Digital Custody: Institutional-Grade Safekeeping for Tokenized Securities
BNY Mellon launched digital asset custody services in October 2022, becoming the first U.S. systematically important financial institution (G-SIB) to offer integrated custody for both traditional and digital assets. With $47 trillion in assets under custody/administration, BNY Mellon’s entry validated institutional digital custody as a core financial service rather than a niche offering. State Street, Citibank, HSBC, Standard Chartered, and 10+ additional institutional custodians now offer or have announced digital asset custody capabilities.
BNY Mellon Digital Custody
BNY Mellon’s Digital Asset Custody platform initially supported Bitcoin and Ether custody for select institutional clients, with plans to expand to tokenized securities. The platform operates within BNY Mellon’s existing custody infrastructure — clients access digital asset holdings alongside traditional securities through the same BNY Mellon interface, reporting, and client service model. This integration is critical: institutional investors do not want separate custodians for tokenized and traditional assets.
The regulatory foundation for BNY Mellon’s digital custody derives from its New York State banking charter and OCC oversight. The SEC’s Staff Accounting Bulletin 122 (replacing SAB 121) modified the requirement for custodians to report custodied digital assets as liabilities on their own balance sheets — a provision that had effectively penalized banks for offering digital custody. SAB 122’s revision removed this barrier, enabling BNY Mellon and other bank custodians to scale digital custody without disproportionate balance sheet impact. The GENIUS Act (signed July 18, 2025) established the first comprehensive stablecoin framework, providing regulatory clarity for the payment infrastructure underlying tokenized security settlement and custody operations.
Custody Architecture
Institutional digital custody involves several layers: key management (generating, storing, and using the private keys that control tokenized assets), access controls (multi-signature authorization, governance workflows), segregation (separating client assets from the custodian’s own assets), insurance (covering theft, operational error, and key loss), and regulatory compliance (reporting to regulators, tax documentation, AML/KYC).
Hardware security modules (HSMs) — specialized cryptographic devices used by banks for traditional payment key management — form the foundation of institutional digital custody. BNY Mellon, Citibank, and HSBC use HSM-based key management certified to FIPS 140-2 Level 3 or higher. Multi-party computation (MPC) — where private keys are split across multiple parties and reassembled for signing without any single party holding the complete key — provides an alternative architecture used by Fireblocks, Anchorage Digital, and several bank custodians.
Specialized Digital Custodians
Anchorage Digital, the first federally chartered digital asset bank (OCC charter granted January 2021), provides custody, trading, and lending services for institutional clients. Fireblocks offers a technology platform (rather than regulated custody per se) used by over 1,800 institutional clients including banks, exchanges, and asset managers. BitGo provides qualified custodian services under South Dakota Trust Company charter. Komainu (a joint venture of Nomura, CVC Capital Partners, and Ledger) provides institutional custody in the APAC and European markets.
These specialized providers often serve as the technology backbone for bank custodians — several major banks use Fireblocks or similar platforms as the MPC/key management layer while providing the regulated custody wrapper under their own banking licenses. This architecture allows banks to offer digital custody without building key management technology from scratch.
Tokenized Security Custody
Custody for tokenized securities (bonds, equities, fund interests) requires capabilities beyond standard crypto custody. Tokenized security custodians must: process corporate actions (coupon payments, dividends, voting) at the smart contract level, maintain integration with transfer agents (Securitize for tokenized equities, traditional agents for tokenized bonds), provide tax reporting (1099-INT for tokenized bond interest, 1099-DIV for tokenized equity dividends), and connect to settlement systems (DTCC, Clearstream, CLS) for trade settlement.
SWIFT’s work on tokenized asset messaging standards is critical for custody connectivity. Today’s custody messaging (ISO 15022/20022) must evolve to accommodate blockchain-based asset records alongside traditional CSD records. Custodians supporting both tokenized and traditional securities need unified messaging that handles both record types.
Regulatory Requirements
The SEC’s Investment Advisers Act requires registered investment advisers to use “qualified custodians” for client assets. Banks (BNY Mellon, State Street, Citibank), registered broker-dealers, and state-chartered trust companies qualify. The question of whether digital asset custodians meet qualified custodian requirements has been clarified through SEC staff guidance, but the specific requirements for tokenized security custody — particularly the treatment of private keys and smart contract interactions — continue to evolve.
