Asset segregation and bankruptcy protection constitute the single most consequential regulatory design choice for institutional crypto custody. When a custodian fails, the legal treatment of client assets determines whether those assets are returned to clients or absorbed into the custodian's general bankruptcy estate and distributed among all creditors. The collapses of FTX, Celsius Network, Voyager Digital, QuadrigaCX, and Mt. Gox collectively destroyed over $20 billion in customer value and demonstrated -- with devastating clarity -- that custody without enforceable segregation is indistinguishable from unsecured lending.
This section provides a regulator-grade comparative analysis of segregation models, property law frameworks, case study outcomes, and a recommended tiered framework for policymakers designing or evaluating crypto custody regimes across all 20 jurisdictions surveyed in this domain.
1. Global Landscape: Segregation Models
Jurisdictions have adopted fundamentally different approaches to segregating client crypto assets from custodian assets. These models can be classified into five archetypes, each with distinct legal foundations, operational requirements, and insolvency outcomes. The single most important distinction is between jurisdictions that codify statutory bankruptcy-remoteness for custodied crypto (so client assets are excluded from the estate by operation of law) and those that rely on operational segregation plus general trust/property/insolvency law (where the outcome depends on how assets are characterised and is not tested in a crypto-specific statute).
Model A: Statutory Trust
How it works: Client crypto assets are held under a trust (statutory or non-statutory) for the benefit of clients. The custodian acts as trustee. In insolvency, trust assets are legally ring-fenced from the custodian's estate and are not available to the custodian's general creditors. The trust obligation is imposed by regulation, not merely by contract.
Legal basis: Trust law (common law jurisdictions); regulatory mandate creating or requiring trust arrangements.
Jurisdictions using this model:
-
United Kingdom: The FCA's regime under draft CASS 17 requires that client cryptoassets held by authorised custodians be held under a non-statutory (bare) trust for the benefit of clients. The Financial Services and Markets Act 2000 (Cryptoassets) Regulations were made by Parliament on 4 February 2026, and the full safeguarding regime commences on 25 October 2027. The FCA permits both individually segregated and omnibus wallets, provided client assets are at all times held separately from the custodian's own cryptoassets, with daily reconciliations and discrepancies resolved within one business day.
-
Singapore: The Monetary Authority of Singapore (MAS) requires customer assets to be held in a trust account for the benefit of customers, segregated from the provider's own assets. Custodians must maintain distinct blockchain addresses for customer and firm assets. At least 90% of customer assets must be held in cold storage under the PS-G03 Consumer Protection Guidelines, and lending, staking or pledging of retail customer assets is prohibited.
-
Hong Kong: The Securities and Futures Commission (SFC) requires licensed virtual asset trading platforms to hold client assets on trust, through a wholly-owned subsidiary custody structure, segregated from the platform's own assets. Stablecoin reserves under the Stablecoins Ordinance (effective 1 August 2025) are completely segregated under a written trust and protected against creditor claims in all circumstances.
-
Australia: The Corporations Amendment (Digital Assets Framework) Act 2026 (Royal Assent 8 April 2026; commences 9 April 2027) requires Digital Asset Platform and Tokenised Custody Platform operators to hold tokens "on trust for or on behalf of" clients -- a statutory trust mechanism. ASIC's INFO 225 (October 2025) permits omnibus (pooled) holding. The detailed asset-holding standards under s 912BE that will fix the precise insolvency treatment are NOT VERIFIED because the legislative instruments have not yet been made.
What happens in insolvency: Trust assets are excluded from the custodian's bankruptcy estate. Clients recover their specific assets (or pro rata shares in omnibus arrangements) ahead of and separate from any claim by general creditors. This provides the strongest form of insolvency protection available under common law. In Australia the strength of this protection at the instrument level remains to be confirmed when the s 912BE standards are made.
Model B: Bankruptcy-Remote Statutory Segregation
How it works: Statute explicitly provides that client crypto assets held by a custodian in specified conditions are segregated from the custodian's bankruptcy estate. This is distinct from a trust model in that it relies on statutory insolvency/property provisions specific to crypto rather than (only) trust law. The segregation right is codified in legislation and applies automatically when the statutory conditions are met.
Legal basis: Insolvency/bankruptcy statutes (civil or common law) with specific crypto/token provisions.
Jurisdictions using this model:
-
Switzerland: The DLT Act (in force February-August 2021) introduced Articles 242a and 242b into the Debt Enforcement and Bankruptcy Act (DEBA). Article 242a provides that crypto assets held by a custodian can be segregated from the custodian's bankruptcy estate when three conditions are met: (1) the custodian has exclusive power of disposal over the assets; (2) the assets are readily available for the client at all times; and (3) the assets can be assigned to the client individually or pro rata in collective custody. Article 242b gives creditors a basis to claim access to data needed to identify and recover assets. The Banking Act (Article 16 No. 1bis) classifies properly segregated crypto assets as custody assets excluded from the bank's balance sheet. This statutory framework is the global benchmark for bankruptcy protection. Re-hypothecation voids the protection, and FINMA Guidance 01/2026 protects foreign custody only where supervision-plus-bankruptcy-protection equivalence is met.
-
Liechtenstein: Under the TVTG (Blockchain Act, in force 1 January 2020), tokens and TT keys held in trust or in the client's name are treated as third-party assets and segregated in the client's favour (Article 25 TVTG). On bankruptcy of a VT-Verwahrer (the unified custodian category, Art. 2(1)(n) TVTG, covering both tokens and VT keys) or a TT Protector, clients can have their tokens segregated (ausgesondert) from the estate under Insolvenzordnung (IO) Art. 41. The client's claim attaches to the token itself -- not merely a contractual restitution claim -- making it robust against the general creditor pool. Since MiCAR was taken into the EEA Agreement (24 June 2025), in-scope custody is also governed by MiCAR Article 75, with transition to MiCAR authorisation due by 1 July 2026. Liechtenstein sits alongside Switzerland as a top-tier European venue for bankruptcy-remote custody.
-
Japan: Under the Payment Services Act (PSA), customers of registered crypto asset exchange service providers (CAESPs) hold statutory preferential repayment rights (a beneficiary/preference right) over the operator's general creditors in insolvency, specifically for segregated crypto and "Redemption Guarantee Crypto Assets". Customer fiat must additionally be held in trust with a trust bank/trust company. The 95% cold storage mandate and 100% hot-wallet own-asset backing further reinforce the segregation regime, producing strong bankruptcy-remoteness (FTX-affiliate customers in Japan recovered relatively quickly). A proposed FIEA migration (Cabinet bill 10 April 2026) would move crypto toward a securities-style regime.
-
Bermuda: The Digital Asset Business Act 2018 (DABA), section 18(4), statutorily provides that a custodied client digital asset is held for the client, is not property of the licensee, and is "not subject to the claims of creditors of the licensed undertaking". The Custody of Client Assets Rules 2025 (in force 12 February 2025) add a rules-based pari-passu insolvency waterfall: on a pooling event, client-account assets are pooled and distributed pari passu, surplus is returned to the licensee, and post-event receipts are placed in a new account rather than pooled. DABA s.18(1) separately mandates a financial backstop (surety bond, trust account, or indemnity insurance for clients). Bermuda's codified statutory creditor-exclusion is comparable to Switzerland's and exceeds most jurisdictions reliant on general trust law.
What happens in insolvency: Client assets are excluded from the bankruptcy estate by operation of statute (Switzerland, Liechtenstein, Bermuda) or carry statutory priority (Japan). In Switzerland this applies to both individually segregated and collectively held (omnibus) crypto where each client's pro rata share is identifiable; in Bermuda the Custody Rules 2025 prescribe an explicit pooling-event waterfall; in Liechtenstein the client's claim attaches to the token itself; in Japan customers hold preferential claims over general creditors.
