Bitcoin Institutional Custody: Security, Risks, and Regulatory Challenges
How BitGo's 2-of-3 multisig model addresses theft, loss, and regulatory threats in Bitcoin custody.
1Institutional Bitcoin custody in 2026
BitGo operates as a US-regulated qualified custodian, offering both institutional and self-custody solutions. The company pioneered P2SH multisig in 2013 and maintains a 2-of-3 model for balanced security. Institutional security involves HSM-backed co-signing, open-source recovery paths, and multi-jurisdictional key storage. This approach addresses both operational risks and regulatory compliance needs in cryptocurrency custody.
2Why 2-of-3 multisig prevails
BitGo's 2-of-3 multisig model protects against both theft and loss scenarios, unlike simpler setups. It balances security with recoverability, avoiding the pitfalls of vendor-locked MPC solutions for cold storage operations. The model has proven resilient since 2013, even as newer alternatives like MPC have emerged. This approach particularly suits institutional clients needing both security and operational flexibility.
3Political risks to Bitcoin holdings
KYC requirements create honeypots of personal data, as seen when France tied names to Bitcoin amounts. The war on cash now extends to cryptocurrencies, raising confiscation risks reminiscent of EO 6102. Multi-jurisdictional key storage helps mitigate single-point regulatory failures. These threats remain part of the security calculus for large Bitcoin holders and custodians.
4Operational security challenges
Humans remain the weakest link in operational security, despite technical safeguards. Retail users pay about 160 basis points for institutional-grade security through services like BitGo. The convenience of banks continues to attract users despite the benefits of self-custody. Even self-custody solutions aren't truly trustless, requiring careful implementation.
5Insurance limitations in custody
Current insurance covers $5-7 billion against a $1.6 trillion Bitcoin market, creating significant coverage gaps. Bybit's losses demonstrated the importance of splitting wallets across multiple locations. Multi-custodian setups can introduce new failure modes despite seeming safer. Qualified custody provides legal protections that pure technical solutions lack.
6Regulatory adaptation strategies
BitGo moved WBTC keys when US regulation appeared hostile, showing proactive jurisdictional planning. Public company status brings additional scrutiny but also regulatory compliance benefits. The balance between compliance and censorship resistance remains challenging. Quantum-resistant wallets already exist but adoption lags behind need.
7Comparative security models
Multisig outperforms MPC for cold storage operations due to its recoverability features. 2-of-2 MPC models can't recover from key loss, creating operational risks. The market hasn't converged on a single optimal custody solution. Different institutional needs may require tailored combinations of these technologies.
8Future of Bitcoin custody
Institutional adoption forces reevaluation of custody models beyond technical considerations. Regulatory pressures will continue shaping custody solutions as much as security needs. The tension between decentralization ideals and practical security requirements persists. Custody solutions must evolve to address both technical and political threat models.