Custody is the safekeeping of the real-world asset that backs a token, performed by a qualified custodian or vault. The quality and verifiability of custody determine whether the backing is real, because the token is only as trustworthy as the arrangement behind it.
Without segregation and bankruptcy remoteness, token holders are unsecured creditors of the issuer, not beneficial owners of the underlying asset.
Why it matters
Custody is what makes the backing real, so opaque or single-point custody is a design risk we surface before any other structural question. The token is only as trustworthy as the arrangement behind it.
For US-domiciled designs targeting regulated markets, a qualified custodian carries specific obligations. Under SEC Rule 206(4)-2, it must keep client assets in a separate account under the client's name, send statements directly to clients, and submit to an annual surprise examination. These are structural protections that prevent commingling with the issuer's own assets, the failure mode that destroys holder value in an insolvency.
Design consequence
The data interface between custodian and proof-of-reserves is a frequently underspecified dependency. The custodian must provide balance data in a format the oracle can consume, on a cadence that matches the mint gate. Custodians on legacy reporting infrastructure may not support API-level feeds at sub-daily cadence. That is not a quick fix; it can require a custodian change, a third-party aggregator, or an accepted cadence compromise that widens the vulnerability window.
For physical assets like gold, real estate, or commodities, custody includes independent appraisal, insurance, and chain-of-custody documentation. A gold-backed token backed by an undisclosed vault with no independent audit is not backed in any enforceable sense, it is an unsupported assertion.
How we approach it
The single most important structural decision is segregation combined with bankruptcy remoteness. The underlying asset must be held in a structure where a bankruptcy of the operating company does not give its creditors a claim on the custodied assets. This is typically achieved through a special purpose vehicle that holds the asset, issues the tokens, and is structured to be bankruptcy-remote from the parent issuer.
See Tokenomics Design for how this applies in practice.
More in Real-World Assets (RWA)
Know the terms but not sure how they apply to your project? That is what an engagement is for. We design, document, and stress-test the whole token economy inside the Tokenomics Data Room.
80+ projects advised. Complete tokenomics in 4 to 6 weeks.