Model C: Omnibus with Record-Keeping (Operational Segregation)
How it works: Client crypto assets may be pooled in omnibus wallets, but the custodian must maintain detailed internal records identifying each client's beneficial interest and pro rata share. On-chain separation is required between client and firm assets, but individual client-level on-chain segregation is not mandated. The custodian must have procedures for prompt return of client assets. Insolvency treatment depends on the interaction between the regulation and the relevant domestic insolvency/property law.
Legal basis: EU-level regulation (MiCA) with insolvency treatment determined principally by national law.
Jurisdictions using this model:
-
European Union (MiCA): Under Articles 70 and 75 of MiCA (Regulation (EU) 2023/1114), custody CASPs must ensure on-chain segregation of client crypto assets from the CASP's own assets (held on separate DLT addresses) and maintain a register of positions per client. Use of client crypto assets for the CASP's own account is prohibited (Article 70). Article 75(7) requires segregation from the custodian's estate and procedures for prompt return of crypto-assets, including in CASP insolvency. Both omnibus and individual custody are permitted, but each client's share must be determinable at any time. Client fiat must be placed with a credit institution or central bank by the next business day, and quarterly client statements are the minimum.
- Source: Freshfields -- Digital Asset Protection Under MiCA
- Source: Oxford Academic -- Crypto Custody (Capital Markets Law Journal)
Critical limitation: MiCA does not fully harmonize insolvency law. Article 75(7) operates "in accordance with applicable law", so the practical enforceability of segregation against a CASP's estate still depends on the national insolvency law of the relevant member state. Omnibus clients also remain exposed to co-mingling risk vis-a-vis other clients if the custodian's holdings are insufficient to cover all client claims.
-
France: France's national DASP/PSAN regime under the PACTE Law is transitioning to MiCA CASP authorization (full transition by 1 July 2026). Client digital assets must be segregated from the DASP's own assets at all times, client assets must be identifiable and separable from the custodian's estate in insolvency, and DASPs are prohibited from using client assets without express prior consent. Under MiCA, on-DLT segregation and prompt return (Article 75) apply, with AMF and ACPR sharing supervision.
-
Germany: Germany has required BaFin licensing for crypto custody (Kryptoverwahrgeschaeft) since 1 January 2020 under KWG. Section 26b KWG requires customers' crypto-assets and private keys to be kept separate from the custodian's own, with each customer's share determinable at any time in omnibus custody. MiCA Article 75(7) plus Section 46i KWG and Section 45 KMAG deem custodied crypto to belong to the customer, so creditors of an insolvent CASP have no recourse to client crypto-assets -- a materially stronger outcome than a generic Model C. Germany completed its shortened 12-month MiCA grandfathering on 31 December 2025 and leads the EU with 53 authorised CASPs (April 2026).
-
Luxembourg: Luxembourg regulates custody principally under directly-applicable MiCAR (CSSF designated competent authority by the Law of 6 February 2025). MiCAR Article 75(7) requires segregation of clients' crypto-asset holdings from the CASP's own, clear identification of the means of access (keys), and a register of positions per client; client crypto-assets are legally segregated from the CASP's estate "in accordance with applicable law", so creditors have no recourse, in particular in insolvency. Because this relies on national insolvency/property law rather than a stand-alone statutory crypto-segregation regime, enforceability against a Luxembourg insolvency estate is less codified than Switzerland's statutory model. Luxembourg's distinctive Blockchain Laws I-IV (control-agent model) and its fund-custody/depositary ecosystem nonetheless make it a leading EU venue.
What happens in insolvency: Varies. In Germany the combination of Section 46i KWG / Section 45 KMAG with MiCA Article 75(7) excludes client crypto from the estate. In France client assets must be identifiable and separable. In Luxembourg and the EU generally, the outcome turns on national insolvency law, which is more codified in some member states than others -- the principal residual weakness of the MiCA model relative to the statutory regimes in Switzerland, Liechtenstein, and Bermuda.
Model D: Bank Deposit / Trust-Institution Protection Model
How it works: Crypto assets are held by banking or trust institutions subject to existing prudential, deposit-insurance, and (for trusts) fiduciary frameworks. Client holdings may be treated as custody assets excluded from the institution's balance sheet, or -- for fiat deposits -- benefit from bank deposit insurance. This model relies on the institution's existing regulatory capital, liquidity buffers, and resolution frameworks (supplemented, in some jurisdictions, by regulatory tiering of custodians) rather than crypto-specific bankruptcy-remoteness statutes.
Legal basis: Banking law, trust law, deposit insurance legislation, prudential regulation.
Jurisdictions using elements of this model:
-
United States: OCC-chartered national trust banks (e.g., Anchorage Digital Bank, Paxos, and -- newly chartered in 2025-2026 -- Ripple, BitGo, Fidelity Digital Assets, Coinbase) and state-chartered trust companies hold client crypto in a fiduciary capacity. The SEC's 30 September 2025 no-action letter and NYDFS's 30 September 2025 guidance now require segregation from the custodian's proprietary assets, preserve beneficial customer ownership through insolvency, and bar client assets from securing custodian obligations; the CFTC's December 2025 Digital Asset Collateral Pilot treats digital collateral as "customer property" under a CEA statutory trust. There is, however, no single statutory crypto bankruptcy-remoteness provision -- FTX, Celsius and Voyager showed that contract language determines ownership. The rescission of SAB 121 (via SAB 122, issued 23 January 2025, effective 30 January 2025) removed the on-balance-sheet liability requirement for custodied crypto and its associated capital charges.
-
Canada: Registered Crypto Trading Platforms (CTPs) hold client crypto separate from proprietary assets, with the client recorded as beneficial owner, and NI 81-102 requires segregation for public crypto funds. The Stablecoin Act (Bill C-15, Royal Assent 26 March 2026, not yet in force) provides that reserves are protected from creditor claims of both custodian and issuer. CIRO's four-tier Digital Asset Custody Framework (effective 3 February 2026) requires at least 80% of client crypto with Acceptable Third-party Custodians (dealer self-custody capped at 20%), explicitly designed "to avoid another QuadrigaCX".
-
South Korea: Under the Virtual Asset User Protection Act (VAUPA, effective 19 July 2024), customer KRW must be held with a licensed bank/trust company (banks are the sole eligible custodians of deposits, with bank deposit-insurance protection), and customer virtual assets must be held in dedicated wallets separate from the VASP's own, with at least 80% in cold storage. VASPs must "in effect possess" the entrusted assets and return them on demand. A standalone custody licence with dedicated bankruptcy-remoteness rules is only PROPOSED under the second-phase Digital Asset Basic Act (FSC review 17 March 2026) -- those dedicated-custody priority rules are NOT VERIFIED.
What happens in insolvency: For trust-structured custody (US trust banks, Canadian trust companies, Korean bank-held fiat), assets are generally excluded from the institution's estate or protected by deposit insurance. For crypto held outside a qualifying trust, treatment depends on the custody agreement and applicable insolvency law. None of these jurisdictions currently provides a stand-alone statutory crypto bankruptcy-remoteness guarantee equivalent to Switzerland's DEBA Articles 242a/b, Liechtenstein's TVTG Art. 25, or Bermuda's DABA s.18(4) -- though Canada's Stablecoin Act adds one for stablecoin reserves once in force.
Model E: Operational Segregation Under General / Bespoke Law (No Codified Crypto Bankruptcy-Remoteness)
How it works: A regulator mandates operational segregation of client crypto via licensing rules (distinct wallets, record-keeping, prohibitions on proprietary use), but there is no crypto-specific statute codifying bankruptcy-remoteness. The treatment of client crypto in custodian insolvency therefore depends on general trust, property, and insolvency law and on how the assets are characterised. Where no segregation regime exists at all, clients may be treated as unsecured creditors.
