditor can provide a periodic proof-of-reserves attestation that verifies the on-chain position against the fund's books and records. The willingness and ability to provide this level of transparency is increasingly used as a signal of the quality and independence of a fund's custody arrangements. Managers who operate with custody arrangements that are not compatible with on-chain verification should understand that this is likely to become a more significant point of institutional inquiry over the coming years, not a less significant one.
The custody requirements for funds running complex digital asset strategies, including those with exposure to DeFi protocols, staking positions, lending arrangements, or assets across multiple blockchain networks, are materially more demanding than those for funds holding only major liquid tokens in a straightforward custody arrangement. Institutional due diligence on these strategies asks not only about the general custody framework but about how each category of complex exposure is custodied, governed, and reconciled.
For strategies that interact with DeFi protocols, investors ask how the governance approval process for protocol interactions is structured, who has authority to approve smart contract interactions, what process is used to assess the security of protocols before deploying capital, and how the value of on-chain positions is calculated for NAV purposes when those positions cannot be exited instantaneously. The treatment of locked positions, positions subject to withdrawal queues, and positions in protocols that have been subject to governance changes or security incidents are all areas of specific inquiry.
For staking strategies, investors ask about the technical and legal structure of the staking arrangement, the identity and regulatory status of any validator infrastructure used, the management of slashing risk and the insurance arrangements applicable to it, the treatment of staking rewards in the NAV, and the liquidity profile of staked positions including any lock-up periods or unstaking queues. The interaction between staking arrangements and the fund's redemption terms is a frequent area of investor concern, particularly for funds that offer more frequent redemption terms than the liquidity profile of their staking positions can comfortably support.
Multi-chain exposure creates additional complexity around custody architecture, since different blockchain networks have different key management requirements, different on-chain verification approaches, and different risk profiles at the network level. Institutional investors ask how the fund's custody arrangements address each network in which it holds assets, and whether the custodian provides consistent institutional-grade coverage across the full range of networks to which the fund is exposed.
"A custody framework designed for Bitcoin and Ether will not automatically address the requirements of a multi-chain strategy with DeFi exposure and staking positions. Managers must design their custody architecture to match the full complexity of what they actually do, not the simplified version of what they would prefer to explain."
For managers who are in the process of selecting a custodian for a new fund, or reviewing their existing custody arrangements in light of evolving institutional expectations, the selection process itself is a material part of the institutional story. Allocators who encounter a manager who has made a thoughtful, documented, and deliberate custody selection decision are considerably more confident in the quality of the fund's operational governance than those who encounter a manager who selected a custodian on the basis of commercial relationships or convenience.
A custodian selection process that will withstand institutional scrutiny begins with a clear definition of the fund's custody requirements derived from its investment strategy, asset universe, and redemption terms. It proceeds through a formal evaluation of custodian candidates against those requirements, covering regulatory status, technical architecture, asset coverage, insurance arrangements, operational track record, financial strength, and commercial terms. It concludes with a documented selection rationale that can be presented to the fund's board for approval and disclosed to prospective investors in the due diligence process.
The documentation of the custodian selection process, including the criteria used, the providers evaluated, and the rationale for the selection made, is increasingly requested by institutional investors as part of the due diligence process. Managers who can produce this documentation demonstrate that the custody decision was a deliberate governance exercise rather than a convenience arrangement, which is itself a positive signal about the quality of the fund's operational oversight more broadly.
CV5 Capital is a CIMA regulated institutional fund platform based in the Cayman Islands. Custody selection and oversight for funds operating on the CV5 Capital platform is treated as a governance matter subject to board review and approval, reflecting the recognition that custody arrangements are a foundational element of investor protection rather than a purely operational decision made by the investment manager.
The platform works with institutional-grade custodians whose regulatory standing, technical architecture, asset coverage, and insurance arrangements meet the standards that institutional allocators apply in due diligence. Managers launching through CV5 Capital benefit from the platform's established custody framework, which has been designed and reviewed to address the full scope of institutional due diligence inquiry in this area, from the legal basis for asset segregation through to the on-chain verification processes that sophisticated investors increasingly expect.
For digital asset strategies with complex custody requirements, including multi-chain exposure, staking positions, and DeFi protocol interactions, the platform provides guidance on structuring custody arrangements that can be clearly explained and defended in institutional due diligence. The goal is to ensure that every fund operating on the CV5 Capital platform can answer the custody section of an institutional DDQ with the precision, detail, and documentation that the question now requires.
For managers evaluating custody options as part of their fund formation process, or reviewing existing arrangements against current institutional expectations, the CV5 Capital team is available to discuss how platform custody frameworks can support institutional capital raising. Further information is available at cv5capital.io or by contacting the team at info@cv5capital.io.
The custody framework of a digital asset fund is not an operational detail to be resolved after the investment strategy has been designed and the capital raising process has begun. It is a strategic decision that shapes what the fund can invest in, how it manages liquidity, what investors it can attract, and how it will perform operationally when market conditions become demanding. Managers who treat custody as a secondary consideration and then attempt to retrofit institutional-grade arrangements into an already-formed fund structure will encounter friction and cost that could have been avoided by making the right decision at the outset.
Institutional allocators have made custody a primary due diligence criterion because the operational failures that occur when custody is inadequate are severe, rapid, and often unrecoverable. The expectation that custody arrangements will be independently verified, comprehensively insured, legally robust, and technically sophisticated is not likely to diminish. It will increase as the institutional digital asset market matures and as allocators accumulate more experience of what adequate and inadequate custody arrangements look like in practice.
Managers who take custody seriously, design their custody framework with the same rigour they apply to their investment process, and can demonstrate the quality of that framework clearly and precisely in institutional due diligence are not merely satisfying a compliance requirement. They are making a genuine competitive investment in the institutional credibility of their fund.
This article is published for informational purposes only and does not constitute legal, regulatory, or investment advice. References to custody models and market practices are general in nature and managers should obtain independent professional advice in relation to their specific circumstances and strategy requirements. CV5 Capital is registered with the Cayman Islands Monetary Authority (CIMA Registration No. 1990085, LEI: 9845004EMS63A8938362).