Stablecoin Custody: Models for Settlement Balances

Stablecoin custody is no longer a back-office afterthought: as regulated stablecoins enter institutional settlement workflows, wealth managers and family offices must understand exactly how client balances are held, segregated, and protected under MiCA and national frameworks.

Why Stablecoin Custody Matters for Institutional Allocators

The rise of euro- and dollar-denominated stablecoins as settlement instruments has shifted custody from a purely technical question to a fiduciary one. When a family office or wealth manager holds stablecoin balances on behalf of clients—even transiently during a tokenised asset transaction—they assume responsibility for safekeeping those assets with the same rigour applied to securities. Failures in crypto custody have historically been catastrophic and largely irreversible: lost private keys, exchange insolvencies, and commingled reserves have wiped out billions. Regulators have taken note. The EU's Markets in Crypto-Assets Regulation (MiCA) and guidance from ESMA and national authorities such as Liechtenstein's FMA now impose explicit custody obligations on issuers and service providers, making a structured due-diligence approach to stablecoin custody non-negotiable for any institution operating in this space.

The Three Core Custody Models Explained

Institutional participants typically encounter three distinct models when evaluating stablecoin custody. First, self-custody: the institution holds private keys directly, using hardware security modules (HSMs) or multi-party computation (MPC) wallets. This maximises control but demands robust internal key-management policies, disaster-recovery procedures, and qualified staff—burdens few family offices can absorb without specialist infrastructure. Second, qualified third-party custody: a regulated crypto-asset service provider (CASP) or bank holds assets on the client's behalf in segregated wallets, providing insurance, audit reports, and regulatory oversight. This is the dominant model for institutional adoption under MiCA. Third, exchange or issuer omnibus custody: assets sit in a pooled wallet at an exchange or stablecoin issuer—convenient but operationally and counterparty-risk-laden. Each model carries different risk profiles across counterparty exposure, operational resilience, regulatory compliance, and cost.

MiCA and ESMA: The Regulatory Baseline for Stablecoin Custody

MiCA, which reached full application in December 2024, establishes the EU-wide framework governing custody of e-money tokens (EMTs) and asset-referenced tokens (ARTs)—the two stablecoin categories most relevant to settlement use cases. Under MiCA Articles 70–76, CASPs providing custody services must segregate client crypto-assets from their own, maintain a register of positions per client, and implement appropriate safekeeping arrangements including cold-storage requirements for a defined proportion of assets. ESMA's technical standards and guidelines further specify operational resilience, conflict-of-interest management, and reporting obligations. Importantly, MiCA makes the CASP strictly liable for losses arising from malfunctions or hacks unless the provider can demonstrate the loss resulted from an external event beyond its reasonable control. This liability allocation is a critical point for wealth managers negotiating custody agreements and setting client expectations.

Liechtenstein's TVTG Framework and What It Adds

For allocators working with tokenised assets issued under Liechtenstein's Token and Trustworthy Technology Service Providers Act (TVTG), custody considerations extend beyond stablecoin balances to the broader digital-asset architecture. The TVTG establishes a civil-law property right in tokens, clarifying ownership in a way that benefits custody arrangements: the legal relationship between a token holder and their custodian is unambiguous and enforceable. Investhub leverages this framework for token issuance, meaning that stablecoin settlement balances used in TVTG-governed transactions sit within a legally coherent environment where the rights of the end investor are explicitly protected at the property-law level—a material advantage over purely contractual arrangements common in less-regulated jurisdictions. The FMA in Vaduz supervises TVTG service providers, adding an additional layer of oversight for due-diligence purposes.

Segregation, Reserve Backing, and Counterparty Risk Assessment

Safekeeping quality is not binary. Even within qualified third-party custody, wealth managers must stress-test three dimensions. Asset segregation: are client stablecoin balances held in individually identified wallets or pooled? MiCA requires individual segregation, but contractual terms and operational implementation vary—request and review the custodian's wallet architecture documentation. Reserve backing: for EMT-type stablecoins, MiCA mandates that reserve assets be fully backed, held in segregated accounts at credit institutions or invested in highly liquid low-risk instruments. Scrutinise the issuer's monthly attestation reports and auditor identity. Counterparty risk: the custodian itself carries credit and operational risk. Assess their capital adequacy, insurance coverage (including crime and cyber policies), regulatory authorisation status, and the jurisdictional robustness of insolvency protections. A custodian authorised under MiCA in an EU jurisdiction offers materially stronger protections than an offshore equivalent.

Operational Due Diligence: A Checklist for Wealth Managers

Before onboarding any stablecoin custody solution, a structured operational due diligence (ODD) process should address the following: Regulatory status—confirm the custodian holds a valid CASP authorisation under MiCA or an equivalent national licence (e.g., TVTG registration in Liechtenstein). Key management—understand the signing architecture (single-key, multi-sig, MPC) and the procedures for key rotation and recovery. Segregation proof—request wallet address-level evidence of segregation and reconcile against client statements. Insurance—verify the scope, limits, and exclusions of any custodial insurance; note that most policies exclude protocol-level failures. Business continuity—review the custodian's disaster recovery and succession plan, including what happens to client assets in an insolvency scenario. Reporting cadence—ensure you receive regular position reports, transaction confirmations, and access to audit logs. Pricing transparency—understand all fee layers, including gas-cost pass-throughs.

Custody in the Context of Stablecoin Settlement Workflows

In a tokenised securities transaction facilitated by a platform like Investhub, stablecoin balances function as the settlement leg: they represent immediate, programmable value transfer between buyer and seller. The custody of these balances during the settlement window—even if measured in minutes or hours—is a material operational risk point. Atomic delivery-versus-payment (DvP) structures, where the token transfer and stablecoin payment are cryptographically linked, reduce but do not eliminate the window of custodial exposure. Wealth managers should understand which party holds custody of the stablecoin between trade execution and final settlement, how failed transactions are unwound, and whether the custodian participates in on-chain settlement directly or via an intermediary. Clarity on these mechanics belongs in the legal documentation governing each transaction, not assumed from platform marketing materials.

Stablecoin custody is a foundational risk decision, not a vendor selection exercise. As MiCA reshapes the regulatory landscape and tokenised settlement becomes operationally mainstream, wealth managers and family offices owe their clients a rigorous, documented approach to how stablecoin balances are held, segregated, and insured. Investhub's settlement infrastructure is designed around regulated issuers and TVTG-governed token structures, offering advisors a compliance-coherent starting point. If you are conducting due diligence on a stablecoin-enabled settlement workflow, we invite you to speak with our team about the custody and safekeeping architecture underpinning transactions on the platform.