Jurisdictions using this model (regulated but not codified):
-
Cayman Islands: Since Phase Two licensing commenced (1 April 2025) under the VASP Act, custodians must segregate client virtual assets from proprietary assets in identifiable, segregated wallets (distinct blockchain addresses), with client fiat at a regulated bank. The regulatory architecture is designed so clients' assets remain separately identifiable and outside the custodian's insolvency estate, but there is no codified statutory crypto-segregation/bankruptcy-remoteness provision -- the outcome relies on the standard Cayman Companies Act plus common-law trust/property principles and cross-border jurisprudence. The February 2026 Market Conduct framework (MC-RSOG) added mandatory insurance and conduct standards.
-
Gibraltar: Under the bespoke DLT Provider regime (in force 1 January 2018), Principle 5 / Guidance Note 5 require custodial assets and monies to be segregated from the firm's own, held in distinct wallets/addresses, with record-keeping identifying each client's entitlement and fiat safeguarded at a regulated institution. There is, however, no crypto-specific statutory bankruptcy-remoteness provision (no equivalent to Switzerland's DEBA 242a); properly segregated client assets are intended to fall outside the firm's estate via trust/general insolvency law, but this is not codified in a crypto-specific statute -- the principal relative weakness versus the Swiss benchmark, compounded by Gibraltar's post-Brexit position outside MiCA.
-
Brazil: Under BCB Resolution 520 (in force 2 February 2026), SPSAVs must segregate client assets (fiat BRL and crypto) from firm assets at all times, demonstrable at the on-chain and key-management level, with no use of client assets for the firm's own operations. A codified statutory bankruptcy-remoteness provision is NOT VERIFIED; protection runs through mandatory segregation, non-delegable custodial responsibility, and the prohibition on use of client assets.
-
Bahrain: Under the CBB Crypto-Asset (CRA) Module, client assets are held in specially created, segregated accounts identified separately from the licensee's own (CRA-4.5.2), with a sub-custodian renunciation declaration (CRA-4.5.3) under which any sub-custodian renounces charges, set-off or claims, combined with the no-encumbrance/no-rehypothecation prohibition (CRA-8.1.6) and 1:1 holding (CRA-8.1.5). This ring-fencing rests on rulebook provisions rather than tested precedent or a codified bankruptcy-remoteness statute (no published case law -- NOT VERIFIED in court).
-
UAE: Across the multi-regulator model, VARA requires client-level segregation (each client's assets in separate wallets containing only that client's assets), permits only licensed "qualified custodians" (multi-sig or insured vault, audit trails, proof-of-reserves) "designed to protect assets in insolvency", and -- under the April 2026 Issuance Rulebook -- requires issuers to legally segregate Reserve Assets so they do not form part of the issuer's estate. ADGM requires client VAs held separately from the firm's own. The insolvency outcome rests on these segregation, qualified-custodian and proof-of-reserves requirements rather than a single codified crypto bankruptcy-remoteness statute.
-
Several emerging-market jurisdictions, and the United States prior to the 2025 reforms for non-bank, non-trust custodians, fall at the weakest end of this model, where general law governs and clients risk unsecured-creditor treatment if the custody agreement transferred ownership (as in the Celsius Earn Account ruling).
What happens in insolvency: Operational segregation materially improves the odds of asset return relative to no regime at all, and many of these jurisdictions intend client assets to fall outside the estate. But absent a codified crypto-specific bankruptcy-remoteness statute, the outcome depends on how the assets are characterised under general trust/property/insolvency law and is, as yet, largely untested in litigation. Where a custody agreement transfers ownership of crypto to the custodian, clients may be treated as unsecured creditors and recover slowly and partially.
2. Comparative Analysis: Jurisdiction-by-Jurisdiction
The following table summarizes the segregation model, legal basis, bankruptcy treatment, and relevant precedent for each of the 20 jurisdictions surveyed.
| Jurisdiction | Segregation Model | Legal Basis | Bankruptcy Treatment | Precedent / Notes |
|---|---|---|---|---|
| United States | D/E: Mixed (trust-based for banks/trusts; general law for others) | State trust law; federal Bankruptcy Code; SEC/NYDFS Sept 2025 guidance; CFTC pilot statutory trust; no unified federal crypto statute | Trust-held assets excluded; NYDFS guidance preserves beneficial ownership through insolvency; non-trust assets may be estate property per contract terms | FTX (2022); Celsius (2023); Voyager (2022) |
| Brazil | E: Operational segregation (BCB) | Law 14,478/2022; BCB Resolution 520; Instruction 701/2026 | Codified bankruptcy-remoteness NOT VERIFIED; protection via mandatory segregation + non-delegable responsibility | No major BCB-licensed custodian failure |
| Canada | D: Bank/trust protection + regulatory tiering | Provincial trust law; CSA notices; CIRO four-tier framework; OSFI guidelines; Stablecoin Act (enacted, not in force) | Trust company custody protected; Stablecoin Act protects reserves from creditor claims; exchange-held assets depend on registration | QuadrigaCX (2019) |
| Bermuda | B: Statutory bankruptcy-remote + pari-passu waterfall | DABA s.18(4) creditor-exclusion; Custody Rules 2025 pooling waterfall; DABA s.18(1) financial backstop | Client assets statutorily not subject to creditors' claims; pari-passu distribution on pooling event | No major BMA-licensed custodian failure; framework preventive |
| Cayman Islands | E: Operational segregation (identifiable wallets) | VASP Act (2024 Revision); Custody/VATP Rule; common-law trust/property + Companies Act | No codified statutory remoteness; assets intended outside estate via identifiable wallets + common law | No major CIMA-licensed custodian failure |
| Japan | B: Statutory priority + mandatory segregation | Payment Services Act; proposed FIEA migration | Customer statutory preferential repayment rights over general creditors; fiat held in trust; 95% cold + 100% hot backing | Mt. Gox (2014); Coincheck (2018) |
| Singapore | A: Trust + 90% cold storage | Payment Services Act (as amended 2024); MAS PS-G03/Notice PSN02 | Customer assets held on trust; segregated from firm assets | No major MAS-licensed custodian failure |
| South Korea | D (partial): Mandatory segregation + bank deposit | Virtual Asset User Protection Act (VAUPA, 2024) | Customer deposits held in banks (deposit insurance); crypto segregated, 80% cold; dedicated-custody priority rules NOT VERIFIED | No major failure under VAUPA |
| Hong Kong | A: Trust-based | SFC licensing conditions; Stablecoins Ordinance | Client assets on trust via wholly-owned subsidiary; stablecoin reserves segregated under written trust | No major SFC-licensed platform failure |
| Australia | A (transitional): Statutory trust, not yet commenced | DAF Act 2026 (commences 9 Apr 2027); ASIC INFO 225 | "On trust" mechanism; s 912BE instrument-level insolvency treatment NOT VERIFIED | No major regulated custodian failure |
| European Union | C: Omnibus + record-keeping | MiCA Articles 70, 75(7); national insolvency law | Art. 75(7) segregation from estate "in accordance with applicable law"; varies by member state | No post-MiCA custodian failure to date |
| France | C: Omnibus + record-keeping (PACTE -> MiCA) | PACTE Law; CMF L.54-10; MiCA Arts 70, 75 | Client assets identifiable/separable from estate; strengthened under MiCA | No major AMF-registered DASP failure |
| Germany | C (enhanced): Omnibus + KWG + MiCA | KWG s.26b (segregation), s.46i (insolvency); KMAG s.45; MiCA Art. 75(7) | Custodied crypto deemed to belong to customer; CASP creditors have no recourse | No major BaFin-licensed custodian failure |
| Luxembourg | C: Omnibus + record-keeping (MiCA + DLT securities) | MiCAR Art. 75(7); Law of 6 Feb 2025; Blockchain Laws I-IV | Crypto segregated from estate, creditors no recourse "in accordance with applicable law"; less codified than Switzerland | No major CSSF-authorised CASP failure |
| Switzerland | B: Statutory bankruptcy-remote | DEBA Articles 242a/242b; Banking Act Art. 16 No. 1bis | Crypto excluded from estate if conditions met (exclusive disposal, constant readiness, identifiable allocation) | No major custodian failure; global benchmark |
| United Kingdom | A: Statutory/bare trust (regime live 25 Oct 2027) | FSMA; CASS 17 (draft); Property (Digital Assets etc) Act 2025 | Trust assets ring-fenced from custodian's estate; reinforced by Property Act | No failure under new framework (not yet in force) |
| Liechtenstein | B: Statutory bankruptcy-remote (TVTG) + MiCAR | TVTG Art. 25; Insolvenzordnung (IO) Art. 41; MiCAR Art. 75 (EEA) | Tokens segregated (ausgesondert) from estate; client's claim attaches to the token itself | No major FMA-supervised failure; top-tier EEA venue |
| Gibraltar | E: Operational segregation (principles-based) | DLT Provider Regs 2017/2020; Principle 5 / Guidance Note 5 | No codified crypto bankruptcy-remoteness; assets intended outside estate via trust/general insolvency law | No major GFSC-licensed custodian failure |
| Bahrain | E: Operational segregation (CRA Module) | CRA-4.5.2/4.5.3 (renunciation); CRA-8.1.5/8.1.6 (1:1, no encumbrance) | Ring-fencing via rulebook + sub-custodian renunciation; not tested in court (NOT VERIFIED) | No published case law |
| UAE | E: Operational/client-level segregation (multi-regulator) | VARA Custody Rulebook v2.0; ADGM FSRA; CMA Decision 4/R.M/2026 | Qualified-custodian + proof-of-reserves + reserve-asset segregation designed to protect assets in insolvency | No major licensed-custodian failure |
3. Case Studies: What Happens When Custodians Fail
The following case studies are drawn from verified outcomes in major custodian failures. They represent the most important empirical evidence available to regulators designing segregation frameworks. Notably, all five pre-date the codified statutory bankruptcy-remoteness regimes now in force in Switzerland, Liechtenstein, Bermuda, and (proposed/incoming) elsewhere -- the central lesson each reinforces.
