Definition
A custodian is the person or organization responsible for a custody service. Its role can include key protection, transfer approval, recordkeeping and recovery operations. It is not defined merely by holding a hardware wallet. Legal responsibilities depend on the agreement and applicable rules, while technical architecture determines how actions can actually be authorized.
How It Works
A provider may use multiple signing approvals, separated key shares and offline infrastructure. Customer assets may be segregated or pooled with individual accounting records. The important questions are who can initiate and approve transfers, how exceptions are handled and how the service reconciles balances. A service supplying only software without controlling transfers is not necessarily a custodian.
Key Considerations
Assess operational controls, reporting, withdrawal conditions and the treatment of assets under the custody agreement. Do not infer full protection from a security certification, an insurance label or a reserve snapshot alone. Different assessments cover different risks and dates. A provider can use strong cryptography and still suffer from governance failures or inaccurate accounting. Customers should also protect their own login credentials and authorization workflows, since a secure custody platform cannot always distinguish a legitimate instruction from one sent through a compromised customer account.