Wall Street did not wake up one morning and decide it liked Bitcoin. It woke up and realized the custody fees were too large to leave on someone else’s balance sheet.
Summary
- Citigroup announced Custody+ on Aug. 18, folding Bitcoin into the same rails that hold $34.5 trillion in traditional assets, with a live launch expected before year end 2026.
- BNY Mellon, the world’s largest custodian at $59.4 trillion in assets under custody, already holds crypto for ETF issuers and expanded Bitcoin and Ethereum custody to Abu Dhabi in May 2026.
- Coinbase Custody manages $376 billion in institutional crypto assets and serves as custodian for more than 80% of U.S. spot Bitcoin and Ethereum ETFs, making it the single largest target if banks bundle custody with prime brokerage.
- The regulatory runway cleared in 2025 when the SEC rescinded SAB 121 and the OCC confirmed that national banks may custody crypto without prior approval, removing the two largest barriers to bank entry.
- Only roughly 1% of all cryptocurrency by market value carries insurance coverage, creating a protection gap that neither banks nor crypto natives have solved and that could define the next wave of competition.
For most of the past decade, holding digital assets for institutions was a job only crypto-native firms would touch. Coinbase built a custody arm. BitGo pioneered multi-signature wallets for institutional clients. Anchorage Digital became the first federally chartered crypto bank. They earned the business because traditional banks either could not or would not hold the keys.
That era is ending. In the span of 18 months, BNY Mellon, State Street, Standard Chartered, U.S. Bank, and now Citigroup have either launched or committed to launching direct crypto custody services. The question is no longer whether banks will hold Bitcoin. It is what happens to the companies that held it first.
The regulatory gates that opened everything
Two regulatory changes made the bank custody wave possible, and both arrived within weeks of each other. Understanding the sequence matters because it explains why the bank entry wave happened in 2025 and 2026 and not before: the barriers were legal and accounting constraints, not technological ones.
In January 2025, the SEC rescinded Staff Accounting Bulletin 121 through SAB 122, removing the rule that had forced any company holding crypto on behalf of clients to record a corresponding liability on its own balance sheet. SAB 121 had been the single most effective barrier to bank participation in crypto custody since its introduction in March 2022. The math was simple and punishing: a bank holding $10 billion in client Bitcoin had to treat that $10 billion as its own liability, which meant setting aside capital against it. For institutions already managing trillions in traditional custody without any such requirement, the asymmetry made crypto custody economically irrational. No amount of client demand could overcome a rule that turned a fee business into a capital drain.
The OCC followed months later with Interpretive Letters 1183 and 1184, which confirmed that national banks and federal savings associations may custody crypto assets, execute buy and sell orders on behalf of custodial clients, and use sub-custodians for digital asset services. Critically, Letter 1183 also rescinded the requirement for banks to obtain supervisory nonobjection before engaging in crypto custody. Under the prior regime, a bank wanting to hold Bitcoin had to apply to its regulator and wait for written permission, a process that could take months and carried no guaranteed timeline. Removing that requirement turned crypto custody from a special privilege into a standard banking power.
Then came the GENIUS Act, signed into law in July 2025. While written primarily for stablecoins, the Act created new national trust bank charter pathways that Circle, Paxos, BitGo, Fidelity Digital Assets, and Ripple have all used to secure preliminary OCC approval. The OCC conditionally granted national trust bank charters to all five firms by the end of 2025. The legislation codified for the first time that digital asset custody is a permissible banking activity under federal law, not merely an interpretive stretch of existing authority. The Financial Stability Oversight Council simultaneously dropped its classification of crypto as a systemic “vulnerability,” signaling that the broader regulatory posture had shifted from containment to integration.