3.1 FTX (November 2022) -- The Defining Case for Commingling Risk
What happened: On 11 November 2022, FTX, FTX US, Alameda Research, and over 100 affiliates filed for Chapter 11 bankruptcy in the US Bankruptcy Court for the District of Delaware. The collapse was triggered by a spike in customer withdrawals that exposed an $8.7 billion shortfall in customer funds. Investigations revealed that FTX had systematically transferred customer deposits to its affiliated trading firm Alameda Research through a backdoor in FTX's accounting system -- a software modification implemented by co-founder Gary Wang that allowed Alameda to borrow customer funds without triggering margin calls or liquidations.
The commingling: Customer funds were used for venture capital investments in over 400 companies, luxury real estate purchases in the Bahamas totalling $300 million, political contributions exceeding $100 million, and personal expenses for executives. FTX's senior executives knew as early as August 2022 that the firm owed more than $8 billion to customers but did not disclose the shortfall.
Bankruptcy treatment: FTX filed under Chapter 11 (reorganization) of the US Bankruptcy Code. John J. Ray III, who previously oversaw the liquidation of Enron, was appointed as CEO and plan administrator. Critically, because FTX was not a bank or trust company, its customers were treated as unsecured creditors under general bankruptcy law. There was no statutory segregation framework that would have ring-fenced client assets.
Recovery outcome (verified as of March 2026):
- The FTX Recovery Trust has distributed approximately $7.1 billion across three tranches: $454 million (February 2025), $5 billion (May 2025), and $1.6 billion (September 2025)
- 98% of creditors are projected to receive at least 119% of their November 2022 claim values in cash -- but this is based on petition-date valuations, not current market values. Since Bitcoin and other crypto assets appreciated significantly between November 2022 and 2025, the dollar recovery obscures the fact that customers received fiat, not crypto, and missed the price appreciation
- US customers have received approximately 95% of petition-date claims; FTX international ("Dotcom") customers approximately 78%
- Over $15 billion in assets were recovered from venture stakes (including Robinhood), clawback litigation, and asset sales
Regulatory lesson: FTX had no meaningful asset segregation despite its terms of service stating that customer assets would not be used for the company's own purposes. Contractual segregation without regulatory enforcement and independent verification is insufficient. A statutory trust or bankruptcy-remote segregation framework -- as now exists in Switzerland, Liechtenstein, Bermuda, or Japan -- would have made the commingling legally actionable earlier and would have provided customers with priority claims rather than unsecured creditor status.
- Source: CoinDesk -- Nearly All FTX Creditors Will Get 118% of Their Funds Back in Cash
- Source: CryptoPotato -- FTX Has Already Distributed $7.1B
- Source: PYMNTS -- FTX Crypto Bankruptcy Filing Shows $8.6 Billion Shortfall
3.2 Celsius Network (July 2022) -- The "Whose Property Is It?" Question
What happened: Celsius Network, a crypto lending platform with approximately 1.7 million users, suspended withdrawals on 12 June 2022 and filed for Chapter 11 bankruptcy on 13 July 2022.
The critical ruling: On 4 January 2023, US Bankruptcy Judge Martin Glenn (Southern District of New York) ruled in In re Celsius Network LLC that cryptocurrencies deposited into Celsius's Earn accounts -- totalling approximately $4.2 billion -- belonged to Celsius's bankruptcy estate, not to the depositors. The court found that Celsius's Terms of Use constituted a valid contract that "unequivocally transferred title and ownership" of the digital assets from customers to Celsius. The consequence: Earn Account holders were classified as unsecured creditors.
This ruling established a critical precedent: where a custody/lending platform's terms of service transfer ownership of crypto assets to the platform, the assets become property of the estate in bankruptcy, and customers have no proprietary claim to their specific assets.
Recovery outcome (verified as of March 2026):
- Celsius emerged from Chapter 11 in early 2024, distributing over $3 billion in cryptocurrency and fiat to creditors
- Total recovery rate: approximately 64.9% to date, with the plan targeting 67-85% recovery
- Creditors received a combination of cash, crypto distributions, and equity in Ionic Digital Inc., a new Bitcoin mining company
- A third repayment round of $220.6 million was announced in 2025
- The estate recovered $299.5 million from Tether in a settlement
- Additional recoveries through preference claim litigation ($24 million from 207 out of 215 resolved claims)
Regulatory lesson: The Celsius case demonstrates that custody and lending are fundamentally different activities with different risk profiles, and that terms of service can override customer expectations about asset ownership. Regulators should: (1) require clear disclosure of whether custody is proprietary (customer retains title) or transfer-of-title (platform takes ownership); (2) mandate that pure custody arrangements preserve client property rights; (3) prohibit re-hypothecation or lending of custodied assets without explicit, separate client consent and prominent disclosure of the insolvency consequences. The new statutory regimes (Liechtenstein's token-attaching claim, Bermuda's s.18(4), Switzerland's DEBA) directly address the title-transfer ambiguity exposed here.
- Source: Morrison Foerster -- Celsius Bankruptcy Court Holds Customer Deposits in "Earn Accounts" Are Estate Property
- Source: Columbia Business Law Review -- Breaking Down the First-Ever Crypto Bankruptcy Ruling
- Source: Fortune -- Celsius to exit bankruptcy in early 2024
- Source: AInvest -- Celsius Launches $220.6M Third Payout to Creditors
3.3 Voyager Digital (July 2022) -- Cascading Counterparty Failure
What happened: Voyager Digital, a US-listed crypto brokerage, filed for Chapter 11 bankruptcy on 5 July 2022 after Three Arrows Capital (3AC) defaulted on a loan of approximately $650 million in Bitcoin and USDC. Voyager had lent customer-deposited crypto to 3AC and other counterparties.
