Executive TL;DRInstitutional custody for tokenised assets is not the same problem as retail crypto custody. The institutional requirements qualified custodian status, segregated client asset treatment, SOC 1/2 audit compliance, insurance minimum thresholds, and allowlist eligibility for compliant token transfers are specific, verifiable, and jurisdiction-dependent. In 2026, nine custodians dominate institutional tokenised asset custody globally: Anchorage Digital, BitGo Trust, Coinbase Custody, Fireblocks, Copper, Zodia Custody, Komainu, Hex Trust, and Fidelity Digital Assets. Collateral management is the most consequential near-term application of tokenised assets in institutional markets. The collateral problem in traditional finance is structural: assets spread across 65 delivery locations, average over-posting of 6%, operations accounting for up to 57% of total trade cost. Research values improved mobilisation and reduced over-provisioning at approximately USD 340 million per year for a single Tier 1 firm. Broadridge’s DLT-based repo platform processed USD 7.5 trillion in monthly volume in June 2026. Eurex Clearing accepted the first DLT-mobilised margin collateral in July 2025. BlackRock BUIDL crossed USD 5 billion AUM and is accepted as collateral across Aave Horizon, Sky, Morpho, and Euler. This hub covers: (1) custody architecture types and what each provides; (2) profiles of the nine leading institutional custodians; (3) regulatory custody requirements across the EU, UK, US, Singapore, Hong Kong, UAE, and Bahrain; (4) how tokenised assets function as collateral in both institutional DeFi and traditional cleared markets; (5) a due diligence framework for custody and collateral selection; and (6) Proof of Reserve as the bridge between custody and collateral eligibility. |
The question of who holds the keys to tokenised assets and under what regulatory conditions is no longer a back-office detail. It determines which instruments can be held by regulated funds, which assets can serve as eligible margin at central counterparties, which tokens can be pledged as collateral in institutional DeFi lending markets, and whether year-end audit sign-off is achievable. Getting custody wrong means the instrument cannot be used. Getting it right means a tokenised bond, fund unit, or development instrument can function as productive, yield-bearing collateral throughout its lifecycle the composability thesis the market has been building toward since 2021.
Custody Architecture: Three Models That Define Institutional Practice
Institutional tokenised asset custody differs from retail crypto custody in four structural ways: it requires regulatory qualification, not merely operational security; it must maintain client asset segregation enforceable in insolvency; it must integrate with allowlist mechanics that govern compliant token transfers; and it must produce audit-grade documentation that satisfies external auditors and regulators. The architecture that delivers all four is more constrained than retail custody and more expensive, but it is the architecture that allows institutional investors to allocate.
Qualified Custodian Status: Why It Determines Everything
In the US, the SEC’s Investment Advisers Act Rule 206(4)-2 (the ‘Custody Rule’) requires registered investment advisers to hold client assets with a ‘qualified custodian’ defined as a bank, savings association, registered broker-dealer, registered futures commission merchant, or certain foreign financial institutions. The practical effect for tokenised assets: not all digital asset custodians qualify, and the distinction matters for every regulated fund manager evaluating tokenised asset allocation.
| Custodian | QC Status (US) | Charter / Registration | Key Basis |
| Anchorage Digital | Qualified Custodian | OCC Federal Bank Charter (2021) | Only federally chartered crypto bank; OCC oversight |
| BitGo Trust | Qualified Custodian | OCC National Trust Bank Charter (conditional, 2026) + SD Trust | First crypto custodian IPO (Jan 2026); acquired Brassica (SEC-registered TA) |
| Coinbase Custody | Qualified Custodian | NYDFS-chartered trust company | NY Banking Law; SOC 1/2 audits; integrated with Prime |
| Fireblocks | Not a QC (software) | NYDFS-chartered subsidiary | MPC infrastructure layer; custody via partner entities |
| Copper | Not a QC (UK-based) | FCA registered (UK) | ClearLoop off-exchange settlement; CASP process for EU |
| Zodia Custody | Not a QC (EU focus) | FCA registered; MiCA CASP (in progress) | Bank-backed; cold-wallet-first; Standard Chartered JV |
| Komainu | Not a QC | Jersey JFSC; UK FCA | Nomura-SC-CoinShares JV; institutional-only |
| Hex Trust | Not a QC (APAC) | SFC HK; MiCA CASP process | APAC specialist; EU MiCA compliant pathway |
| Fidelity Digital Assets | Qualified Custodian | NY trust charter (pending OCC) | Fidelity heritage; cold vault; multi-site key management |
Three Architectural Models: MPC, HSM, and Smart Contract
Private key security architecture determines both the operational model and the risk profile of digital asset custody. Three approaches dominate institutional practice:
- Multi-Party Computation (MPC): Distributes the private key into cryptographic shares held by multiple parties, so a transaction can be signed through distributed computation without ever assembling the complete key in one location. Fireblocks pioneered MPC custody for institutional use; Copper also uses MPC as its primary architecture. MPC enables faster transaction signing than cold storage while maintaining strong key security. Limitation: the security model is not visible on-chain an auditor must trust the MPC provider’s attestation of correct key handling.
