The Bank Custody Race: Who Will Hold America’s Bitcoin?

Wall Street did not suddenly fall in love with Bitcoin. It realized the custody fees were too large to leave on someone else’s balance sheet.

For most of the past decade, institutional digital asset custody belonged to crypto-native firms. Coinbase built a custody business. BitGo made multi-signature wallets acceptable to institutional clients. Anchorage Digital became the first federally chartered crypto bank. They won because traditional banks either could not hold the keys or did not want to.

That period is now closing. Over the past 18 months, BNY Mellon, State Street, Standard Chartered, U.S. Bank and Citigroup have either launched or committed to launching direct crypto custody services. The question is no longer whether banks will hold Bitcoin. It is what happens to the companies that held it first.

Regulation Opened the Door

Two regulatory changes made the bank custody wave possible. Both matter because they show that the main barriers were legal and accounting constraints, not technology.

In January 2025, the SEC rescinded Staff Accounting Bulletin 121 through SAB 122. SAB 121 had required companies holding crypto for clients to record a matching liability on their own balance sheet. For banks, that made crypto custody economically unattractive.

The problem was simple. A bank holding $10 billion in client Bitcoin would have to treat that amount as a balance-sheet liability and set aside capital against it. Traditional custody businesses do not work that way. For institutions already holding trillions of dollars in securities, the rule turned a fee business into a capital burden.

The OCC then followed with Interpretive Letters 1183 and 1184, confirming that national banks and federal savings associations may custody crypto assets, execute buy and sell orders for custody clients and use sub-custodians for digital asset services. Letter 1183 also removed the prior requirement that banks obtain supervisory nonobjection before entering crypto custody.

That changed crypto custody from a special permission business into a recognized banking activity.

The GENIUS Act, signed in July 2025, added another layer. Although focused mainly on stablecoins, the law created national trust bank charter pathways that Circle, Paxos, BitGo, Fidelity Digital Assets and Ripple used to obtain preliminary OCC approval by the end of 2025. It also helped establish digital asset custody as a permissible federal banking activity.

The result was immediate. BNY Mellon expanded its crypto ETF custody work. State Street launched its Digital Asset Platform. Morgan Stanley applied for a bank charter tied to crypto custody. Nomura’s Laser Digital pursued a U.S. national trust bank charter. Charles Schwab began exploring direct crypto services for advisory clients.

The regulatory question moved from whether banks may hold crypto to how quickly they can build the business.

The Banks Already in the Market

Bank crypto custody is already more developed than many investors realize.

BNY Mellon is the furthest along. The world’s largest custodian, with $59.4 trillion in assets under custody, began holding Bitcoin and Ethereum for ETF issuers in 2022 and has since expanded its services. In May 2026, it announced a collaboration with Finstreet Limited and ADI Foundation to offer crypto custody in Abu Dhabi Global Market, its first direct crypto custody expansion outside the United States. BNY also serves as custodian for Morgan Stanley’s MSBT Bitcoin ETF and as primary reserve custodian for Ripple’s RLUSD stablecoin.

State Street, the world’s second-largest custody bank with $51.7 trillion in assets under custody, launched its Digital Asset Platform in January 2026 with Taurus, a Swiss digital asset infrastructure provider. The platform supports wallet management, custody and settlement for tokenized money market funds, ETFs, tokenized deposits and stablecoins across public and permissioned blockchains.

Standard Chartered chose acquisition over a full internal build. The bank is absorbing Zodia Custody, the subsidiary it co-founded with Northern Trust in 2020. The deal, expected to close by the end of August 2026, brings Zodia’s seven global offices and support for more than 75 cryptocurrencies into Standard Chartered’s corporate and investment banking division. The bank also holds a $1 billion-plus investment in crypto market maker GSR, giving it exposure across custody, trading and market making.

U.S. Bank was one of the earliest traditional banks to enter crypto custody. It offers services to fund administrators and provides reserve custody for Anchorage Digital Bank’s payment stablecoins. Its strategy has focused less on headlines and more on stablecoin infrastructure, reserve management and fund administration support.