Recovery outcome (verified as of March 2026):
- Total recovered: approximately $484 million from FTX, 3AC, and D&O insurance settlements
- Approximately $587 million in checks distributed, with ~86% deposited
- Additional $24 million from preference claim settlements (207 of 215 claims resolved) and $13 million from D&O insurance
- Estimated total recovery: 50-70% of claims, with 100% recovery considered highly unlikely
- Outstanding: $675 million claim against 3AC (recovery stretching over several years); lawsuits against Binance and Metropolitan Commercial Bank pending
- Customers who received both in-kind distribution (2023) and cash (2024) may have recovered approximately 70% of total claims
Regulatory lesson: Voyager illustrates the danger of custodians engaging in lending activities with customer assets without adequate risk management or segregation. Customer assets were commingled with the platform's lending operations, and when a major borrower defaulted, the cascading failure consumed customer funds. Segregation requirements that prohibit the use of custodied assets for lending -- as mandated by MiCA Article 70, the UK FCA's CASS 17, Bahrain's CRA-8.1.6, and Switzerland's "constant readiness" standard -- directly address this failure mode.
- Source: CoinDailies -- Voyager Bankruptcy Update: Key Insights From May 1 Letter
- Source: Crypto.news -- Voyager Digital recovers over $480m from FTX and 3AC settlements
- Source: Syracuse Law Review -- Voyager Digital Assets: Will Anybody Get Their Crypto Back?
3.4 QuadrigaCX (2019) -- Lost Keys, No Segregation
What happened: QuadrigaCX, then Canada's largest crypto exchange, ceased operations in January 2019 following the reported death of its sole founder and CEO, Gerald Cotten, in December 2018 while travelling in India. Cotten was reportedly the only person with access to the exchange's cold wallet private keys. Approximately C$215 million (approximately $169 million) in customer crypto and fiat was inaccessible. An investigation by the Ontario Securities Commission (OSC) later concluded that Cotten had been operating a Ponzi-like scheme, using new customer deposits to fund withdrawals by other customers and his own personal spending.
Recovery outcome (verified as of March 2026):
- Bankruptcy trustee Ernst & Young (EY) conducted the proceedings
- Total proven claims: approximately C$305.6 million from 17,648 creditors
- Interim dividend (announced May 2023): 13.094% of proven claims
- The interim distribution represented approximately 87% of funds the Trustee was holding, with the remainder reserved for administration and a future final distribution
Regulatory lesson: QuadrigaCX is a case study in multiple simultaneous failures: (1) single points of failure in key management (one person held all keys); (2) no independent verification of reserves; (3) no regulatory requirement for asset segregation or proof of reserves; (4) no qualified custodian requirement. Canada's subsequent regulatory responses -- CIRO's four-tier custodian framework (February 2026), the 80% third-party custodian requirement, and SOC-2 Type II audit mandates -- were directly motivated by QuadrigaCX. CIRO explicitly stated its framework was designed to "avoid another QuadrigaCX." The mandatory-multi-sig and no-single-point-of-failure requirements now seen in Bermuda's Custody Code, Bahrain's CRA-8.1.11, Singapore's MPC/dual-authorization rules, and the UAE's qualified-custodian regime all respond to this failure mode.
- Source: CoinDesk -- Quadriga CX Bankruptcy Claimants to Get 13% on the Dollar
- Source: CoinTelegraph -- QuadrigaCX creditors set to receive 13% of their claims
3.5 Mt. Gox (2014) -- The 12-Year Recovery Saga
What happened: Mt. Gox, once the world's largest Bitcoin exchange (handling approximately 70% of all Bitcoin transactions at its peak), filed for bankruptcy in Tokyo on 28 February 2014 after announcing the loss of approximately 850,000 Bitcoin (then valued at approximately $450 million; valued at over $80 billion at 2025 prices). Approximately 200,000 Bitcoin were subsequently recovered.
Recovery timeline:
- 2014: Bankruptcy filing in Tokyo District Court
- 2018: Proceedings converted from bankruptcy to civil rehabilitation (a critical shift, as rehabilitation allowed creditors to receive distributions in Bitcoin rather than fiat valued at 2014 prices)
- 2021: Rehabilitation plan approved by creditors and court
- July 2024: Repayments in Bitcoin and Bitcoin Cash commenced
- March 2025: Trustee reported that approximately 19,500 creditors had received repayments; base repayments, early lump-sum distributions, and intermediate payments "largely completed"
- October 2025: Repayment deadline extended to October 2026 (third extension)
- As of early 2026: Mt. Gox still holds approximately 34,689 Bitcoin (worth approximately $4 billion) for remaining distributions
Recovery outcome: Creditors who elected to receive Bitcoin under the rehabilitation plan received distributions based on approximately 142,000 Bitcoin, 143,000 Bitcoin Cash, and 69 billion Japanese yen (~$510 million). The conversion from bankruptcy to civil rehabilitation was pivotal: under straight bankruptcy, creditors would have received the 2014 fiat value of their claims (approximately $450 per BTC). Under civil rehabilitation, they received actual Bitcoin -- representing a massive windfall given the appreciation in Bitcoin's value.
Regulatory lesson: Mt. Gox preceded all modern crypto custody regulation. The 12-year recovery timeline demonstrates the extraordinary cost and complexity of resolving custodian failures in the absence of clear segregation frameworks. Japan's subsequent regulatory response -- the world's first comprehensive crypto custody regime under the PSA (2017), with mandatory asset segregation, 95% cold storage, hot wallet reserve backing, and statutory preferential repayment rights -- was a direct consequence of Mt. Gox. The case also demonstrates the importance of the legal form of insolvency proceedings (bankruptcy vs. rehabilitation) and its impact on whether creditors receive fiat claims or actual crypto assets.
- Source: CNBC -- Mt. Gox begins repaying bitcoin to creditors a decade after exchange's collapse
- Source: CoinDesk -- Mt. Gox Delays Creditor Repayment to October 2026
Summary: Recovery Rates Compared
| Case | Year | Jurisdiction | Shortfall | Recovery Rate | Time to Recovery | Segregation in Place? |
|---|---|---|---|---|---|---|
| FTX | 2022 | US (Delaware) | $8.7B | ~95-119% (petition-date value) | ~3 years (ongoing) | No |
| Celsius | 2022 | US (SDNY) | ~$4.2B (Earn) | ~65-85% (estimated) | ~2 years (ongoing) | No (Earn Account title transfer) |
| Voyager | 2022 | US (SDNY) | ~$1.3B | ~50-70% (estimated) | ~3 years (ongoing) | No |
| QuadrigaCX | 2019 | Canada | C$305.6M | ~13% (interim) | 4+ years | No |
| Mt. Gox | 2014 | Japan | 850K BTC | BTC returned at current value (civil rehab creditors) | 12+ years (ongoing) | No (pre-regulation) |
4. Property Law Frameworks for Digital Assets
The legal classification of crypto assets as "property" is the foundational prerequisite for any segregation framework. If crypto assets are not recognized as property under a jurisdiction's law, they cannot be held on trust, subjected to proprietary claims in insolvency, or effectively segregated from a custodian's estate. Four major legal developments are shaping this landscape.
4.1 UK: The Property (Digital Assets etc) Act 2025 -- "Third Category" of Personal Property
The Property (Digital Assets etc) Act 2025, which received Royal Assent on 2 December 2025, implements the core recommendation of the Law Commission's Final Report on Digital Assets (June 2023). It confirms that digital assets -- including cryptocurrencies and NFTs -- can constitute a third category of personal property, distinct from both "things in possession" (tangible objects) and "things in action" (enforceable rights such as debts).
The Act's core provision states that a thing "is not prevented from being the object of personal property rights merely because it is neither a thing in possession, nor a thing in action." The Act does not define the boundaries of this third category; it leaves development to the courts through common law.