- Hardware Security Module (HSM) / Cold Storage: Private keys generated and stored inside tamper-resistant hardware devices, offline. The most conservative model; used by Coinbase Custody (vault architecture), Fidelity Digital Assets (multi-site cold vault), and Zodia Custody. Maximum security at the cost of transaction latency. Preferred by large funds and pension mandates where signing speed is not a constraint.
- Smart Contract / On-Chain Custody: Key management logic embedded in on-chain smart contracts, with governance controls (multi-signature quorums, time locks, spend limits) enforced at the protocol layer rather than the custodian layer. Used for programmatic collateral deployment; ERC-3643-standard tokens implement this at the transfer level. Advantage: the custody policy is auditable on-chain by any party. Disadvantage: smart contract risk is added to the key management risk.
In practice, most institutional programmes combine models: MPC for transaction signing efficiency, HSM for cold storage of the highest-value keys, and smart contract controls for on-chain governance of collateral positions.
Segregation Models: Segregated, Omnibus, and Sub-Account
Client asset segregation the requirement that custodial assets are distinguishable from the custodian’s own assets and from other clients’ assets is the core insolvency protection that makes institutional custody usable for regulated funds. Three models are in use:
- Fully Segregated: Separate wallets per client, identifiable on-chain. Most conservative; highest operational cost for the custodian; mandatory for many regulated fund mandates. Anchorage Digital’s model for most institutional clients.
- Omnibus with Sub-Account: Single custodial wallet on-chain holds multiple clients’ assets; the custodian’s internal records maintain per-client accounting. Efficient for the custodian; requires trust in internal record-keeping and enforceability of sub-account claims in the custodian’s insolvency. Requires legal analysis per jurisdiction.
- Smart Contract Segregation: Client assets held in separate smart contract vaults, on-chain segregation provable cryptographically. Emerging model; used in some DeFi-adjacent custody arrangements. On-chain verifiability is an advantage; smart contract risk is the trade-off.
Institutional Custodian Profiles: The Nine That Matter in 2026
Anchorage Digital
| Regulatory status | OCC federally chartered digital asset bank the only federal bank charter issued to a crypto-native firm in the US. Qualified custodian under US banking law. |
| Key institutional clients | BlackRock BUIDL (custody for institutional BUIDL holders), Ondo Finance OUSG (alongside BitGo), Cantor Fitzgerald |
| Tokenised RWA support | BUIDL, OUSG, BENJI custody of allowlisted wallets post-KYC/accredited investor verification via Securitize ID |
| Architecture | Proprietary key management combining MPC and HSM; custody, staking, and settlement integrated on one platform |
| Jurisdiction coverage | US primary; some international capacity. Not MiCA-authorised; EU institutional clients require a separate EU-authorised custody arrangement |
| Best for | US bank trust departments, investment advisers requiring federal bank charter custody, RWA fund structures that specifically require OCC-chartered custodian |
| Notable 2026 | Continued growth as primary institutional custody for BUIDL as fund crossed USD 5B AUM |
BitGo Trust
| Regulatory status | SD trust company (existing) + conditional OCC national trust bank charter (2026). First crypto custodian to IPO (Cantor Fitzgerald SPAC, January 2026). Acquired Brassica an SEC-registered transfer agent giving BitGo end-to-end tokenisation capability. |
| Key institutional clients | Ondo OUSG, numerous ETF issuers including Ark21Shares and HashDex; over 1,550 assets across 60+ chains |
| Tokenised RWA support | Broadest asset coverage of any institutional custodian: BUIDL, OUSG, BENJI, USTB, USYC and 1,550+ total assets |
| Architecture | Native multisig on chains that support it; MPC on chains that do not. $250M stated insurance coverage. |
| Jurisdiction coverage | US primary (SD, NY trust); EU through MiCA CASP process. The Brassica acquisition adds SEC-registered transfer agent capability. |