The combined effect was immediate. Within months of SAB 121’s repeal, BNY Mellon expanded its crypto ETF custody operations. State Street launched its Digital Asset Platform. Morgan Stanley applied for a bank charter specifically to custody crypto. Nomura’s Laser Digital applied for a U.S. national trust bank charter dedicated to crypto custody. Even Charles Schwab began exploring direct crypto services for its advisory clients. The regulatory question shifted from “may banks hold crypto?” to “how quickly can they staff up?”
Who is already live
The landscape of bank crypto custody in mid-2026 is more developed than most market participants realize.
BNY Mellon is the furthest along. The world’s largest custodian, with $59.4 trillion in assets under custody, began holding Bitcoin and Ethereum for ETF issuers in 2022 and has since expanded the service. In May 2026, BNY announced a collaboration with Finstreet Limited and ADI Foundation to offer crypto custody in Abu Dhabi Global Market, marking its first expansion of direct crypto custody outside the United States. BNY serves as custodian for Morgan Stanley’s MSBT Bitcoin ETF and as primary reserve custodian for Ripple’s RLUSD stablecoin.
State Street, the world’s second-largest custody bank at $51.7 trillion in assets under custody, launched its Digital Asset Platform in January 2026 in partnership with Taurus, a Swiss digital asset infrastructure provider. The platform supports wallet management, custody, and settlement for tokenized money market funds, ETFs, tokenized deposits, and stablecoins across both public and permissioned blockchains.
Standard Chartered took a different path. Rather than building from scratch, the bank is absorbing Zodia Custody, the subsidiary it co-founded with Northern Trust in 2020. The acquisition, expected to close by end of August 2026, merges Zodia’s seven global offices and custody support for more than 75 cryptocurrencies into Standard Chartered’s corporate and investment banking division. Standard Chartered also holds a $1 billion-plus investment in crypto market maker GSR, giving it adjacency across custody, trading, and market making.
U.S. Bank was among the earliest traditional banks to move into the space, offering cryptocurrency custody services to fund administrators and providing reserve custody for Anchorage Digital Bank’s payment stablecoins. U.S. Bank brings more than 150 years of securities custody experience and has described its strategy as evolving the crypto offering in step with market demand, a measured approach that prioritizes regulatory alignment over speed. Its focus has been on the plumbing of the stablecoin ecosystem, reserve management, and fund administration support, areas where reliability matters more than headlines.
The Citi catalyst
When Citi unveiled Custody+ on Aug. 18, the announcement carried weight not because of novelty but because of scale. Citi holds $34.5 trillion in assets under custody and administration as of June 2026, making it the third-largest custodian in the world.
Custody+ is not a standalone crypto product bolted onto existing infrastructure. Citi described it as a modular suite covering eight capabilities across three categories: speed and certainty, intelligence, and control. Digital asset custody sits alongside real-time asset servicing, instant settlement, liquidity management, foreign exchange, and AI-powered market data. An asset manager holding Bitcoin and conventional securities would use one Citi environment for all custody services rather than running parallel operating stacks.
Bitcoin will be the first cryptocurrency supported. Citi will handle key management, wallet infrastructure, and safekeeping, meaning institutional clients will not touch private keys or manage wallets directly. The timeline targets a live launch before the end of 2026.
The strategic logic is straightforward. Citi already serves as custodian for the world’s largest asset managers, sovereign wealth funds, and pension systems. If those clients want Bitcoin exposure, and a growing number of them do, Citi would prefer to custody the Bitcoin itself rather than watch the fees flow to Coinbase or BitGo.
What the crypto natives stand to lose
The competitive threat to crypto-native custodians is not theoretical. It is structural.
Coinbase Custody manages approximately $376 billion in institutional crypto assets and custodies more than 80% of U.S. spot Bitcoin and Ethereum ETF assets. BitGo’s assets under custody crossed $90 billion in mid-2025, and it expanded its regulatory footprint with MiCA-compliant licenses in Germany and broker-dealer approval in Dubai. Together with Gemini, Ledger Enterprise, and Fireblocks, the top five crypto-native custodians hold roughly 46% of the global market.