Implications for custody:
-
Digital assets can now be definitively held on trust, enabling custodians to hold client cryptoassets under trust structures with full legal certainty
-
In insolvency, administrators can determine whether client cryptoassets sit in a trust (ring-fenced from creditors) or form part of the general estate
-
Lenders can take security interests in cryptoasset collateral with confidence that such interests survive insolvency
-
Owners can seek freezing injunctions, tracing claims, and constructive trust remedies for theft and fraud
-
Source: Law Commission -- Property (Digital Assets etc) Act 2025 receives Royal Assent
-
Source: Hogan Lovells -- The Property (Digital Assets etc) Act 2025 comes into force
-
Source: Clyde & Co -- The Property (Digital Assets etc) Act 2025 - What it means for crypto assets
4.2 Switzerland and Liechtenstein: Statutory Property/Token Treatment
Swiss law treats crypto-based assets under the existing framework of the Code of Obligations and the DLT Act amendments. The DLT Act introduced the concept of ledger-based securities (Registerwertrechte) under Article 973d et seq. of the Code of Obligations, enabling the tokenization of rights -- including membership rights, claims, and copyrights -- with ownership transferable via private key transactions on a blockchain. For custody, the critical innovation is that the DEBA amendments (Articles 242a/242b) explicitly address the proprietary treatment of crypto assets in insolvency, eliminating the need to rely on general property law principles.
Liechtenstein's TVTG (Blockchain Act) takes a parallel but distinct civil-law route through its Token Container Model: a token is a "container" that can hold any right (a payment claim, security, or commodity), and Article 25 TVTG treats tokens/TT keys held for clients as third-party assets segregated in the client's favour, with the client's claim attaching to the token itself. This makes both Switzerland and Liechtenstein jurisdictions where the proprietary/insolvency treatment of custodied crypto is fixed by statute rather than left to contested common-law development.
- Source: PwC Switzerland -- Swiss DLT law: New regulations
- Source: Mondaq -- Swiss Parliament Adopts Innovative DLT Legislation
4.3 United States: UCC Article 12 -- Controllable Electronic Records
The 2022 amendments to the Uniform Commercial Code (UCC) introduced a new Article 12 governing "controllable electronic records" (CERs) -- a category encompassing certain digital assets, including cryptocurrencies, stablecoins, e-notes, and electronic tokens.
Current enactment status (as of March 2026):
- 33 UCC jurisdictions have enacted the 2022 amendments, including the critical trifecta of New York (signed 5 December 2025; effective 3 June 2026), Delaware, and the District of Columbia
- New York's enactment was signed by Governor Hochul on 5 December 2025 via Assembly Bill 3307/Senate Bill 1840
Key provisions:
- Article 12 governs the ownership, transfer, and enforceability of rights in CERs
- Establishes rules for control as the key concept (analogous to possession for tangible assets)
- A person who acquires control of a CER in good faith, for value, and without knowledge of competing claims takes free of those claims (the "shelter" or innocent acquirer rule)
- Amendments to Article 9 address perfection and priority of security interests in digital assets
Implications for custody: UCC Article 12 provides the commercial law infrastructure for crypto custody, enabling custodians to establish enforceable control over client assets and allowing secured lending against digital asset collateral with predictable priority rules. However, UCC Article 12 does not directly address insolvency treatment -- that remains governed by the federal Bankruptcy Code.
- Source: Wolters Kluwer -- NY UCC Amendments: Digital Asset Rules for 2026
- Source: Orrick -- New York Enacts 2022 UCC Amendments: A New Era for Digital Asset Transactions
- Source: American Bar Association -- 2022 U.C.C. Revisions Unlock Digital Assets' Potential
4.4 UNIDROIT Principles on Digital Assets and Private Law
The International Institute for the Unification of Private Law (UNIDROIT) adopted the Principles on Digital Assets and Private Law on 10 May 2023 (formally launched 4 October 2023). These Principles provide a comprehensive, technology-neutral, jurisdiction-neutral framework for the proprietary treatment of digital assets across legal traditions.
Key provisions:
- Digital assets can be subject to proprietary rights -- this is a fundamental assertion that resolves the threshold question for jurisdictions still debating whether crypto assets constitute property
- Party autonomy is given significant effect in determining the applicable law for digital assets
- An innocent acquirer rule: a transferee who has control of a digital asset in good faith takes it free of third-party proprietary claims
- A secured creditor can make a security right in a digital asset effective against third parties by obtaining control
- Principles apply to custody and intermediary holdings, addressing the chain of custody from end-investor through intermediaries
Implementation status: At its 103rd session (May 2024), the UNIDROIT Governing Council endorsed a four-part implementation strategy: positioning the Principles as the leading international standard; identifying priority jurisdictions for adoption; raising awareness at relevant forums; and ensuring accessibility through translations.
The Principles serve as a model law for jurisdictions developing their digital asset property frameworks and are particularly relevant for civil law jurisdictions that lack the trust concept available in common law systems -- though Liechtenstein's Token Container Model and Switzerland's DEBA show that civil-law jurisdictions can also reach codified insolvency segregation directly.
5. Recommended Framework: Tiered Segregation Requirements
Based on the comparative analysis of jurisdictional models and the empirical evidence from custodian failures, the following tiered framework is recommended for regulators establishing or evaluating crypto custody segregation regimes. The tiers are cumulative -- each higher tier includes all requirements of the lower tiers.
Tier 1: Minimum Requirements (Legal Segregation + Daily Reconciliation)
This tier represents the absolute minimum standard that any jurisdiction should adopt for licensed crypto custodians. It prevents the most egregious failures (commingling, undisclosed lending of custodied assets) while remaining achievable for smaller custodians.
| Requirement | Specification |
|---|---|
| Legal segregation mandate | Client crypto assets must be held separately from the custodian's own assets, with segregation enforceable in insolvency |
| Prohibition on proprietary use | Custodians must not use client assets for their own account (trading, lending, pledging) without explicit, informed, separate consent and prominent disclosure of insolvency consequences |
| Internal records | Custodian must maintain a register of positions identifying each client's beneficial interest at all times |
| Daily reconciliation | Custodian must reconcile client entitlements against actual holdings at least once per business day |
| Quarterly client statements | Clients must receive a statement of position at least quarterly |
| Custody agreement | Written agreement specifying duties, security systems, fee structure, liability allocation, and applicable law |
| Independent audit | Annual external audit of custody controls (minimum SOC-2 Type II or equivalent) |
Regulatory models implementing this tier: MiCA (as baseline); Brazil (BCB Resolution 520); Gibraltar (Principle 5); Cayman Islands (Custody/VATP Rule); several emerging-market jurisdictions.
Tier 2: Standard Requirements (On-Chain Segregation + Proof of Reserves)
This tier adds verifiable on-chain protections and transparency measures. It is appropriate for custodians holding material volumes of institutional assets and is the standard that most developed jurisdictions should target.
| Requirement | Specification |
|---|---|
| On-chain segregation | Client assets must be held in wallets or DLT addresses that are separate from the custodian's proprietary wallets |
| Proof of reserves | Custodian must produce periodic (at minimum quarterly) proof that it holds assets at least equal to client entitlements, using cryptographic attestation methods (e.g., Merkle tree proofs, zero-knowledge proofs) |
| Cold storage minimums | At least 80-95% of client assets must be held in cold storage (offline, air-gapped key storage). Hot wallet exposure must be backed by the custodian's own assets |
| Property law foundation | Jurisdiction must have enacted legislation recognizing crypto assets as property capable of being held on trust or subject to proprietary claims |
| Bankruptcy protection | Statute or regulation must provide that properly segregated client crypto assets are excluded from the custodian's insolvency estate or that clients hold priority claims |
| Sub-custodian oversight | Where custody is delegated, the custodian must verify that the sub-custodian meets equivalent segregation standards, with contractual audit rights |
| Incident reporting | Mandatory notification to regulator of security incidents, shortfalls, or reconciliation failures within prescribed timeframes |
Regulatory models implementing this tier: Switzerland (DEBA 242a + FINMA Guidance 01/2026); Japan (PSA + 95% cold storage); Singapore (MAS trust + 90% cold storage); UK (CASS 17 regime, live 25 Oct 2027); Bahrain (95% cold + multi-sig + 1:1 holding); South Korea (VAUPA + 80% cold); Bermuda (Custody Code + Custody Rules 2025); UAE (VARA qualified-custodian + proof-of-reserves).
