How Bitcoin ETF Custody Actually Works (Coinbase, Fidelity, BitGo)

TL;DR. A spot Bitcoin ETF outsources the actual holding of bitcoin to a qualified custodian — for most US funds that is Coinbase Custody Trust Co., a New York-chartered trust company. Coins sit in offline (cold) wallets with multi-signature key schemes, segregated per fund, with insurance against custodian loss (not against price drops). The custody architecture is genuinely robust, but it is not the same as self-custody, and "proof of reserves" verifies less than its name suggests.

The legal stack: trust, sponsor, custodian

A spot Bitcoin ETF is structured as a grantor trust under US law. Three roles matter:

• Sponsor / issuer. The fund manager (BlackRock, Fidelity, etc.) that markets the product, files with the SEC, and earns the expense ratio. The sponsor never touches the coins.
• Custodian. A regulated entity that holds the bitcoin, controls private keys, and processes deposits and withdrawals on the sponsor's instructions.
• Authorised participants. Large broker-dealers (Jane Street, Virtu, Cantor Fitzgerald, JP Morgan) who deliver cash or coin to the trust in exchange for new shares — and vice versa. See our explainer on APs.

This separation matters legally: even if the sponsor goes bankrupt, the trust's bitcoin is held in a bankruptcy-remote structure and belongs to shareholders, not to the sponsor's creditors.

Who actually custodies US spot Bitcoin ETFs?

Custody is highly concentrated. As of the most recent prospectus filings:

ETF	Ticker	Primary custodian
iShares Bitcoin Trust (BlackRock)	IBIT	Coinbase Custody Trust Co.
Fidelity Wise Origin Bitcoin Fund	FBTC	Fidelity Digital Assets
ARK 21Shares Bitcoin ETF	ARKB	Coinbase Custody Trust Co.
Bitwise Bitcoin ETF	BITB	Coinbase Custody Trust Co.
Grayscale Bitcoin Trust	GBTC	Coinbase Custody Trust Co.
Franklin Bitcoin ETF	EZBC	Coinbase Custody Trust Co.
Invesco Galaxy Bitcoin ETF	BTCO	Coinbase Custody Trust Co.
VanEck Bitcoin Trust	HODL	Gemini Trust Company
WisdomTree Bitcoin Fund	BTCW	Coinbase Custody Trust Co.

Roughly 80% of US spot ETF AUM sits at one custodian. That concentration is one of the most-discussed structural risks in the category — covered later in this article.

How the coins are actually held

The headline answer: cold storage, with multi-signature key schemes, segregated per client.

Cold storage

"Cold" means the private keys are kept on hardware that is never connected to the internet. The hardware is stored inside Class III SCIF-style vaults (geographically distributed, physically and electronically shielded). To move coins, hardware must be retrieved, signing performed offline, and the signed transaction broadcast separately.

Coinbase Custody publishes that ~99% of customer funds are in cold storage; the remaining ~1% sits in a "hot" omnibus wallet to service same-day operational needs. Spot ETF holdings are entirely cold.

Multi-signature schemes

Each cold-storage address is governed by an n-of-m multisignature script. A typical setup might require, say, 3 of 5 signatures from a quorum of officers — each holding a key on a separate hardware device, in a separate location, with separate access controls. No single insider can move funds.

Some custodians use Shamir's Secret Sharing or threshold signatures (TSS / MPC) for the same property without the multisig footprint on-chain.

Segregation

Each fund's bitcoin is held in dedicated addresses, separate from other clients, the custodian's own balance sheet, and from any commingled pool. The IBIT prospectus, for example, states explicitly that IBIT's coins are held in identifiable bitcoin addresses on the bitcoin blockchain.

Concretely: anyone with a block explorer can look at the publicly known IBIT custody addresses and watch the balance change as the fund's flows accumulate. This is one of the cleaner real-time auditability mechanisms in traditional finance.

Insurance: what's actually covered

Custody insurance is the most-misunderstood part of the ETF wrapper. Two flavours, very different scope:

• Custodian's commercial crime / specie policy. Covers loss of bitcoin from theft, malicious insider activity, physical destruction of key material, or computer fraud. Coinbase Custody discloses a $320 million coverage limit through a Lloyd's syndicate; Fidelity Digital Assets carries policies through Marsh.
• SIPC / FDIC. Neither covers bitcoin. SIPC protects securities accounts up to $500k; a bitcoin ETF share is a security and is covered, but the underlying bitcoin is not. There is no FDIC-equivalent for crypto.