| Best for | Tokenisation programme leads needing broad asset coverage; RWA fund structures wanting integrated transfer agent + custody; ETF issuers |
| Notable 2026 | OCC conditional charter; IPO; Brassica acquisition the year BitGo most rapidly closed the regulatory gap with Anchorage |
Coinbase Custody Trust Company
| Regulatory status | New York state-chartered trust company under NY Banking Law. Qualified custodian. NYDFS-regulated. |
| Key institutional clients | ETF service providers; US fund managers; institutional holders requiring broad staking support alongside custody |
| Tokenised RWA support | BUIDL custody available; broad asset support; staking and governance workflows integrated in Prime stack |
| Architecture | Vault architecture with policy engine; SOC 1 and SOC 2 Type II audited annually; cold storage primary with warm wallet for liquidity |
| Jurisdiction coverage | US primary; some international eligible, jurisdiction-dependent |
| Best for | US asset managers and ETF service providers wanting single-platform execution, staking, and custody; institutions needing deep stablecoin and on-chain liquidity alongside custody |
| Notable 2026 | Integration of BUIDL custody into Prime stack as tokenised Treasury collateral use cases expanded on Coinbase Prime |
Fireblocks
| Regulatory status | NOT a qualified custodian Fireblocks is an MPC infrastructure platform. Operates a NYDFS-chartered custody entity (Fireblocks Trust) for US custody-requiring clients; MPC platform itself does not provide direct qualified custody. |
| Key institutional clients | 2,400+ organisations including banks, neobanks, ETF issuers, and prime brokers. USD 10 trillion in total digital asset transfers processed. |
| Tokenised RWA support | Infrastructure layer for tokenisation workflows: smart contract deployment, policy engine, compliance controls, wallet management |
| Architecture | Proprietary MPC built by in-house cryptography team. Policy engine with approval quorums, whitelists, time locks. Integrates with external qualified custodians for compliant custody. |
| Jurisdiction coverage | Global infrastructure platform; custody via Fireblocks Trust entity (NYDFS) for US requirements; EU institutions integrate Fireblocks with an EU-authorised custodian |
| Best for | Tokenisation infrastructure build-out; firms wanting MPC-based wallet control layered over a qualified custodian arrangement; institutional DeFi deployment workflows |
| Notable 2026 | Fireblocks ‘Collateral Mobility’ report (September 2026) quantified the $340M/year opportunity for Tier 1 firms from improved DLT-based collateral management |
Copper
| Regulatory status | FCA registered in the UK. EU MiCA CASP process underway. Not a US qualified custodian. |
| Key institutional clients | European institutional investors; prime brokerage clients using ClearLoop off-exchange settlement |
| Tokenised RWA support | Growing coverage; ClearLoop allows collateral and settlement between institutions without moving assets on-chain |
| Architecture | MPC custody + ClearLoop off-exchange settlement network. ClearLoop allows institutions to net positions between counterparties in real time without blockchain transfers — reducing gas costs and settlement risk. |
| Jurisdiction coverage | UK and EU primary. ClearLoop network covers major European institutional prime brokerage relationships. |
| Best for | European institutional investors; prime brokerage setups where ClearLoop netting is valuable; institutions building MPC-based custody without a US qualified custodian requirement |
| Notable 2026 | EU MiCA CASP authorisation process Copper aims to be among first custodians with full EU authorisation |
Zodia Custody
| Regulatory status | FCA registered (UK). Backed by Standard Chartered and SBI Holdings. MiCA CASP process underway. |
| Key institutional clients | Standard Chartered network institutional clients; traditional bank institutional investors migrating to digital assets |
| Tokenised RWA support | Expanding; focuses on institutional-grade cold storage for tokenised fund positions |
| Architecture | Cold-wallet-first model. Bank-backed governance and controls. Designed for traditional institutional risk frameworks. |
| Jurisdiction coverage | UK and EU (MiCA process). Asian reach via SBI Holdings relationship. |