Tier 3: Enhanced Requirements (Individual Wallets + Real-Time Attestation)
This tier represents the highest standard of segregation assurance and is appropriate for systemically important custodians, central securities depositories, or custodians of sovereign or pension fund assets.
| Requirement | Specification |
|---|---|
| Individual client wallets | Each client's assets must be held in dedicated, individually identifiable wallet addresses (no omnibus pooling) |
| Real-time or near-real-time attestation | Custodian must provide real-time or intra-day verification that client assets are present and unencumbered |
| Multi-party key management | Private keys must be managed through multi-party computation (MPC), multi-signature schemes, or equivalent cryptographic controls, with geographic distribution and no single point of failure |
| Independent verification | A third-party auditor or on-chain analytics provider must independently verify reserves on at least a quarterly basis |
| Regulatory technology integration | Custodian must provide the regulator with programmatic (API-based) or on-chain monitoring access for supervisory purposes |
| Recovery planning | Detailed resolution plan (crypto-specific "living will") specifying how client assets would be returned in a wind-down scenario, including key recovery procedures, communication protocols, and estimated timelines |
| Staking and re-hypothecation controls | If staking is permitted, specific disclosure of whether staked assets remain segregable and whether "constant readiness" (Swiss standard) is maintained; re-hypothecation explicitly prohibited without regulatory approval |
Regulatory models implementing elements of this tier: Switzerland and Liechtenstein (statutory bankruptcy-remoteness for banks/TT depositaries under full supervision); Bermuda (mandatory wind-down plans, prescriptive key-management Code, pari-passu waterfall); UAE VARA (client-level individual wallets, mandatory proof-of-reserves); Japan (proposed FIEA reform extending compensation reserves to cold-wallet assets); selected elements in Singapore and Hong Kong SFC conditions.
6. Decision Matrix for Regulators
The following decision matrix guides regulators in selecting the appropriate segregation model and tier for their jurisdiction, based on the key design variables.
6.1 Model Selection: Key Questions
| Question | If Yes | If No |
|---|---|---|
| Does your legal system recognize a trust concept (or functional equivalent)? | Model A (Statutory Trust) is available and preferred (UK, Singapore, Hong Kong, Australia) | Consider Model B (Statutory Bankruptcy-Remote Segregation) through insolvency-law amendments (Switzerland, Liechtenstein, Bermuda, Japan) |
| Does your insolvency law currently recognize client crypto assets as excluded from the custodian's estate? | Existing framework may be adequate with regulatory overlay | Legislative reform is required before any segregation regime can be effective (the gap behind Models C/E) |
| Do you have a mature financial services regulatory infrastructure (e.g., existing client asset rules like CASS)? | Adapt existing rules (UK approach) -- faster implementation | Build crypto-specific framework (Swiss/Liechtenstein/Japanese/Bermudian approach) |
| Is your jurisdiction a significant domicile for crypto custodians? | Prioritize Tier 2 or Tier 3 requirements | Tier 1 may be sufficient initially, with planned escalation |
| Have custodian failures occurred in your jurisdiction? | Urgency is high; learn from failure-specific gaps (Canada/QuadrigaCX, Japan/Mt. Gox) | Preventive framework; learn from other jurisdictions' failures |
6.2 Tier Selection: Risk-Based Approach
| Custodian Profile | Recommended Minimum Tier | Rationale |
|---|---|---|
| Small custodian (<$100M AUC) | Tier 1 | Proportionate compliance burden; core protections in place |
| Medium custodian ($100M-$1B AUC) | Tier 2 | Material systemic risk; on-chain verification warranted |
| Large custodian (>$1B AUC) | Tier 2 (Tier 3 for systemically important) | Significant market impact in failure scenario |
| Central securities depository / financial market infrastructure | Tier 3 | Systemic importance demands highest assurance |
| Bank or trust company custodian | Tier 2 (minimum) | Existing prudential framework provides additional buffers |
| Exchange-integrated custody | Tier 2 (minimum, with conflict-of-interest controls) | Elevated commingling risk per FTX/Voyager precedent |
6.3 Critical Design Principles
Regardless of which model or tier is selected, regulators should incorporate the following principles:
-
Insolvency certainty: The single most important outcome is that client crypto assets survive the custodian's insolvency. If the segregation framework does not deliver this outcome, it fails its core purpose. This requires either trust law protections (UK, Singapore, Hong Kong, Australia), statutory bankruptcy exclusion (Switzerland, Liechtenstein, Bermuda), or statutory priority claims (Japan). Jurisdictions relying only on operational segregation under general law (Cayman, Gibraltar, Brazil, Bahrain, UAE, much of the EU via national insolvency law) should treat codification of this outcome as the next maturity step.
-
Property law foundation: Segregation frameworks are only as strong as the underlying property law. If crypto assets are not recognized as property in the jurisdiction, segregation provisions may be unenforceable. Regulators should prioritize property law reform (following the UK, Swiss, Liechtenstein Token Container Model, or UNIDROIT models) as a prerequisite to custody regulation.
-
Prohibition on proprietary use: The FTX, Celsius, and Voyager failures all involved custodians using client assets for their own purposes. A clear, enforceable prohibition on proprietary use of custodied assets -- matching MiCA Article 70, Bahrain's CRA-8.1.6, and Switzerland's "constant readiness" -- should be a universal minimum requirement.
-
Independent verification: Self-attestation of reserves is insufficient. The QuadrigaCX case demonstrated that a custodian can report adequate reserves while operating a Ponzi scheme. Independent, periodic verification by qualified auditors or through cryptographic proof-of-reserves mechanisms (UAE VARA, Bermuda's DABA s.18(3)) is essential.
-
Key management as a segregation component: Segregation is not purely a legal and accounting exercise. Without proper key management -- including elimination of single points of failure, geographic distribution of key material, and multi-party controls (Bermuda's seed-ceremony Code, Bahrain's mandatory multi-sig, Singapore's MPC) -- legal segregation can be rendered meaningless by operational failure. See Key Management for detailed guidance.
-
Clarity on staking and DeFi: As staking becomes prevalent, regulators must address whether staked assets remain segregated and available for return. The Swiss "constant readiness" standard under Article 242a DEBA provides a useful benchmark: if staking compromises the custodian's ability to return assets on demand, the bankruptcy protection may not apply.
-
Cross-border equivalence: For jurisdictions with equivalence or mutual recognition frameworks (e.g., Switzerland's FINMA Guidance 01/2026 foreign-custody equivalence requirement; MiCA passporting across the EU/EEA including Liechtenstein and Luxembourg), segregation standards should be a core component of equivalence assessments. See Licensing Frameworks for cross-border considerations.
-
Insurance as complement, not substitute: Insurance and liability frameworks (see Insurance & Liability) can provide additional protection against operational losses, but insurance does not substitute for legal segregation. Insurance payouts are subject to coverage limits, exclusions, and the insurer's own solvency. Legal segregation ensures the return of the actual assets. Bermuda's DABA s.18(1), which lets a surety bond, trust account, or indemnity insurance serve as a backstop alongside statutory creditor-exclusion, illustrates the complementary design.
7. Conclusion
The empirical evidence from custodian failures is unambiguous: jurisdictions without enforceable asset segregation frameworks expose investors to catastrophic losses when custodians fail. The cases of FTX ($8.7B shortfall), Celsius ($4.2B in Earn deposits ruled estate property), Voyager (50-70% recovery), QuadrigaCX (13% recovery), and Mt. Gox (12+ year recovery saga) collectively represent a body of evidence that no regulator can afford to ignore.