What insurance does not cover:

• A drop in bitcoin's price.
• A fork or chain split where the custodian fails to claim the airdropped coins.
• The sponsor going bankrupt (this is handled by trust structure, not insurance).
• Losses exceeding the policy cap. $320M / ~$70bn of IBIT AUM is well under 1% nominal coverage in a worst-case loss.

In other words, insurance is a meaningful backstop for operational theft, not a wholesale guarantee against asset risk.

Creation and redemption: how coins move in and out

Authorised participants don't deliver bitcoin to the trust in most US spot ETFs — they deliver cash. The trust then uses the cash to buy bitcoin on a regulated venue and sweep it to the custodian. The flow is:

1. AP delivers, say, $50 million in USD to the trust (creation order).
2. Trust buys ~770 BTC on the open market via Coinbase Prime or similar.
3. Custodian sweeps the BTC into the trust's segregated cold-storage addresses.
4. Trust mints new ETF shares and delivers them to the AP.

The same flow runs in reverse for redemptions. This "cash creation" model was a deliberate SEC choice — it avoids requiring APs to operate bitcoin wallets, but it does mean the trust takes price-execution risk between order and fill.

"Proof of reserves": what it does and doesn't verify

Some custodians publish on-chain proof of reserves. This is genuinely useful, but the term is overused. Here's what's actually demonstrated:

• ✅ Existence. A signed message from the address proves the custodian controls those coins.
• ✅ Balance match. If the on-chain balance equals what the trust reports holding, the assets exist.
• ❌ No double-pledging. Nothing on-chain prevents the same coins being pledged as collateral elsewhere — proof of reserves does not equal proof of liabilities.
• ❌ Live ownership. A signature today doesn't prove the keys won't be lost or compromised tomorrow.

For an ETF this is less of an issue than for an unregulated exchange, because the custodian is also subject to a regulator (NYDFS for Coinbase Trust, NY DFS for Gemini Trust, OCC limited-purpose for Fidelity Digital Assets) and an independent annual audit. But "proof of reserves" alone isn't a silver bullet — the audit and the regulator are doing the heavy lifting.

The real structural risks (in order of magnitude)

1. Custodian concentration

One custodian holding 80% of category AUM is a systemic exposure. Coinbase Custody is a New York trust company, separately capitalised from Coinbase Inc., with bankruptcy-remote status — but a catastrophic operational failure there (key compromise, regulatory enforcement, geopolitical action) would touch most spot ETFs simultaneously.

This is the single risk most worth tracking, and is part of why funds like VanEck HODL deliberately chose a different custodian.

2. Fork handling

If bitcoin forks and a meaningful chain emerges (cf. Bitcoin Cash in 2017), the ETF must decide which side to claim and whether to distribute the airdrop. Prospectuses typically say "the sponsor decides at its discretion." That is real optionality the holder doesn't have.

3. Cyber and physical attack on the custodian

The mitigation is mature (cold storage, multisig, vaults), but the tail risk is not zero. The 2024 BitGo and 2025 Cobo cold-storage incidents both stayed within commercial limits, but a successful breach of a major Bitcoin ETF custodian would be a tail event for the whole asset class.

4. Regulatory action against the custodian

A frozen custodian or asset freeze under sanctions enforcement could lock holdings even though the keys are intact. This is theoretical but precedented in other asset classes.

How to verify a fund's custody for yourself

• Read the most recent prospectus (free on EDGAR via SEC.gov). Search for "Custodian" — the name and exact legal entity are disclosed.
• Check the latest 8-K / annual report for any reported custody incidents.
• Look up the custodian's state regulator status (NYDFS public registry for Coinbase Custody and Gemini, OCC for FDA).
• For ETFs that publish custody addresses, paste them into mempool.space and verify the balance matches the fund's reported holdings.

FAQ

Bottom line

Bitcoin ETF custody is a more sophisticated operation than retail crypto storage, with insurance, segregation, multisig and offline keys. The remaining risk is mostly about concentration: one custodian, one jurisdiction, one chain. If you understand and accept that exposure, the wrapper works as advertised. If you want diversification on custody, holding the asset in self-custody is the strongest available hedge.

Sources and further reading

• iShares Bitcoin Trust (IBIT) prospectus — sec.gov/Archives/edgar.
• Coinbase Custody Trust Company "Form of Custodial Services Agreement" — sec.gov.
• NYDFS, "Virtual Currency Business Activity License — Coinbase Custody Trust Co." public record.
• Internal: Bitcoin ETF vs Spot Bitcoin, Authorised Participants Explained.