| Best for | Traditional bank institutional clients wanting bank-backed custody model; institutions that require cold-wallet-first security; EU-focused tokenised fund custody |
| Notable 2026 | Standard Chartered’s broader digital asset strategy expansion provided institutional distribution tailwind for Zodia’s custody service |
Komainu
| Regulatory status | Jersey JFSC regulated; UK FCA registered. Joint venture between Nomura, Standard Chartered, and CoinShares. |
| Key institutional clients | Institutional-only no retail. Hedge funds, asset managers, corporates within Nomura and Standard Chartered networks. |
| Tokenised RWA support | Institutional-grade segregated custody for tokenised securities; focused on compliant transfer restrictions |
| Architecture | Segregated cold storage; institutional governance controls; DeFi access layer being developed for eligible clients |
| Jurisdiction coverage | UK, Jersey, select EU jurisdictions through regulated entities |
| Best for | Institutional investors who are clients of Nomura or Standard Chartered; funds wanting bank-affiliated custody with segregated cold storage model |
| Notable 2026 | DeFi access layer development connecting Komainu custody to on-chain collateral platforms for institutional clients |
Hex Trust
| Regulatory status | SFC-licensed Type 1 and Type 9 (Hong Kong); EU MiCA CASP process; additional APAC registrations |
| Key institutional clients | Asian institutional investors; tokenised fund issuers targeting APAC distribution |
| Tokenised RWA support | APAC specialist for tokenised securities custody; integration with HK SFC-licensed distribution |
| Architecture | MPC-based key management; institutional policy controls; multi-jurisdiction regulatory reporting |
| Jurisdiction coverage | Hong Kong primary; EU through MiCA process; expanding APAC coverage |
| Best for | Institutional issuers targeting APAC investor base; Hong Kong SFC-licensed fund distribution requiring custody integration; EU institutional clients needing APAC custody alongside European licence |
| Notable 2026 | MiCA CASP authorisation process alongside APAC licensing makes Hex Trust one of the few custodians building dual EU-APAC institutional coverage |
Fidelity Digital Assets
| Regulatory status | New York trust charter; OCC national bank charter application in progress. Part of Fidelity Investments one of the largest traditional asset managers globally. |
| Key institutional clients | Fidelity institutional client base; hedge funds, pension funds, family offices, endowments in the Fidelity ecosystem |
| Tokenised RWA support | Growing Fidelity’s own FBTC and tokenised Treasury products use internal custody; broader RWA custody capability expanding |
| Architecture | Multi-site cold vault storage; multi-key management; SOC audited; Fidelity institutional operational controls |
| Jurisdiction coverage | US primary. Heritage and compliance standards of traditional finance applied to digital assets. |
| Best for | Institutions already in the Fidelity ecosystem; funds wanting the risk profile of custody backed by a USD 14 trillion AUM traditional manager; institutional mandates where Fidelity counterparty relationship is valued |
| Notable 2026 | Fidelity Crypto launched tokenised fund products on internal rails; institutional custody capabilities expanding in line with Fidelity’s broader digital asset product build-out |
Regulatory Custody Requirements: Jurisdiction by Jurisdiction
The regulatory requirement for custody is not uniform across jurisdictions. An institutional investor evaluating a tokenised asset programme in Europe faces different mandatory custody standards than a US registered investment adviser or a Singapore-licensed fund manager. The table below maps the key custody regulatory requirements by jurisdiction:
| Jurisdiction | Regulator | Custody Requirement | Qualified Custodian Definition | Key Provision |
| United States | SEC (investment advisers); OCC (banks); NYDFS (NY trust) | RIAs must hold client assets with a qualified custodian | Federally or state-chartered bank or trust company; registered broker-dealer; registered FCM | Rule 206(4)-2 (Custody Rule); SAB 121 accounting guidance (evolving) |
| European Union | ESMA; NCAs; MiCA competent authorities | CASP authorisation required for custody of crypto-assets; MiCA Article 70 (safekeeping of client crypto-assets) | MiCA-authorised CASP with segregation requirements; or EU credit institution | MiCA Regulation EU 2023/1114; fully effective December 2024 |
