# Bitcoin Institutional Custody: Security, Risks, and Regulatory Challenges How BitGo's 2-of-3 multisig model addresses theft, loss, and regulatory threats in Bitcoin custody. - **Source:** [Stephan Livera Podcast](https://brifing.si/source/597843ae-8d51-4318-85aa-04c1d35f69c1) - **Published:** 2026-09-16 - **Topic:** [Finance](https://brifing.si/c/finance) - **Original article:** - **On Brifing:** https://brifing.si/s/8c464aac-5891-4501-82e8-52764f52cedf ## Institutional Bitcoin custody in 2026 BitGo operates as a US-regulated qualified custodian, offering both institutional and self-custody solutions. The company pioneered P2SH multisig in 2013 and maintains a 2-of-3 model for balanced security. Institutional security involves HSM-backed co-signing, open-source recovery paths, and multi-jurisdictional key storage. This approach addresses both operational risks and regulatory compliance needs in cryptocurrency custody. ## Why 2-of-3 multisig prevails BitGo's 2-of-3 multisig model protects against both theft and loss scenarios, unlike simpler setups. It balances security with recoverability, avoiding the pitfalls of vendor-locked MPC solutions for cold storage operations. The model has proven resilient since 2013, even as newer alternatives like MPC have emerged. This approach particularly suits institutional clients needing both security and operational flexibility. ## Political risks to Bitcoin holdings KYC requirements create honeypots of personal data, as seen when France tied names to Bitcoin amounts. The war on cash now extends to cryptocurrencies, raising confiscation risks reminiscent of EO 6102. Multi-jurisdictional key storage helps mitigate single-point regulatory failures. These threats remain part of the security calculus for large Bitcoin holders and custodians. ## Operational security challenges Humans remain the weakest link in operational security, despite technical safeguards. Retail users pay about 160 basis points for institutional-grade security through services like BitGo. The convenience of banks continues to attract users despite the benefits of self-custody. Even self-custody solutions aren't truly trustless, requiring careful implementation. ## Insurance limitations in custody Current insurance covers $5-7 billion against a $1.6 trillion Bitcoin market, creating significant coverage gaps. Bybit's losses demonstrated the importance of splitting wallets across multiple locations. Multi-custodian setups can introduce new failure modes despite seeming safer. Qualified custody provides legal protections that pure technical solutions lack. ## Regulatory adaptation strategies BitGo moved WBTC keys when US regulation appeared hostile, showing proactive jurisdictional planning. Public company status brings additional scrutiny but also regulatory compliance benefits. The balance between compliance and censorship resistance remains challenging. Quantum-resistant wallets already exist but adoption lags behind need. ## Comparative security models Multisig outperforms MPC for cold storage operations due to its recoverability features. 2-of-2 MPC models can't recover from key loss, creating operational risks. The market hasn't converged on a single optimal custody solution. Different institutional needs may require tailored combinations of these technologies. ## Future of Bitcoin custody Institutional adoption forces reevaluation of custody models beyond technical considerations. Regulatory pressures will continue shaping custody solutions as much as security needs. The tension between decentralization ideals and practical security requirements persists. Custody solutions must evolve to address both technical and political threat models. ## Sources covering this story - https://podcasters.spotify.com/pod/show/stephan-livera/episodes/Institutional-Custody--Multisig--the-War-on-Cash--Mike-Belshe-SLP773-e3osvr4 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._