BIS guidelines on digital asset custody risk management, published through the Basel Committee, establish capital requirements for banks providing digital custody services. The treatment of operational risk (smart contract bugs, key management failures, blockchain forks) in the Basel framework directly affects the economics of institutional digital custody.
For the broader institutional infrastructure ecosystem, custody is the foundational layer. Without qualified custody, institutional investors cannot participate in tokenized bond markets, equity tokenization, or private market tokens. The expansion from 3-4 institutional custodians (2022) to 15+ (2026) reflects market maturation, but custody costs, technology risk, and regulatory uncertainty continue to constrain adoption.
State Street Digital Asset Services
State Street — the second-largest global custodian with $43+ trillion in assets under custody/administration — has developed digital asset capabilities through its State Street Digital division. State Street partnered with Taurus (a Swiss digital asset infrastructure provider) for tokenization and digital custody technology, and has explored integrations with Canton Network for institutional interoperability.
State Street’s approach differs from BNY Mellon’s in strategic emphasis. While BNY Mellon initially launched with cryptocurrency custody (Bitcoin, Ether), State Street has focused on tokenized securities custody — the infrastructure needed to hold tokenized bonds, equity tokens, and private market instruments. This focus reflects State Street’s position as a primary custodian for institutional investors (pension funds, sovereign wealth funds, insurance companies) whose digital asset requirements center on tokenized versions of traditional instruments rather than native cryptocurrencies.
State Street’s Global Advisors division — the $4+ trillion asset management arm — provides additional demand-side motivation for digital custody development. As tokenized fund products like BlackRock BUIDL and Franklin Templeton BENJI grow in AUM, State Street must offer custody services that accommodate these products alongside traditional fund holdings.
Citibank and HSBC Custody Expansion
Citibank’s Treasury and Trade Solutions (TTS) division — which processes approximately $4 trillion in daily cross-border payments — has developed digital asset custody capabilities leveraging its existing custody infrastructure. Citi’s Citi Token Services platform provides tokenized deposit and cash management services, with custody infrastructure supporting both tokenized cash and tokenized securities. Citi participated in the Regulated Liability Network (RLN) pilot alongside BNY Mellon and other major banks, testing deposit tokenization workflows.
HSBC launched HSBC Orion Custody to support digital securities safekeeping, integrated with HSBC Orion’s bond issuance platform. This vertical integration — issuance and custody on the same platform — simplifies the operational chain for HSBC Orion bond issuances. Standard Chartered partnered with Northern Trust to create Zodia Custody, an FCA-regulated digital asset custodian serving institutional clients in the UK and European markets.
Insurance and Risk Mitigation
Institutional digital custody insurance remains a developing market. Traditional custodian insurance policies (covering theft, operational error, employee dishonesty) do not always extend to digital assets. Specialized digital asset insurance is available from Lloyd’s syndicates (Arch Insurance, Canopius), Aon, and Marsh, but coverage limits are typically $100-500 million — insufficient for custodians managing billions in digital assets.
The insurance gap affects institutional adoption. Pension fund trustees and insurance company boards, accustomed to comprehensive custody insurance for traditional assets, may be reluctant to allocate to tokenized securities if custody insurance is limited. BNY Mellon and State Street are working with insurance brokers to develop coverage frameworks that match the risk profiles of their digital custody services.
Self-insurance through operational controls — air-gapped key storage, geographically distributed key shards, 24/7 monitoring, and multi-party authorization — provides risk mitigation beyond insurance coverage. Broadridge DLR processes $385 billion in average daily tokenized repo without incident, demonstrating that institutional-grade operational controls can manage digital custody risk at scale.
Cross-Chain Custody Challenges
As tokenized securities proliferate across multiple blockchains — Ethereum, Polygon, Stellar, Canton, Avalanche — custodians must support multiple chains simultaneously. Each blockchain has different key management requirements, transaction signing protocols, and finality guarantees. A custodian holding tokenized Treasuries (BUIDL on Ethereum, BENJI on Stellar/Polygon/Avalanche) must maintain separate key infrastructure for each chain.