| United Kingdom | FCA | Cryptoasset businesses must be FCA registered; CASS rules for client asset protection | FCA registered cryptoasset firm; CASS-compliant custodian | FCA Cryptoasset Registration; CASS (Client Assets Sourcebook) |
| Singapore | MAS | PSA-licensed Digital Payment Token (DPT) service providers must maintain client asset safeguarding | MAS-licensed DPT service provider with segregation | Payment Services Act 2019 (amended); MAS Notice PSN02 (safeguarding) |
| Hong Kong | HKMA (banking); SFC (securities) | VATP-licensed platform required; client crypto-asset safeguarding obligations | SFC-licensed VATP with Type 1 and 7 regulated activities | SFC VATP licensing conditions; SFC Circular on Tokenisation (Feb 2023) |
| UAE (ADGM) | FSRA | FSRA licence required for digital asset custody as regulated activity | FSRA-authorised entity under FSMR | ADGM FSMR digital asset amendments (June 2025) |
| UAE (VARA) | VARA | VARA Custody Services Rulebook (2024); mandatory for VA custodians | VARA-licensed Custody Service Provider | VARA Custody Services Rules (finalised 2024); Rulebook v2.0 (May 2025) |
| Bahrain | CBB | CBB Crypto-Asset Module (CRA) custody requirements | CBB-licensed Crypto-Asset Custodian under Module CRA | CBB Rulebook Volume 6 (CRA Module) |
The SAB 121 Evolution US Accounting Constraint
SEC Staff Accounting Bulletin 121 (2022) required public companies that custody crypto-assets to record them as both an asset and a liability on their balance sheet at fair value making bank custody of tokenised assets economically unattractive for most public banks. Congressional efforts to rescind SAB 121 partially succeeded in 2024; the SEC issued SAB 122 in 2025, modifying the original guidance to create exceptions for bank custody of tokenised traditional financial assets (as distinct from crypto-native assets). This evolution has progressively removed the accounting barrier that prevented large US banks from entering the tokenised asset custody market.
MiCA CASP Custody The EU Standard
MiCA’s Crypto-Asset Service Provider (CASP) regime, fully effective since December 2024, establishes mandatory custody standards for crypto-asset custody services in the EU: client assets must be held separately from the firm’s own assets; segregation must be enforceable in insolvency; the custodian must maintain records enabling client assets to be identified at any time; and clients must be able to retrieve their assets promptly. For tokenised RWA issuers targeting EU institutional distribution, the custody arrangement must satisfy MiCA Article 70 or the issuer must use a MiCA-authorised CASP as custodian. BitGo, Copper, Zodia, and Hex Trust are all in varying stages of MiCA CASP authorisation.
Tokenised Assets as Collateral: The 2026 Production Landscape
The Problem Tokenised Collateral Solves
Collateral management in traditional securities markets is structurally inefficient. Research published in 2026 by Nasdaq and ValueExchange quantified the cost of this inefficiency at the Tier 1 firm level: collateral assets are spread across an average of 65 delivery locations; firms over-post collateral by an average of 6% because settlement uncertainty requires a buffer; operations account for up to 57% of total trade cost; and approximately a quarter of the average collateral pool earns nothing today because the assets are locked in transit between delivery locations. The total annual value of improved mobilisation and reduced over-provisioning for a single Tier 1 firm: approximately USD 340 million.
Tokenised assets address this problem at its root. An asset held as a token on a DLT network can be mobilised moved to wherever it is needed as margin or collateral in the same settlement window as the network processes transactions, typically seconds to minutes rather than the hours or days that characterise cross-custodian collateral calls in traditional markets. The asset earns yield while in transit or while posted as collateral, if the token structure supports it. And the collateral position is verifiable on-chain by the collateral receiver without requiring a custodian-to-custodian confirmation process.