That dominance was built on a simple fact: banks could not compete. SAB 121, regulatory ambiguity, and institutional caution kept traditional finance on the sideline. Every one of those barriers has now fallen.
The specific danger is the bundle. Charles Schwab, which manages over $5 trillion in client assets, illustrates the dynamic. If a registered investment adviser can get custody, trading, compliance reporting, and client portal access for both traditional securities and crypto in one place, and that place already manages the rest of the client’s portfolio, the crypto-native custodian needs to offer something meaningfully better to keep the relationship. Schwab can afford to compress margins on crypto custody if it retains the broader advisory business. Coinbase and BitGo cannot subsidize the same way.
Coinbase has responded by building what it describes as the only full-service prime brokerage in crypto: trading, custody, a $1 billion lending book, derivatives through its Deribit integration, and staking across 10 to 20 tokens. BitGo runs adjacent prime brokerage, staking, and lending intermediation businesses under separate entities. Both are betting that depth of crypto-specific services will matter more than breadth of traditional financial infrastructure.
Whether that bet holds depends largely on a question neither side has answered well: insurance.
The numbers illustrate the stakes. A 2026 survey found that roughly three in four institutional investors plan to increase their digital asset allocations this year, with 66% naming regulatory uncertainty as a top concern. Even as ETF flows normalize and the initial rush of passive inflows slows, active institutional demand for direct Bitcoin exposure continues to grow. As that uncertainty fades and allocations grow, custody becomes the bottleneck. Every new dollar of institutional Bitcoin exposure needs a custodian, and the winner of that race captures not just the custody fee but the relationship that unlocks lending, trading, settlement, and advisory revenue downstream.
The custody tech stack no one talks about
This is where the bank versus crypto-native comparison gets technical, and where the differences matter most for the institutions writing the checks.
Crypto custody technology falls into three broad categories, and every custodian uses some combination of all three.
Cold storage keeps private keys entirely offline in air-gapped environments. Keys never touch a network-connected device. Withdrawals require physical intervention and typically take hours or days to process. Cold storage is the most secure option against remote attacks and remains the standard for strategic reserves. Most institutional custodians hold 90% or more of client assets in cold storage.
Hardware Security Modules are tamper-resistant physical devices purpose-built to generate, store, and manage cryptographic keys. HSMs provide auditable logs of every key operation and meet FIPS 140-2 Level 3 or Level 4 certification standards, the same standards used by central banks and military organizations. Banks like BNY Mellon and State Street default to HSM-based architectures because they map directly onto the security infrastructure banks already operate for traditional securities.
Multi-Party Computation splits a private key into multiple shares distributed across independent parties. Transaction signing happens through a cryptographic protocol that produces a valid signature without ever reconstructing the full key. MPC eliminates the single point of failure inherent in traditional key management and enables faster transaction processing than pure cold storage. Coinbase, BitGo, and Fireblocks all built their custody platforms around MPC architectures.
The industry trend in 2026 is toward hybrid models. Leading custodians use HSMs as hardware roots of trust providing secure randomness and tamper-evident storage, while layering MPC protocols on top for the actual signing workflows. Tiered storage has become standard: cold storage for long-term holdings, HSM-protected warm storage for operational liquidity, and MPC-based hot wallets for active trading, with automated rebalancing based on velocity and exposure limits.
Banks enter with a structural advantage in HSM deployment because they already operate these devices at scale for traditional markets. Crypto natives hold the advantage in MPC innovation, where they have years of production experience banks cannot replicate overnight. The competitive question is whether hybrid convergence favors the party that starts with better hardware infrastructure or the party that starts with better cryptographic software.
The insurance arithmetic that should worry everyone
The protection gap in crypto custody is the industry’s open secret and its most dangerous unresolved problem.
