Skip to content

Crypto Custody & Security

Wallet key custody, hot-cold split, withdrawal whitelisting, multi-signature approval, HSM integration, Shamir secret sharing, MPC custody.

Skills
29
Hand off
187
Handed off from
181

Hands off most often to

  1. Global Market Integration18
  2. Broker Integration11
  3. Regulatory Compliance11
  4. Risk Management11
  5. Deployment & Ops8
  6. Data Management1

Brokers, venues and frameworks named here

Index

All 29 skills in this domain, alphabetically. Hover a row for its situation; open it for the full playbook.

A

air-gapped-signing-workflow-for-cold-storageUse when moving crypto out of cold storage and the signing key must never touch an internet-connected machine; models the round trip where an intent crosses a QR or SD gap and the offline vault re-derives the approval display itself.air-gap

C

cold-storage-geographic-distribution-strategyUse when auditing how M-of-N key shards are spread across facilities, countries and legal regimes, flagging both single points of failure and quorum concentrations. Generating the shards is shamir-secret-sharing-for-key-backup.cold-storagecross-chain-address-reuse-privacy-riskUse when auditing whether reusing the same address across chains such as Ethereum, Arbitrum, Solana and Bitcoin lets an observer link a desk's activity, scoring the deanonymisation exposure of a wallet registry you supply.address-reusecrypto-wallet-key-custody-securityUse when a trading bot can reach private keys or withdrawal-enabled exchange credentials, so a compromise means irreversible loss; bounds the damage by auditing the declared key scope, permissions and separation.custodial-vs-non-custodial-tradeoff-assessmentUse when choosing between custodial exchange execution, off-exchange settlement and non-custodial on-chain execution, disqualifying architectures that breach the mandate's key-control and counterparty-exposure constraints.cex-vs-dexcustody-solution-uptime-and-liveness-guaranteesUse when strategies depend on a custody provider being able to sign right now, tracking API uptime against the contractual target, the MPC signing quorum with warning at zero redundancy, and P99 signing latency.liveness-guaranteescustody-solution-vendor-due-diligence-checklistUse when evaluating or periodically reviewing a digital asset custodian, scoring qualified custodian category, SOC 2 Type II scope, bankruptcy remoteness and insurance relative to assets held.qualified-custodian

E

employee-offboarding-procedure-for-custody-accessUse when someone with digital asset custody access leaves, scoring single sign-on revocation, exchange API key destruction, custody portal removal and signing-key rotation into an auditable attestation record.custody-securityexchange-proof-of-reserves-verificationUse when deciding how much capital may sit on an exchange that publishes a Merkle sum tree proof of reserves; rehashes your inclusion path to the declared root and audits the branch for negative balances.merkle-sum-treeexchange-withdrawal-whitelist-enforcementUse when a bot or treasury job can move crypto off an exchange without a human, binding each request to an allowlisted asset, network, address and memo, with a cool-off lock on newly added destinations.address-allowlist

H

hardware-security-module-hsm-for-signing-keysUse when irreversible on-chain transfers are authorised with keys inside a PKCS#11 HSM, auditing the non-exportability attributes that prove the key cannot leave, and enforcing signing authorisation and rate limits.pkcs11hot-cold-wallet-split-for-trading-botsUse when deciding how much crypto capital should be reachable by the trading key right now, proposing idempotent sweep and refill transfers that net in-flight movements and respect a hot-wallet ceiling.hot-wallet

I

insurance-coverage-assessment-for-custodied-cryptoUse when sizing how much capital may sit with a custodian, bracketing what its insurance programme would actually return between an isolated-loss upper bound and a pro-rata pooled-loss lower bound.custody-audit

K

key-rotation-schedule-for-hot-wallet-keysUse when an online signing key or exchange API credential needs a defensible answer to whether it should still be in service, from age, signature count and signed volume, and when the old one may be destroyed.hot-wallet

M

multi-party-computation-mpc-custody-solutionsUse when a key is split across independent parties by a threshold signature scheme, validating the t-of-N shard roster, rejecting out-of-roster or cloned attestations and enforcing key epochs. It authorises; it does not sign.custodymulti-signature-approval-for-large-transfersUse when a large crypto transfer needs independent human authorisation before it proceeds, binding each approval to a hash of the exact payload reviewed and counting only registered signers across distinct devices.transfer-approval

O

on-chain-transaction-monitoring-for-anomaliesUse when screening live or pending EVM transactions from custody wallets before broadcast, checking sanctioned-address interaction, list staleness, high-value transfer spikes and abnormal gas patterns.kyt-compliance

P

phishing-resistant-authentication-for-custody-accessUse when the login in front of a custody portal or key-management console must resist adversary-in-the-middle phishing, enforcing WebAuthn origin and relying-party binding with single-use server-issued challenges.fido2post-incident-forensics-for-suspected-key-compromiseUse when a signing key or KMS credential is suspected of having leaked and you need a defensible reconstruction of what it did, correlating access logs against a policy allowlist and separating success from rejected attempts.crypto-custody

R

recovery-plan-for-lost-or-compromised-keysUse when auditing in peacetime whether the key-loss and key-compromise recovery plan would actually work, checking backup integrity, Shamir shard sufficiency, quorum distribution and emergency sweep readiness.compromised-keysregulatory-custody-requirements-by-jurisdictionUse when a client-asset or crypto custody arrangement must answer to a named regulator and every finding needs its citation, covering the Advisers Act custody rule and its regional counterparts.sec-custody-rule

S

segregation-of-duties-for-custody-operationsUse when a custody transfer release must require more than one person in a form an auditor can read: maker-checker, a role-conflict matrix at registration, and a self-approval block that surviving a role change cannot bypass.maker-checkershamir-secret-sharing-for-key-backupUse when key material that unlocks funds must survive the loss of any single custodian or device while no single holder can spend, splitting and reconstructing over a prime field large enough for a 256-bit key. Not SLIP-0039 compatible.ssssmart-contract-approval-scope-minimizationUse when a bot grants ERC-20 spending rights to a DeFi protocol, refusing unlimited allowances and sizing each approval to the exact transaction notional, with expiring Permit2 allowances preferred where available.erc-20-allowancesmart-contract-audit-requirements-before-defi-integrationUse before routing capital through a DeFi protocol you do not control, checking that independent audits cover the code actually deployed at that address and that critical findings were remediated. It scores assertions, it finds no bugs.defi-integration

T

test-transaction-verification-before-large-transfersUse before releasing a high-value crypto transfer, requiring a dust test bound to the same recipient, chain and amount plus an out-of-band counterparty receipt, so a wrong address costs cents rather than the notional.test-transactionthird-party-custody-audit-report-review-cadenceUse when a firm must answer on a dated basis what audit evidence it holds on each custodian and how stale it is, tracking SOC 1 and SOC 2 Type II coverage against a review cadence and validating auditor opinions.audit

V

vendor-lock-in-risk-for-proprietary-custody-formatsUse when onboarding a custodian or planning a migration, scoring key format portability across BIP-39, SLIP-0039 and BIP-32 against proprietary MPC or HSM blobs, and estimating the exit cost.vendor-lock-in

W

withdrawal-velocity-limits-and-anomaly-detectionUse when a system can move crypto out of a hot wallet without per-transfer human approval, scoring each request against rolling per-account and global velocity caps, a size baseline and destination address age.custody
Search the whole catalog