The On-Chain Collateral Markets in Production
| Platform / Programme | Operator | Model | Accepted Collateral (Sept 2026) | Scale |
| Aave Horizon | Aave Labs | Permissioned institutional DeFi lending; RWA as collateral, stablecoin borrowing | BUIDL (BlackRock), VBILL (VanEck), Circle yield fund, Superstate, Centrifuge (Janus Henderson) | USD 460M+ total market size; lending pools accessible to qualified institutional investors |
| Sky (MakerDAO) | Sky Protocol | Decentralised stablecoin (DAI) collateralised by RWA | BUIDL and other tokenised Treasuries among primary RWA collateral assets | USD 2B+ in RWA collateral backing DAI stablecoin |
| Morpho | Morpho Labs | Permissionless lending with curated RWA collateral vaults | Growing range of tokenised Treasury collateral | Expanding institutional RWA collateral coverage in 2026 |
| Euler | Euler Finance | Permissionless lending; institutional vaults | VanEck VBILL extended to Euler (May 2026) | Growing post-VBILL integration |
| Kinexys (JPMorgan) | JPMorgan | Institutional DLT repo and collateral platform | Tokenised money market fund shares (July 2026 BlackRock EU MMF tokenisation) | USD 1.7B daily repo settlement; tokenised MMF shares as collateral launched July 2026 |
| Broadridge DLR | Broadridge Financial | DLT-based bilateral repo | Tokenised securities including government bonds | USD 7.5 trillion monthly volume (June 2026); USD 357B average daily |
| HQLAx / Eurex | HQLAx + Deutsche Börse | DLT-based securities lending and margin collateral | Government bonds and high-quality liquid assets (HQLAs) | First CCP (Eurex) to accept DLT-mobilised margin collateral — live July 2025 |
BlackRock BUIDL: From Fund to Market Infrastructure
BlackRock’s USD Institutional Digital Liquidity Fund (BUIDL) has followed a trajectory that no market participant predicted in 2024: it has become market infrastructure. At USD 5 billion AUM, it is the largest single tokenised fund. More significantly, it is accepted as collateral not only in Aave Horizon but across Sky, Morpho, and Euler making it a liquidity backbone for institutional DeFi borrowing in a way that no traditional money market fund is. In July 2026, JPMorgan tokenised BlackRock’s European money market fund share classes on the Kinexys platform, explicitly citing digital collateral as the primary use case. A tokenised fund that earns yield while serving as margin is the most efficient collateral structure available in institutional finance. BUIDL demonstrates this at scale.
Collateral Eligibility: The Allowlist Mechanism
Tokenised assets function as collateral in permissioned markets because the allowlist mechanism the on-chain registry of eligible wallet addresses enforces compliance at every transfer. When BUIDL is posted as collateral on Aave Horizon, the collateral position is represented as a non-transferable aToken. The underlying BUIDL token itself remains subject to BlackRock and Securitize’s allowlist: only KYC-verified, accredited-investor-cleared addresses can hold it. The collateral platform receives the token because its wallet has been cleared through Securitize ID; it cannot transfer the token to an uncleaned address any more than any other participant can.
This mechanism is the same infrastructure that makes tokenised collateral auditable in a way that traditional collateral is not. The collateral pool’s composition is visible on-chain, in real time, to any party with the appropriate access. The collateral receiver does not need to call the sender’s custodian to confirm delivery; the on-chain state is the confirmation.
Broadridge DLR and HQLAx: Traditional Market Infrastructure Adoption
The most consequential signal that DLT-based collateral management has moved from pilot to production is not from DeFi platforms it is from traditional market infrastructure. Broadridge’s Distributed Ledger Repo platform processed USD 7.5 trillion in monthly repo volume in June 2026, with an average daily volume of USD 357 billion. This is not a small tokenisation pilot; it is a material proportion of the global repo market, settled on DLT infrastructure. Eurex Clearing the systemically important CCP for European derivatives accepted the first DLT-mobilised margin collateral in July 2025: JPMorgan moving securities for Dutch pension fund PGGM via the HQLAx platform to post as margin at Clearstream. In July 2026, JPMorgan tokenised European money market fund shares on Kinexys specifically to enable their use as yield-earning collateral in this infrastructure. The traditional market infrastructure has made its choice.
Proof of Reserve: The Bridge Between Custody and Collateral Eligibility
Proof of Reserve (PoR) is the mechanism that closes the gap between custody (where the asset is held) and collateral eligibility (whether the collateral receiver trusts that the asset exists as represented). In the traditional market, this gap is closed by regulated custodians, audited accounts, and established counterparty relationships built over decades. In tokenised markets where instruments are newer, custodians are newer, and counterparty relationships have not had time to develop PoR is the independent attestation that provides equivalent assurance.
What Proof of Reserve Verifies
- Asset existence: The underlying assets backing a tokenised instrument are confirmed to be present in the custody arrangement at the time of attestation.
- Correct allocation: The custody holdings map correctly to the outstanding token supply no over-issuance, no underfunded positions.
- Performance: Where relevant, the underlying assets are performing as represented no unreported defaults, maturities, or corporate actions that would affect the backing.
- Independence: The attestation is conducted by a party independent of the issuer a third-party auditor, an oracle provider like Chainlink, or a regulated attestation service.