SWIFT’s tokenized asset messaging standards aim to abstract the multi-chain complexity for custodians by providing a unified messaging layer. Fireblocks’ multi-chain MPC platform serves as the technical infrastructure for many custodians’ multi-chain support. The interoperability challenge for custody mirrors the broader institutional interoperability challenge — multiple solutions (Canton Network, SWIFT linking, Chainlink CCIP) coexist without a single standard.
Fund Administration and Custody Convergence
For tokenized funds — PE fund tokens, tokenized equity funds, tokenized real estate — custody and fund administration functions converge on the blockchain. The traditional separation between the custodian (holding assets), administrator (calculating NAV, processing subscriptions/redemptions), and transfer agent (maintaining shareholder records) becomes blurred when all functions execute through smart contracts on a shared ledger.
BNY Mellon and State Street both provide fund administration alongside custody services, positioning them to offer integrated digital fund services where custody, NAV calculation, and investor record-keeping occur on a single platform. This convergence reduces operational costs and eliminates the reconciliation breaks between custodian and administrator records that generate significant operational expense in traditional fund operations.
Outlook and Market Projections
The institutional custody provider tracker monitors 15+ institutional custodians offering or developing digital asset custody, with projections reaching 25+ by 2028. The competitive dynamics favor the largest custodians — BNY Mellon and State Street — due to their existing client relationships, regulatory licenses, and technology investment capacity. Specialized digital custodians (Anchorage, Fireblocks, BitGo) will continue to serve as technology providers and niche custodians, but the bulk of institutional tokenized security custody will likely flow through the same custodians that hold traditional securities.
According to BIS guidelines, institutional custody for digital assets requires “equivalent protections to those provided for traditional securities, including asset segregation, regulatory oversight, and adequate insurance or capitalization.” The G20 tokenization roadmap includes custody infrastructure development as a key milestone, with the regulatory compliance framework explicitly addressing qualified custodian requirements for tokenized securities.
The tokenized bond market forecast identifies custody expansion as a critical dependency — the base case scenario assumes 30+ institutional custodians offering tokenized security custody by 2030, while the conservative scenario assumes persistent custody limitations constraining institutional adoption.
DTCC Custody Connectivity and Scale Requirements
DTCC settles $2.4 quadrillion annually in U.S. securities transactions, with custody connectivity flowing through its Depository Trust Company (DTC) subsidiary. DTC holds approximately $87 trillion in securities on behalf of its participants. For tokenized securities to achieve institutional scale, the custody architecture must integrate with DTCC/DTC infrastructure — enabling tokenized bonds, equities, and fund shares to be held alongside traditional securities within the same DTC participant accounts. DTCC’s Tokenized Collateral Network already connects BlackRock BUIDL with margin requirements at DTCC-cleared transactions, demonstrating the feasibility of unified traditional-digital custody through DTCC infrastructure.
The total RWA tokenization market at $20 billion in TVL (excluding stablecoins) with 630,000+ holders remains a fraction of DTCC’s $87 trillion in custody, but the growth trajectory — from near-zero in 2022 to $27 billion in 2026 — demonstrates the institutional demand that custodians must prepare to serve. Broadridge, processing $385 billion daily in tokenized repo, proves that DLT-based custody and settlement can function at scale for specific use cases. The extension of this proven infrastructure to broader custody services — covering tokenized bonds, equities, and private market instruments — is the natural evolution that BNY Mellon, State Street, and other institutional custodians are pursuing. According to World Bank research, custody infrastructure modernization is a prerequisite for emerging market participation in tokenized capital markets, with global custodians extending their digital capabilities to developing market clients as the G20 tokenization roadmap advances.
HQLAx — backed by Deutsche Boerse, Goldman Sachs, JPMorgan, and other tier-1 banks — processes EUR 100 billion+ in DLT-based collateral transfers across triparty agents and custodians, demonstrating that digital custody infrastructure can support institutional-scale collateral mobility. For custodians like BNY Mellon and State Street, integration with HQLAx Digital Collateral Records enables clients to optimize their HQLA portfolios by transferring collateral ownership without physical settlement — a capability that reduces settlement risk and improves capital efficiency for banks managing regulatory liquidity requirements. Fnality International’s Bank of England-authorized wholesale payment system provides the DLT-based cash settlement layer that complements digital custody for atomic delivery-versus-payment transactions, connecting the custody function with SWIFT messaging orchestration and Canton Network application interoperability.
Contact for research inquiries: info@capitaltokenization.com