Custody Self-Assessment: Questions to Ask Before You Trust a Platform With Size
Custody is an operational decision. Use this self-assessment to clarify controls, disclosure quality, and personal process gaps.
Separate product marketing from control reality
Custody describes who holds the keys and what processes govern movement of assets. Marketing pages emphasize convenience. Diligence asks who can authorize withdrawals, how keys are stored, what happens during incidents, and how customers are informed when controls change.
A self-assessment begins with honesty about your own setup. If you cannot explain where assets sit overnight, which devices can approve transfers, and what you would do if a platform paused withdrawals, you are not done designing the process â regardless of how polished the venue homepage looks.
Education-first custody writing avoids fear marketing. It asks readers to map controls they can verify, admit gaps they cannot yet verify, and size exposure to match the clarity of those answers rather than the polish of a brand.
Platform questions that surface substance
Ask whether the venue publishes proof-of-reserves or attestation practices, how often disclosures update, and whether liabilities are discussed with equal clarity. Ask how cold storage is described, whether insurance language is specific or vague, and which jurisdictions and corporate entities are involved in customer relationships.
Support quality is part of custody. During stress, slow or unclear communication is an operational risk. Save help-center policies on withdrawals, account recovery, and incident response while markets are calm so you are not reading them for the first time during an outage.
Compare at least two venues using the same question list. Relative answers reveal more than isolated marketing claims. Write the answers down; memory softens red flags after a few profitable months.
Personal process questions that prevent haste
Which assets belong on a trading venue versus longer-term storage? What size threshold forces a second confirmation or a time delay? Who else can access recovery materials, and is that intentional? How are software updates and browser extensions controlled on devices that can move funds?
Write answers in plain language. If the plan only works when you are well-rested and markets are quiet, tighten it. Custody failures often happen at the intersection of haste and incomplete checklists, not only at the intersection of malice and weak platforms.
Share the written plan with a trusted person who can help if you are unavailable, without giving that person unilateral power to move funds unless you intentionally design dual control. Clarity among people is part of custody, not an afterthought.
Score without false precision, then revisit
Use a simple traffic-light score: green for clear controls you understand, yellow for partial answers, red for vague marketing language. Do not average red away with unrelated greens. One critical red â such as inability to explain withdrawal authorization â can outweigh cosmetic strengths like a sleek app interface.
Revisit the assessment when you increase size, add a new venue, or after any incident in the wider industry that changes your threat model. Custody is not a one-time checkbox; it is a living operational practice that should mature as your exposure and skills mature.
Frequently asked questions
Is self-custody always safer than an exchange?
Not automatically. Self-custody reduces platform risk but increases personal operational risk. The better choice depends on process quality, size, and expertise.
What is the first step if my assessment is full of yellow flags?
Reduce size on unclear venues, document gaps, and fix the highest-impact process holes before adding complexity.