PoR Cycles and Standards
There is no universal standard for PoR cycle frequency in 2026. Chainlink’s NAVLink oracle provides on-chain NAV pricing for tokenised fund collateral in real time the most continuous form of PoR for fund-backed instruments. For private credit, real estate, or development capital instruments where underlying asset valuation cannot be continuously automated, periodic attestation is the standard. Blockmaze mandates Proof of Reserve attestation every fifteen days for instruments issued on its network more frequent than the monthly standard used by most DeFi protocols but less continuous than NAV oracle-based approaches for liquid instruments. The fifteen-day cycle is designed specifically for private capital formation instruments whose underlying assets are verified through project milestone confirmations rather than continuous market pricing.
PoR and Collateral Eligibility
In permissioned collateral markets, PoR attestations increasingly determine collateral eligibility. Aave Horizon uses Chainlink’s NAVLink to provide real-time NAV pricing for collateral without this oracle feed, the tokenised fund unit cannot be accepted as collateral, because the loan-to-value calculation requires a trustworthy current price. For private capital formation instruments accepted as collateral in bilateral institutional transactions, periodic PoR attestations serve the same function: they allow the collateral receiver to price the position with confidence. As collateral markets mature, PoR cycle frequency and auditor reputation will become standard due diligence fields in the same way that custodian identity and insurance coverage are today.
Custody and Collateral Due Diligence Framework
The framework below structures the due diligence questions that institutional allocators and issuers should ask when evaluating tokenised asset custody and collateral arrangements. It is structured as a checklist applicable across the custodian profiles and collateral markets documented in this hub.
Custody Due Diligence
- Qualified custodian status: Is the custodian a qualified custodian under the law applicable to the investing entity? A US RIA cannot satisfy its custody rule obligation with a non-qualified custodian, regardless of the custodian’s operational quality.
- Client asset segregation: How are client assets segregated? Fully segregated on-chain wallets provide on-chain verifiable segregation. Omnibus sub-account models require legal analysis of insolvency treatment in the custodian’s jurisdiction.
- Insurance coverage: What is the stated insurance coverage, and what does it cover? Most custodian insurance policies cover crime and cyber incidents specifically; they do not cover market losses, smart contract failures, or regulatory actions. USD 250M (BitGo) is the highest stated coverage; most custodians do not publicly disclose coverage amounts.
- SOC audit status: Has the custodian completed an independent SOC 1 and/or SOC 2 Type II audit in the past 12 months? SOC 2 Type II covering the security, availability, and confidentiality criteria is the institutional standard.
- Allowlist integration: Can the custodian register its client wallets with the relevant token issuer’s allowlist? This is non-optional for compliant token transfers and must be confirmed before custody selection for any specific instrument.
- Jurisdiction coverage: Does the custodian hold licences in every jurisdiction required by the investing entity’s regulatory obligations? An EU MiCA-authorised CASP may not be necessary for all EU investors but is required for any EU firm classified as a crypto-asset service provider.
- Insolvency analysis: In the event of custodian insolvency, what is the legal basis for client asset recovery? Does the jurisdiction recognise the client’s property interest in custodied assets, or are they creditor claims?
Collateral Eligibility Due Diligence
- Platform eligibility: Has the specific tokenised instrument been approved as eligible collateral by the target collateral platform? Approval is instrument-specific, not asset-class-generic BUIDL’s eligibility on Aave Horizon does not mean that a different tokenised Treasury fund is automatically eligible.
- Oracle pricing: How is the collateral’s value determined on-chain for loan-to-value calculation? Chainlink NAVLink for fund-based instruments; bespoke arrangements for private instruments. Understand the oracle failure mode what happens to collateral positions if the oracle stops updating.
- Proof of Reserve cycle: What is the PoR attestation frequency, and who conducts it? For collateral eligibility in institutional markets, monthly or more frequent attestation is the emerging standard.
- LTV parameters: What loan-to-value ratio applies to the specific instrument as collateral? LTV varies by instrument type, liquidity, and PoR frequency. Understanding the LTV before posting collateral determines whether the financing achieves its intended purpose.
- Liquidation mechanics: What happens if the collateral position falls below the liquidation threshold? On-chain liquidation mechanisms execute automatically; traditional market margin call processes do not. Understand the liquidation price, the liquidation penalty, and whether there is any grace period.
