Crypto Custody Explained: How Exchanges and Wallets Hold Your Funds
What ‘Custody’ Means in Crypto
Custody refers to who actually controls the private keys behind a crypto holding — and therefore who has the practical ability to move those funds. It’s one of the most important concepts in crypto, because it directly determines what happens to your holdings if a platform experiences technical failure, insolvency, or a security breach.
The Two Core Custody Models
As covered in Self-Custody vs Custodial Wallets, there are two broad models: custodial, where a platform holds keys on your behalf, and self-custody (non-custodial), where you hold them yourself. This article looks specifically at how custodial arrangements — the kind most exchanges and platforms use — actually work under the hood.
How Exchanges Typically Structure Custody
Most exchanges and trading platforms pool user funds into a combination of wallet types for operational and security reasons. A portion is typically kept in ‘hot’ wallets — connected to the internet, allowing for fast withdrawals and trading — while a larger portion is often kept in ‘cold’ storage, offline and much harder for an attacker to reach, used as a security buffer against the platform’s day-to-day operational wallets being compromised.
Why This Structure Exists
This split exists to balance two competing needs: users expect withdrawals to process quickly (which favors hot storage), while the platform needs to protect the bulk of holdings from being an attractive, all-in-one target for hackers (which favors cold storage). Well-run platforms disclose at least general information about how they structure this balance, since it’s directly relevant to users assessing platform security.
What Proof-of-Reserves Attempts to Show
In response to past custodial failures — including the case study covered in The Mt. Gox Collapse — many platforms have adopted ‘proof-of-reserves’ reporting, an attempt to demonstrate cryptographically or through audits that a platform actually holds the funds it claims to hold on behalf of users. This has become an increasingly common industry practice, though the depth and rigor of these reports varies significantly between platforms.
A reserve report describes a moment, and only the part of the picture its authors set out to cover. Two things are worth reading before the headline: the date it was produced, and the scope it states — which holdings were counted, who counted them, and what was left out. The article notes that depth and rigour vary a great deal between platforms, so the scope is the substance.
Questions Worth Asking About Any Custodian
Before trusting a platform with custodial holdings, it’s reasonable to ask: does the platform separate user funds from its own operating funds? Does it publish any form of reserve verification? What’s its track record and how long has it operated? These are the same kinds of questions responsible users should ask of any institution holding funds on their behalf, crypto or otherwise.
| Question | Why the answer matters | A weak answer sounds like |
|---|---|---|
| Are user funds separate from operating funds? | It decides whether the platform’s own losses can reach your balance | “Everything is held securely” |
| Is any reserve verification published? | It is the difference between a claim and something you can check | A figure with no date and no scope |
| How long has it operated, and through what? | Withdrawals honoured during a stressful week say more than a calm year | A launch date, and nothing about the years since |
| Who can move the funds, and does that take more than one person? | A single person who can move everything is a single point of failure | “Our team is trusted” |
Custody at Kurdcoin
When you buy crypto on Kurdcoin, your holdings sit in a custodial account by default, giving you the convenience of instant trading and settlement in Iraqi dinar. If you later want direct control of your own keys, our guide on where your crypto should go after you buy it covers how to move to self-custody.