Why Citi Matters

Citigroup’s Custody+ announcement on Aug. 18 mattered because of scale.

Citi held $34.5 trillion in assets under custody and administration as of June 2026, making it the world’s third-largest custodian. Its entry adds another global bank to a market once dominated by specialist crypto firms.

Custody+ is not being presented as a standalone crypto product. Citi described it as a modular suite covering speed, certainty, intelligence and control. Digital asset custody sits beside real-time asset servicing, instant settlement, liquidity management, foreign exchange and AI-powered market data.

That structure matters. An asset manager holding Bitcoin and conventional securities would not need parallel custody systems. It could use one Citi environment for both.

Bitcoin will be the first supported cryptocurrency. Citi will handle key management, wallet infrastructure and safekeeping, meaning institutional clients will not manage private keys or wallets directly. The bank expects the service to go live before the end of 2026.

The strategic logic is clear. Citi already serves the world’s largest asset managers, sovereign wealth funds and pension systems. If those clients want Bitcoin exposure, Citi would rather custody the asset itself than let Coinbase or BitGo capture the fee and the client relationship.

Crypto-Native Custodians Face a Structural Threat

The risk to crypto-native custodians is not theoretical.

Coinbase Custody manages about $376 billion in institutional crypto assets and serves as custodian for more than 80% of U.S. spot Bitcoin and Ethereum ETF assets. BitGo’s assets under custody passed $90 billion in mid-2025, while the firm expanded its regulatory footprint with MiCA-compliant licenses in Germany and broker-dealer approval in Dubai. Together with Gemini, Ledger Enterprise and Fireblocks, the top five crypto-native custodians hold roughly 46% of the global market.

That dominance was built on the fact that banks could not compete. SAB 121, regulatory uncertainty and institutional caution kept traditional finance away. Those barriers have now fallen.

The main threat is bundling. If an adviser can get custody, trading, compliance reporting and client portal access for traditional securities and crypto in one place, the crypto-native custodian must offer something materially better to retain the relationship. A firm like Charles Schwab can compress crypto custody margins if doing so protects a broader advisory business. Coinbase and BitGo do not have the same cross-subsidy.

Coinbase has responded by building what it calls crypto’s only full-service prime brokerage, combining trading, custody, a $1 billion lending book, derivatives through its Deribit integration and staking across 10 to 20 tokens. BitGo runs adjacent prime brokerage, staking and lending intermediation businesses through separate entities.

Both are betting that crypto-specific depth will matter more than traditional financial breadth.

Whether that holds may depend on a problem neither side has fully solved: insurance.

The Technology Split

Crypto custody usually relies on three core models.

Cold storage keeps private keys entirely offline. Keys never touch an internet-connected device, and withdrawals usually require manual intervention. It remains the standard for strategic reserves, with most institutional custodians holding 90% or more of client assets offline.

Hardware Security Modules are tamper-resistant devices built to generate, store and manage cryptographic keys. They provide auditable logs and meet FIPS 140-2 Level 3 or Level 4 standards, which are also used by central banks and military organizations. Banks such as BNY Mellon and State Street favor HSM-based systems because they resemble security infrastructure already used in traditional finance.

Multi-Party Computation splits a private key into multiple shares held by separate parties. Transactions are signed through a cryptographic process without reconstructing the full key. MPC reduces single-point-of-failure risk and allows faster transaction processing than pure cold storage. Coinbase, BitGo and Fireblocks built much of their custody architecture around MPC.

The industry is moving toward hybrid systems. Custodians use HSMs as hardware roots of trust, while MPC supports signing workflows. Cold storage holds long-term balances, HSM-protected warm storage supports operational liquidity, and MPC-based hot wallets handle active trading.

Banks enter with an advantage in HSM deployment because they already operate that infrastructure at scale. Crypto-native firms have the advantage in MPC, where they have years of production experience. The question is whether convergence favors the institutions with stronger hardware infrastructure or the specialists with deeper cryptographic software.

