Custody for tokenized assets means controlling the private keys that move tokens — and, separately, safeguarding the underlying real-world asset. Investors can hold tokens through a regulated custodian, a platform-managed wallet, an MPC wallet, a smart-contract account or their own self-custodial wallet. The right model depends on investor type, regulation, user experience and how much recovery support the issuer must provide.
Key takeaways
- Two custody layers: the underlying asset (property, T-bills, gold) and the token keys.
- Wallet models trade off control, compliance, UX and recovery.
- Institutional investors often require qualified custodians; retail investors expect app-like UX.
- Permissioned tokens add a safety net: agent recovery and forced transfers for lost keys.
Wallet models compared
| Model | Who holds keys | Pros | Cons | Typical users |
|---|---|---|---|---|
| Qualified custodian | Regulated custodian | Regulatory comfort, insurance | Cost, slower operations | Institutions, funds |
| Platform-managed (custodial) | Platform/issuer | Simple UX, easy recovery | Platform becomes custodian (regulatory implications) | Retail, first-time investors |
| MPC wallet | Key shares split across parties | No single point of failure, flexible policies | Vendor dependency | Banks, fintechs, institutions |
| Smart account (ERC-4337) | Programmable signers (passkeys, guardians) | Gasless, recovery, policies | Contract risk, infra dependency | Retail and SMEs |
| Self-custody | Investor | Full control | Loss risk, compliance burden on investor | Crypto-native, professional investors |
| Hardware wallets | Investor or company | Strong key security | Operational friction | Corporates, high-value holders |
What our projects used
- Real estate: platform-created investor wallets for simple onboarding. Case study.
- Tokenized deposits: bank-branded custodial, non-custodial and MPC wallets with DID-based access management. Case study.
- e-BL: platform-managed, software or hardware wallets per company and user, with role-based permissions. Case study.
- Loans: lender and investor wallets plus a loan escrow account. Case study.
Regulatory considerations
- Holding keys on behalf of investors may make you a custodian requiring a licence or partnership.
- Client-asset rules may require segregation, reconciliation and insurance.
- Wallets used for regulated tokens must be linked to verified identities. See KYC and on-chain identity.
Recovery and continuity
- Custodial/MPC: recovery through provider procedures.
- Smart accounts: social or institutional guardians.
- Self-custody: seed backups; for permissioned tokens, issuer recovery after re-verification.
- Business continuity: key ceremonies, geographic distribution, succession planning for corporate signers.
Wallet model by investor segment
| Segment | Recommended model | Why |
|---|---|---|
| Retail / first-time investors | Embedded custodial or smart-account wallets | Familiar login, recovery, no gas tokens |
| High-net-worth individuals | MPC wallets or custodian accounts | Security with convenience |
| Family offices / funds | Qualified custodian or institutional MPC, multisig | Governance, insurance, reporting |
| Corporates (trade documents) | Platform-managed, software or hardware wallets per user role | Role-based control |
| Banks’ customers | Bank-branded custodial wallets | Inside existing banking app and KYC |
Operational controls for platform-managed wallets
- Hardware security modules or MPC for key storage.
- Transaction policies (limits, allow-lists, approvals).
- Segregation of client and platform assets.
- Daily reconciliation of on-chain balances to client ledgers.
- Incident response and key-compromise procedures.
- Independent assurance (e.g. SOC reports) for custody operations.
Self-custody done right
When investors hold their own keys, help them succeed:
- Clear onboarding with backup guidance.
- Support for hardware wallets.
- Pre-transfer checks that explain eligibility failures.
- A documented recovery route via the issuer for permissioned tokens.
Frequently asked questions
Not necessarily. Many platforms provide custodial or embedded wallets so investors use a normal app login.
They address different risks. MPC removes single points of failure and supports policies; hardware wallets isolate keys physically. Institutions often combine them.
Properly segregated client assets should be protected, but this depends on jurisdiction and contracts. Permissioned tokens also allow re-issuance to new wallets.
An SPV, fund custodian, vault or bank — defined by the legal structure. See SPV structures.
If the token rules allow it and the new wallet is verified, yes; the platform registers the new wallet against the investor’s identity.
It depends on who controls key shares and can sign. Regulators look at control, not technology labels.
NUVZ is the RWA and Web3 engineering brand of ESS ENN Associates (est. 1993). Our team has designed and shipped tokenization platforms for real estate, education loans, solar PPAs, energy, carbon credits, bank deposits and trade documents. About us · Case studies
This article is for general information only and is not legal, tax or investment advice. Token standards evolve — always confirm the current status of an ERC at eips.ethereum.org and take advice from qualified counsel in each jurisdiction before issuing tokens.
