Mid-market firms are increasingly holding digital assets on their balance sheets, whether for payments, investment, or operational liquidity. With that shift comes a critical decision: who holds the private keys? For many, the answer is moving away from third-party custodians towards self-custody arrangements. This explainer examines how mid-market firms are structuring self-custody for operational treasuries, the trade-offs involved, and what finance leaders should weigh before making the transition.
Why Self-Custody Is Gaining Traction
The appeal of self-custody is straightforward: it removes reliance on a third-party custodian, which can reduce counterparty risk and lower fees. For mid-market firms, this can be particularly attractive given that custodian services often carry minimum balance requirements or fee structures that are less favourable than those offered to larger institutions. Additionally, self-custody offers greater control over assets, enabling faster settlement and more flexible treasury operations.
However, self-custody is not a simple switch. It requires robust internal controls, clear governance, and a thorough understanding of the operational risks. The decision is not binary; firms are adopting hybrid models that blend self-custody with third-party services for specific functions.
Key Structures for Self-Custody
1. Multi-Signature Wallets
Multi-signature (multisig) wallets are the most common structure for corporate self-custody. They require multiple private keys to authorise a transaction, typically distributed among different individuals or departments. For example, a firm might require two of three signatures from the CFO, treasurer, and a designated board member. This structure reduces the risk of a single point of failure and provides an audit trail.
2. Hardware Security Modules (HSMs)
For larger mid-market firms, hardware security modules offer a higher level of security. HSMs are physical devices that generate and store private keys offline, with strict access controls. They are often used in conjunction with multisig wallets to provide an additional layer of protection. HSMs are more expensive and require specialised expertise to deploy and maintain.
3. Threshold Signature Schemes (TSS)
Threshold signature schemes are a newer approach that distributes the signing process across multiple parties without ever assembling the full private key. This can be more flexible than traditional multisig, as it allows for more granular control over signing policies. TSS is gaining traction among firms that need to automate certain transactions while maintaining security.
4. Qualified Custodians with Self-Custody Options
Some custodians now offer hybrid solutions where the client retains control of the private keys but the custodian provides additional services such as insurance, compliance reporting, or transaction monitoring. This allows firms to benefit from self-custody while outsourcing some of the operational burden.
Operational Considerations
Moving to self-custody is not just a technology decision; it is an operational one. Firms need to establish clear procedures for key management, including who has access, how keys are backed up, and what happens in the event of employee departure. Regular audits and reconciliation processes are essential to ensure that the treasury is accurately reflected in the firm's financial records.
Another consideration is insurance. Self-custody typically means that the firm is responsible for insuring its own assets, which can be costly and complex. Some insurers offer policies specifically for self-custody arrangements, but they often require proof of robust security measures.
Why It Matters
The shift to self-custody has significant implications for mid-market firms. It can reduce costs and increase control, but it also introduces new risks, particularly around operational security and regulatory compliance. For finance leaders, the decision requires a careful assessment of the firm's risk appetite, technical capabilities, and long-term treasury strategy.
Moreover, self-custody can affect relationships with auditors and regulators. Auditors may require additional evidence of control effectiveness, and regulators in some jurisdictions have specific expectations for self-custody arrangements. Firms need to ensure that their chosen structure is compliant with relevant regulations, which may vary by region.
Commercial Impact
For mid-market firms, the commercial impact of self-custody is twofold. On the cost side, self-custody can eliminate custodian fees, which can be significant for firms with large digital asset holdings. On the revenue side, self-custody can enable faster settlement, which may improve cash flow and allow for more efficient use of capital.
However, the initial investment in technology and training can be substantial. Firms need to weigh these upfront costs against the long-term savings. Additionally, the operational burden of managing self-custody should not be underestimated; it requires dedicated staff time and ongoing vigilance.
Risks and Unknowns
The primary risk of self-custody is the potential for loss due to theft, human error, or technical failure. Unlike with a custodian, there is no third party to turn to if assets are lost. This risk can be mitigated through robust security measures, but it cannot be eliminated.
Another unknown is the regulatory landscape. As self-custody becomes more common, regulators may introduce new requirements that could affect how firms structure their arrangements. Firms should stay informed about regulatory developments and be prepared to adapt.
Finally, there is the question of scalability. As a firm grows, its self-custody infrastructure may need to evolve. What works for a small treasury may not be sufficient for a larger one. Firms should design their self-custody structures with future growth in mind.
FY Outlook
Over the next 12 to 18 months, we expect to see continued adoption of self-custody among mid-market firms, driven by cost pressures and a desire for greater control. However, we also anticipate increased regulatory scrutiny, which may lead to more standardised requirements for self-custody arrangements. Firms that invest in robust governance and security now will be better positioned to navigate these changes.
We also expect to see more innovation in the self-custody space, particularly around threshold signature schemes and hybrid models that combine self-custody with third-party services. These developments could make self-custody more accessible to smaller firms.
Conclusion
Self-custody is not a one-size-fits-all solution. Mid-market firms need to carefully evaluate their specific needs, resources, and risk tolerance before making the switch. The structures outlined above provide a starting point, but each firm must tailor its approach to its own circumstances. With the right planning and execution, self-custody can offer significant benefits, but it requires a serious commitment to operational excellence.
For further reading, see our analysis of treasury management trends and crypto adoption in mid-market firms.
