Cold storage — keeping private keys entirely offline — was the first serious answer to the custody problem. It solved one risk, exposure to network attackers, while leaving others untouched: the single key, the single operator, the single point at which a process could fail. Institutional custody has since moved beyond it.
What is MPC and multi-signature custody?
MPC and multi-signature custody are key-management models that remove single points of failure. Multi-signature requires a quorum of independent keys to authorise a transaction; multi-party computation never assembles a single key at all, using distributed shares to jointly produce a signature. Both split authority so no individual, device or location can move assets alone.
Two models, one principle
Multi-signature custody requires several independent keys to authorise a transaction, with a defined quorum — say, three of five. Multi-party computation goes further: a single key is never assembled in one place at all, but generated and used as distributed shares that jointly produce a signature. Both share one principle — that authority to move assets is split so that no individual, device, or location holds enough to act alone.
The controls that make it institutional
The cryptography is necessary but not sufficient. What makes custody institutional is the governance wrapped around it: signers drawn from separate teams, withdrawal allow-lists that constrain where assets can go, time-locks that delay large transfers, and independent reconciliation that catches discrepancies early. A quorum means little if all signers report to the same person.
Resilience as the goal
The objective is a system that fails safe. The loss of any one key, the compromise of any one device, or the coercion of any one individual should be an incident the system absorbs, not a loss the client bears. That resilience — designed in advance and tested deliberately — is what separates genuinely institutional custody from storage that merely looks secure.
This is the technical foundation beneath our broader argument that custody is the foundation of trust, and it sits inside the regulatory standards institutions now expect.
To see these controls in practice, explore our custody and security expertise or book a portfolio review.
FAQ
Frequently asked questions
Multi-signature requires several independent keys to authorise a transaction, with a defined quorum — say, three of five. Multi-party computation goes further: a single key is never assembled in one place at all, but generated and used as distributed shares that jointly produce a signature. Both split authority so no individual, device or location can act alone.
No. Cold storage solved one risk — exposure to network attackers — while leaving others untouched: the single key, the single operator, the single point at which a process could fail. Institutional custody has moved beyond it to distributed key-management and layered governance.
The cryptography is necessary but not sufficient. What makes custody institutional is the governance around it: signers drawn from separate teams, withdrawal allow-lists, time-locks on large transfers, and independent reconciliation. A quorum means little if all signers report to the same person.