Only approximately 1% of the cryptocurrency market by value carries insurance coverage. The crypto insurance market totaled roughly $1.9 billion in premiums in 2024 against a total crypto market then valued at approximately $2.5 trillion. That ratio has not materially improved as the market has grown.
Leading custody insurance programs offer between $75 million and $320 million in coverage limits, with some providers reaching $1 billion in aggregate. But if a custodian holds $5 billion in client assets and carries $200 million in coverage, the policy functions as partial risk transfer, not protection. For an institution accustomed to SIPC coverage on brokerage accounts or FDIC insurance on deposits, that gap is difficult to explain to a compliance committee.
The FDIC proposed its first custody and reserve standards for FDIC-supervised institutions providing crypto safekeeping in April 2026, but the proposal explicitly states that digital assets will not receive deposit insurance. This means bank custody of Bitcoin operates under a fundamentally different protection framework than bank custody of dollars. A client whose Bitcoin is stolen from bank custody has no federal insurance backstop.
Banks bring balance sheet strength that theoretically provides a different kind of protection. If Citi loses client Bitcoin through a custody failure, the bank’s $2.4 trillion balance sheet stands behind any claim. If Coinbase suffers the same failure, its balance sheet, while substantial for a crypto company, is orders of magnitude smaller. But “the bank will make you whole” is an assumption, not a contractual guarantee, and it has never been tested in the context of a large-scale digital asset loss.
The insurance gap creates an unexpected competitive dynamic. Crypto-native custodians have spent years building specialized insurance programs, negotiating with Lloyd’s syndicates, and structuring coverage specifically for digital asset risks. Banks are entering the market with reputational credibility but without existing crypto-specific insurance relationships. Neither side has solved the fundamental problem: the insurance market does not have the capacity to fully cover the assets being custodied.
The tokenization bridge
Custody is not the end of the story. It is the beginning.
The banks entering crypto custody are simultaneously building tokenized deposit networks and settlement infrastructure. JPMorgan, Citigroup, Bank of America, and Wells Fargo are constructing a shared tokenized deposit network through The Clearing House, targeting the first half of 2027. JPMorgan already lets institutional clients pledge Bitcoin and Ethereum as collateral for U.S. dollar loans, placing crypto on the same ledger as Treasuries and blue-chip equities.
The tokenized real-world asset market has expanded more than 420% since the start of 2025, reaching $31.6 billion. State Street’s Digital Asset Platform was designed from the start to handle tokenized money market funds and ETFs alongside native crypto. Standard Chartered’s absorption of Zodia Custody positions it to offer custody for more than 75 cryptocurrencies and tokenized assets under a single institutional brand.
This is where the bank custody play reveals its full scope. Custody is the entry point. Once a bank holds an institution’s Bitcoin, it can offer lending against that Bitcoin, settlement of tokenized assets alongside that Bitcoin, and eventually a fully integrated platform where the distinction between traditional and digital assets disappears from the client’s perspective.
For crypto-native custodians, the tokenization wave presents both threat and opportunity. Coinbase and BitGo do not have the balance sheet capacity to compete on collateral lending at the scale JPMorgan or Citi can offer. But they do have the technological infrastructure to custody tokenized assets that banks are only beginning to issue, creating potential for a custody relationship that flows in the reverse direction. A bank might issue a tokenized Treasury product and then need a crypto-native custodian to safeguard it on a public blockchain, a scenario that would turn today’s competitor into tomorrow’s sub-custodian.
The digital asset custody market is projected to grow from roughly $953 billion in 2026 to more than $4.3 trillion by 2030, according to industry estimates. That growth trajectory means the market is large enough for both bank custodians and crypto natives to expand, at least in aggregate. The question is whether the most valuable slice of the market, the largest institutional accounts with the highest fee revenue, will consolidate around banks that offer one-stop access to traditional and digital assets, or whether those accounts will continue to split their custody across specialists who offer superior technology and deeper asset coverage.
