Explainers
Bitcoin ETF custody: who actually holds the coins
Nine of twelve US spot Bitcoin ETFs rely on one custodian. Here is how institutional cold storage works, what the insurance really covers, and how to verify a fund's holdings.
When you buy a Bitcoin ETF, three parties stand between you and the asset. Your broker holds your shares. The trust owns the bitcoin. And a custodian holds the private keys that control it — which means, in the only sense that matters on a blockchain, the custodian holds the bitcoin.
That last layer gets the least attention and deserves the most, because it is where the genuinely novel risk in these products lives. Everything else about an ETF is well-worn financial plumbing. Custody of a bearer asset with irreversible transfers is not.
What a crypto custodian actually does
A bitcoin balance is controlled by a private key. Whoever knows the key can move the coins, and transfers cannot be reversed by anyone. There is no chargeback, no court-ordered clawback of the transaction itself, and no issuer to call.
Institutional custody exists to manage exactly that. A qualified custodian generates and stores keys in hardware security modules, splits signing authority so no individual can move funds alone, keeps the overwhelming majority of holdings in offline cold storage, maintains segregated accounts in each client's name, submits to third-party audits and controls reporting, and carries insurance against theft and certain operational failures.
In the US the relevant custodians are generally chartered trust companies — Coinbase Custody Trust Company and Fidelity Digital Asset Services are both New York-regulated entities, and Anchorage Digital holds a federal charter. That charter status is what lets a sponsor call them a "qualified custodian" in a prospectus.
Who holds what
| Custodian | Funds | Entity type | Notes |
|---|---|---|---|
| Coinbase Custody Trust Company | GBTC, BTC, BITB, BTCO, EZBC, BTCW, BRRR (with BitGo), IBIT (with Anchorage) | New York limited purpose trust company | Appears in nine of the twelve US spot Bitcoin ETP arrangements. |
| Fidelity Digital Asset Services | FBTC | New York limited liability trust company | Affiliated with the fund sponsor — the only self-custody arrangement among major funds. |
| Anchorage Digital Bank | IBIT (secondary) | Federally chartered digital asset bank | Added by BlackRock to diversify away from a single custodian. |
| BitGo Trust Company | BRRR (with Coinbase) | South Dakota trust company | Dual-custodian structure. |
| Multiple / undisclosed split | ARKB, HODL | Varies | Issuers disclose multi-custodian arrangements without always naming the split. |
Compiled from fund prospectuses and issuer disclosures. Custody arrangements change — issuers announce additions and replacements in SEC filings. Fund-by-fund detail on the spot Bitcoin ETF list.
Cold storage in practice
"Cold storage" gets used so loosely it has almost stopped meaning anything. In an institutional context it refers to a specific operational discipline: private keys are generated and kept on hardware that has never been connected to a network and never will be.
Moving coins out therefore requires a physical, multi-person process — geographically separated key shares, multiple authorised signers, a transaction constructed offline and carried to the signing environment on removable media, then broadcast from a separate connected system. It is slow by design. Speed is the enemy here.
This is also why creation and redemption settles on a schedule rather than instantly, and why the July 2025 shift to in-kind orders mattered operationally as well as financially — see creation and redemption.
The concentration problem, stated fairly
One custodian appears in nine of twelve arrangements, covering the majority of US regulated bitcoin fund assets. That is worth stating plainly, and it is worth not overstating.
The genuine concern:
- A single operational failure, insolvency or security incident would touch most of the category at once.
- Assets are segregated and held in each trust's name, which should keep them outside a custodian's estate — but "should" means litigation and delay, not instant access.
- The same firm is a major exchange operator and a market participant, which means related-party questions that a pure custody bank would not raise.
The mitigating reality:
- Segregation, audit and reporting obligations are contractual and regulated, not promises.
- Sponsors are diversifying. BlackRock added Anchorage Digital for IBIT; CoinShares runs Coinbase and BitGo in parallel.
- The pool of institutions genuinely capable of this work is small, so concentration is partly a symptom of a young market rather than negligence by sponsors.
Self-custody removes the custodian entirely
The only way to hold bitcoin with no third party holding the keys is to hold them yourself. Buy on a licensed exchange and withdraw to hardware you control — CEX.IO is registered with FinCEN as a money services business, holds money transmitter licences across US states under NMLS ID 1804170, and is authorised in Gibraltar as a DLT provider.
The self-custody exception
Fidelity is the structural outlier. FBTC's bitcoin sits with Fidelity Digital Asset Services, a New York-chartered trust company inside the same corporate group as the fund's sponsor.
That removes an external counterparty and puts custody under a firm that has run institutional asset servicing for decades. It also creates an affiliated relationship: the sponsor and the custodian answer to the same parent, so the independent check a third-party custodian provides is weaker by construction.
Neither arrangement is obviously superior. Third-party custody gives you separation of duties and concentration risk. Self-custody gives you vertical control and related-party exposure. Which you prefer depends on which failure mode worries you more — a discussion we continue in the FBTC profile.
What the insurance actually covers
Issuers reference insurance frequently and the detail is usually left in a footnote. Three things are worth knowing.
It covers theft and certain operational failures — commercial crime and cyber policies against external compromise, insider theft and specified errors. Limits are far below total assets: no insurer writes a policy covering tens of billions of dollars of bitcoin, so cover is a fraction of holdings, sized to plausible incident scenarios rather than total loss. And nothing insures market risk. If bitcoin halves, no policy responds. Crypto held in an ETP is not FDIC or SIPC insured against a fall in value.
For what it is worth, SIPC protection at your broker covers the failure of the broker — it protects your shares as securities, not the value of the bitcoin behind them.
How to verify a fund's holdings yourself
- Read the custody section of the prospectus
It names the custodian, describes segregation, and sets out the standard of care. It is dry and it is the primary source.
- Check quarterly SEC filings
These trusts file Forms 10-Q and 10-K on EDGAR with audited or reviewed statements of bitcoin held, share counts and expenses. This is the strongest routine evidence available.
- Look for published addresses
Bitwise publishes the on-chain addresses for BITB, so anyone can verify balances directly against the blockchain. Most issuers do not, on security grounds.
- Compare basket data to reported holdings
Issuers publish basket composition daily — IBIT's basket held 22.65 bitcoins on 2 September 2026. Multiplying out against shares outstanding should reconcile with reported totals.
Our take from the desk
Custody is where we would push a sponsor hardest if we could ask one question. Not "is the bitcoin there" — the filings and the arbitrage answer that adequately. The better question is what happens operationally in the seventy-two hours after a custodian is unable to sign, because that is the scenario where segregation on paper meets process in reality. We have not seen an issuer describe that in useful detail, and we think investors would be better served if one did.