Blockmaze and Institutional Custody & Collateral Infrastructure
Blockmaze’s infrastructure is built around the same principles this hub documents. Proof of Reserve attestation every fifteen days provides the independent custody verification layer that institutional investors require before allocating to tokenised instruments the on-chain equivalent of the SOC 1/2 audits and insurance disclosures that traditional qualified custodians provide. Identity-verified allowlists enforce the allowlist mechanics that make tokenised assets eligible for collateral use in permissioned platforms such as Aave Horizon: a wallet that has not cleared eligibility cannot receive or pledge a Blockmaze-issued instrument, regardless of what transfer is attempted. For institutional issuers designing tokenised capital formation programmes across infrastructure, real estate development, deep tech, or entertainment financing the custody and collateral architecture that this hub describes as an institutional requirement is what the Blockmaze network provides operationally, across eleven regulatory authorisations in eight jurisdictions. Capital formation instruments issued on Blockmaze are not just compliant at issuance; they are designed to function as productive collateral assets throughout their lifecycle.
Frequently Asked Questions
1. What is the difference between a qualified custodian and a digital asset custody provider?
A qualified custodian is a regulated entity specifically a bank, trust company, broker-dealer, or futures commission merchant that meets the requirements of Rule 206(4)-2 under the US Investment Advisers Act to hold client assets on behalf of registered investment advisers. Not all digital asset custody providers are qualified custodians: Anchorage Digital (OCC federal bank charter), BitGo Trust (SD and NY trust + conditional OCC charter), Coinbase Custody (NYDFS trust), and Fidelity Digital Assets (NY trust) satisfy the qualified custodian standard. Fireblocks is an infrastructure platform that is not itself a qualified custodian.
2. How does a tokenised asset become eligible collateral on a platform like Aave Horizon?
The issuer must apply to Aave’s governance process (or in the case of Aave Horizon, Aave Labs’ permissioned listing process) to have the instrument approved as eligible collateral. Approval requires: an oracle pricing feed (typically Chainlink NAVLink for NAV-priced instruments); a whitelist mechanism that allows the platform’s wallet to receive the token; agreed LTV parameters; and risk assessment by Llama Risk. Once approved, qualified institutional investors can supply the instrument as collateral and borrow stablecoins up to the LTV limit. The collateral is represented as a non-transferable aToken.
3. What is the USD 340 million collateral mobilisation opportunity?
Research by Nasdaq and ValueExchange quantified the annual cost of collateral fragmentation for a Tier 1 financial institution: assets spread across 65 delivery locations, 6% average over-posting, operations accounting for 57% of total trade cost. The USD 340 million figure represents the annual savings potential from improved DLT-based mobilisation and reduced over-provisioning for a single Tier 1 firm not the total market opportunity across all firms, which is materially larger.
4. What is Proof of Reserve and how frequently should it be conducted?
Proof of Reserve is an independent attestation confirming that the assets backing a tokenised instrument are present, correctly allocated, and performing as represented. For fund-backed instruments with liquid underlying assets, continuous NAV oracle feeds (Chainlink NAVLink) provide real-time verification. For private capital formation instruments, periodic third-party attestation is the standard monthly being the most common interval, with more frequent cycles (such as Blockmaze’s fifteen-day cycle) providing higher assurance for instruments used as collateral. There is no universal regulatory standard for PoR cycle frequency as of 2026.
5. Can the same tokenised asset be custodied by one custodian and used as collateral on a DeFi platform?
Yes this is precisely what BUIDL demonstrates. A qualified custodian (Anchorage Digital, BitGo, Coinbase) holds the BUIDL position in a segregated wallet that has been cleared on Securitize’s allowlist. The custodian’s wallet is the on-chain address that holds the token. The custodian can, under instructions from the institutional client, post that position as collateral on Aave Horizon (or another platform where BUIDL is an accepted collateral type). The key requirement is that the collateral platform’s receiving wallet must also be allowlist-cleared by the token issuer which is handled as part of the platform’s eligibility approval process.
6. What is the MiCA CASP requirement for EU custody?
MiCA’s Crypto-Asset Service Provider (CASP) authorisation, fully effective December 2024, requires that any firm providing custody services for crypto-assets on behalf of EU clients must be authorised as a CASP under MiCA Article 59. Authorisation requires: adequate capital (minimum EUR 125,000 for custody-only activities); governance and organisational requirements; prudential safeguards including client asset segregation enforceable in insolvency; and mandatory professional indemnity insurance or comparable guarantee. BitGo, Copper, Zodia, and Hex Trust are in varying stages of MiCA CASP authorisation as of September 2026.
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice. Readers should conduct their own research and consult with qualified professionals before making any investment or business decisions.