The Insurance Gap Remains Unsolved

Crypto custody’s biggest unresolved problem is protection.

Only about 1% of cryptocurrency by market value is covered by insurance. The crypto insurance market generated roughly $1.9 billion in premiums in 2024, while the crypto market was valued at about $2.5 trillion. That ratio has not meaningfully improved as the market has grown.

Leading custody insurance programs typically offer coverage limits between $75 million and $320 million, with some reaching $1 billion in aggregate coverage. But a custodian holding $5 billion in client assets with $200 million of insurance is not fully protected. It has partial risk transfer.

That is difficult for institutions used to SIPC coverage on brokerage accounts or FDIC insurance on deposits.

The FDIC proposed its first custody and reserve standards for FDIC-supervised institutions providing crypto safekeeping in April 2026, but the proposal made clear that digital assets would not receive deposit insurance. Bank custody of Bitcoin therefore operates under a different protection framework from bank custody of dollars.

Banks can point to balance-sheet strength. If Citi loses client Bitcoin through a custody failure, its $2.4 trillion balance sheet theoretically stands behind potential claims. If Coinbase suffers a similar failure, its balance sheet is far smaller. But the assumption that a bank would make clients whole is not the same as a contractual guarantee, and it has not been tested in a major digital asset loss.

Crypto-native custodians have spent years negotiating with Lloyd’s syndicates and building insurance programs designed specifically for digital asset risk. Banks enter with credibility, but not necessarily with mature crypto-specific insurance coverage.

Neither side has solved the core problem: the insurance market does not have enough capacity to fully cover the assets being custodied.

Custody Is Only the Entry Point

The banks moving into crypto custody are also building tokenized deposit networks and settlement infrastructure.

JPMorgan, Citigroup, Bank of America and Wells Fargo are developing a shared tokenized deposit network through The Clearing House, targeting the first half of 2027. JPMorgan already allows institutional clients to pledge Bitcoin and Ethereum as collateral for U.S. dollar loans, putting crypto closer to Treasuries and blue-chip equities inside traditional lending systems.

The tokenized real-world asset market has grown more than 420% since the start of 2025 to $31.6 billion. State Street designed its Digital Asset Platform to handle tokenized money market funds and ETFs alongside native crypto. Standard Chartered’s Zodia deal positions it to custody both cryptocurrencies and tokenized assets under one institutional brand.

This shows the broader logic behind bank custody. Holding Bitcoin is not the endpoint. Once a bank controls the custody relationship, it can offer lending against Bitcoin, settlement for tokenized assets and an integrated platform where traditional and digital assets sit inside the same client workflow.

For crypto-native custodians, tokenization is both a threat and an opportunity. Coinbase and BitGo cannot match JPMorgan or Citi’s balance-sheet capacity in collateralized lending. But they do have infrastructure for assets issued on public blockchains, where banks may still need specialist support.

A bank could issue a tokenized Treasury product and still rely on a crypto-native custodian to safeguard it onchain. In that scenario, today’s competitor could become tomorrow’s sub-custodian.

Who Wins the Custody Race?

The digital asset custody market is projected to grow from roughly $953 billion in 2026 to more than $4.3 trillion by 2030. That is large enough for both banks and crypto-native firms to grow in absolute terms.

The real fight is for the most valuable clients: large institutions with the highest custody balances, the deepest trading needs and the strongest downstream revenue potential.

Banks bring trusted brands, large balance sheets, regulatory familiarity and existing client relationships. Crypto-native custodians bring technical depth, asset coverage, staking, DeFi connectivity and years of operational experience in digital asset security.

The market may not produce a single winner. Large asset managers may use banks for Bitcoin, Ethereum and tokenized securities, while relying on crypto-native firms for broader asset coverage and specialized blockchain services. Banks may also outsource parts of their custody stack to the very companies they now threaten.

Still, the direction is clear. Bitcoin custody is moving from a specialist crypto service into core financial infrastructure. The firms that held the keys first built the market. The banks now want the relationship that comes with holding them.