What to watch
- ETF custody rotation: whether any major ETF issuer moves custody from Coinbase to a bank custodian in the next 12 months, which would signal that the bundle is winning over specialization.
- Insurance capacity growth: whether Lloyd’s syndicates or new entrants expand crypto custody insurance capacity above $5 billion in aggregate, which would begin to close the protection gap that currently defines the market.
- OCC charter applications: the number of new national trust bank charter applications filed for digital asset custody, which indicates whether crypto-native firms believe they must become banks to survive.
- Citi Custody+ live date: whether Citi meets its year-end 2026 target and which institutional clients move first, setting the pace for other banks still building.
- Coinbase Prime retention: whether Coinbase’s prime brokerage bundle, including its $1 billion lending book and Deribit derivatives integration, holds institutional clients who could consolidate with a bank.
What is bank crypto custody?
Bank crypto custody refers to regulated depository institutions holding digital assets like Bitcoin on behalf of institutional clients, using the same legal and operational frameworks they apply to traditional securities such as equities and bonds. The bank manages private keys, wallet infrastructure, and safekeeping so clients do not handle cryptographic material directly.
Which banks currently offer crypto custody in the United States?
BNY Mellon has been live with crypto custody since 2022 and serves as custodian for multiple Bitcoin and Ethereum ETFs. State Street launched its Digital Asset Platform in January 2026. U.S. Bank offers cryptocurrency custody for fund administrators. Citigroup announced Custody+ in August 2026, with a launch expected before year end.
What happened to SAB 121 and why did it matter?
Staff Accounting Bulletin 121 was an SEC rule introduced in March 2022 that required companies holding crypto assets for clients to record a corresponding liability on their own balance sheets. This capital charge made crypto custody economically unviable for banks. The SEC rescinded SAB 121 in January 2025 through SAB 122, removing the primary accounting barrier to bank participation.
How does bank custody differ from Coinbase or BitGo custody?
Banks typically build custody around Hardware Security Modules and infrastructure they already operate for traditional securities. Crypto-native custodians like Coinbase and BitGo built their platforms around Multi-Party Computation, which splits private keys across multiple parties to eliminate single points of failure. Banks offer the advantage of bundling crypto custody with existing services. Crypto natives offer deeper specialization in digital asset security.
Is Bitcoin held in bank custody insured by the FDIC?
No. The FDIC proposed custody and reserve standards for FDIC-supervised institutions in April 2026 but explicitly stated that digital assets will not receive deposit insurance. Bitcoin held in bank custody does not carry the same federal insurance protection as dollar deposits.
What is Citi Custody+ and when does it launch?
Custody+ is a modular custody suite announced by Citigroup on Aug. 18, 2026. It covers eight capabilities across three categories: speed and certainty, intelligence, and control. Bitcoin custody is one component alongside real-time settlement, liquidity management, and AI-powered market intelligence. Citi targets a live launch before the end of 2026.
What does the GENIUS Act mean for crypto custody?
The GENIUS Act, signed into law in July 2025, created the first federal framework for payment stablecoins and opened new national trust bank charter pathways. Circle, Paxos, BitGo, Fidelity Digital Assets, and Ripple have all used these pathways to secure preliminary OCC approval. The Act codified digital asset custody as a permissible banking activity under federal law.
Will crypto-native custodians survive the bank custody wave?
Crypto-native custodians hold structural advantages in MPC technology, specialized insurance programs, and depth of digital asset support. Coinbase manages $376 billion in institutional crypto assets and has built a full prime brokerage suite. BitGo operates across multiple jurisdictions with integrated custody, brokerage, and lending. The competitive outcome likely depends on whether institutional clients prioritize the convenience of bundled traditional and crypto services at a bank or the specialized depth of a crypto-native platform.
Disclaimer: This article is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency investments carry significant risk. Always conduct your own research and consult qualified professionals before making investment decisions. Published Aug. 20, 2026.