Across the 20 jurisdictions surveyed, a clear hierarchy of insolvency protection has emerged. Four jurisdictions now codify statutory bankruptcy-remoteness for custodied crypto: Switzerland (DEBA Articles 242a/242b), Liechtenstein (TVTG Article 25 + Insolvenzordnung (IO) Art. 41), Bermuda (DABA s.18(4) + Custody Rules 2025 pari-passu waterfall), and Japan (PSA statutory preferential repayment rights). Five rely on trust-law ring-fencing (UK, Singapore, Hong Kong, Australia, plus US/Canadian trust-institution custody). The remainder -- the EU and its member states (operating through MiCA Article 75(7) plus national insolvency law, with Germany the strongest via Section 46i KWG), Luxembourg, France, Cayman Islands, Gibraltar, Brazil, Bahrain, the UAE, and South Korea's non-bank custody -- mandate robust operational segregation but have not yet codified a crypto-specific bankruptcy-remoteness outcome (with several, like Brazil and Bahrain, explicitly NOT VERIFIED on this point).
The strongest frameworks share common features: statutory property recognition for digital assets, mandatory segregation with insolvency protection, prohibition on proprietary use, independent verification, and prescriptive key management. Regulators designing new frameworks should treat Switzerland's DEBA Articles 242a/242b, Liechtenstein's Token Container Model, Bermuda's DABA codification, and the UK's combined Property (Digital Assets etc) Act 2025 + CASS trust model as benchmarks. The MiCA framework, while a landmark achievement in harmonizing operational requirements across the EU/EEA, remains weakened by its reliance on national insolvency law -- a gap that may be tested in a future CASP failure, and one that the standalone statutory regimes do not share.
The recommended tiered framework in Section 5 provides a risk-proportionate path for jurisdictions at different stages of regulatory maturity, from minimum viable segregation (Tier 1) to institutional-grade assurance (Tier 3). The key message for policymakers: legal segregation that survives insolvency is not optional -- it is the foundation on which all other custody protections depend.
Verification Notes
All factual claims in this document mirror the canonical per-jurisdiction fact matrix for the crypto-custody domain (all 20 jurisdictions), re-derived on 4 June 2026. No facts were introduced beyond the matrix or the previously verified content of this file; "NOT VERIFIED" items are reflected honestly. The following summarizes verification status for key claims:
-
FTX shortfall ($8.7B) and recovery ($7.1B distributed, 119% petition-date value): Verified via CoinDesk (8 May 2024), CryptoPotato (early 2026), and PYMNTS (June 2023). The 119% recovery is based on petition-date (November 2022) fiat valuations, not current crypto values.
-
Celsius Earn Account ruling (Judge Glenn, 4 January 2023, $4.2B estate property): Verified via Morrison Foerster, Arnold & Porter, and Columbia Business Law Review (Case No. 22-10964). Recovery rate of 64.9% to date verified via AInvest (2025) and Fortune (November 2023); $299.5M Tether settlement verified.
-
Voyager recovery (50-70%, $484M from FTX/3AC/D&O settlements): Verified via Crypto.news (April 2024) and CoinDailies (May 2025). The $675M outstanding claim against 3AC verified via multiple sources.
-
QuadrigaCX (13% interim recovery, C$305.6M claims, 17,648 creditors): Verified via CoinDesk (May 2023) and CoinTelegraph (May 2023). The 13.094% figure comes from the EY trustee's May 2023 announcement.
-
Mt. Gox (850K BTC stolen, 19,500 creditors repaid, 34,689 BTC remaining, October 2026 extended deadline): Verified via CNBC (July 2024) and CoinDesk (October 2025). Repayment commencement in July 2024 confirmed by the trustee.
-
Switzerland DEBA Articles 242a/242b: Verified via PwC Switzerland, Library of Congress Global Legal Monitor (March 2021), CMS LawNow, and FINMA Guidance 01/2026 (January 2026). DLT Act in force February-August 2021.
-
Liechtenstein TVTG Article 25 + Insolvenzordnung (IO) Art. 41 (statutory token segregation; client claim attaches to the token): Mirrored from the fact matrix (TVTG in force 1 January 2020; MiCAR taken into the EEA Agreement 24 June 2025; MiCAR transition deadline 1 July 2026). Token Container Model civil-law priority confirmed in matrix.
-
Bermuda DABA s.18(4) statutory creditor-exclusion + Custody of Client Assets Rules 2025 pari-passu waterfall + s.18(1) financial backstop: Mirrored from the fact matrix (Custody Rules 2025 in force 12 February 2025; Digital Asset Custody Code of Practice February 2024).
-
Cayman Islands (operational segregation; NO codified statutory bankruptcy-remoteness): Mirrored from the fact matrix -- Phase Two custody licensing in force 1 April 2025; outcome relies on identifiable wallets + common-law trust/property + Companies Act; statutory crypto-segregation provision absent.
-
Gibraltar (Principle 5 operational segregation; NO crypto-specific bankruptcy-remoteness statute): Mirrored from the fact matrix -- DLT Provider Regs in force 1 January 2018; statutory crypto-insolvency segregation NO DATA FOUND. Gibraltar's file sits under the europe/ path though tagged region/middle-east-africa in some indexes; wikilink uses the europe/gibraltar slug.
-
UK Property (Digital Assets etc) Act 2025 (Royal Assent 2 December 2025) + CASS 17 (regime live 25 October 2027) + Cryptoassets Regulations made by Parliament 4 February 2026: Mirrored from the fact matrix and prior verified content.
-
US SAB 121 rescission via SAB 122 (issued 23 January 2025, effective 30 January 2025) and SEC/NYDFS 30 September 2025 custody guidance preserving beneficial ownership through insolvency: Corrected and mirrored from the fact matrix (prior text referred loosely to "rescission of SAB 121 in January 2025"; the operative instrument is SAB 122). No single federal statutory crypto bankruptcy-remoteness provision exists.
-
MiCA segregation requirements (Articles 70, 75(7)): Verified via Freshfields and Oxford Academic; the reliance on national insolvency law ("in accordance with applicable law") confirmed in the matrix for the EU, Luxembourg, and France, and contrasted with Germany's stronger Section 46i KWG / Section 45 KMAG outcome.
-
Japan PSA statutory preferential repayment rights, 95% cold storage, 100% hot-wallet own-asset backing; proposed FIEA migration (Cabinet bill 10 April 2026): Mirrored from the fact matrix.
-
Singapore (trust account, 90% cold storage), South Korea (VAUPA, 80% cold, bank-held fiat, standalone custody licence only PROPOSED), Australia (DAF Act 2026 "on trust", s 912BE NOT VERIFIED), Bahrain (CRA-4.5.3 renunciation, no court-tested remoteness), UAE (VARA qualified-custodian, reserve-asset segregation), Brazil (Resolution 520, remoteness NOT VERIFIED): All mirrored from the fact matrix.
Aggregate derivation (N=20): Of the 20 jurisdictions, 4 codify statutory crypto bankruptcy-remoteness (Switzerland, Liechtenstein, Bermuda, Japan); the UK adds a trust-based statutory ring-fence (live 25 Oct 2027) reinforced by the Property Act; Germany reaches creditor-no-recourse via Section 46i KWG + MiCA. The remaining jurisdictions mandate operational segregation whose insolvency outcome depends on general/national law.
Items requiring ongoing monitoring:
- UK CASS 17 final rules and 25 October 2027 commencement -- regime not yet live; requirements may be refined
- MiCA insolvency treatment variation across EU/EEA member states (incl. Luxembourg, France) -- no harmonized member-state-by-state insolvency data available
- US federal crypto market structure legislation -- no unified federal segregation statute enacted as of 2026
- Australia s 912BE/912BF asset-holding instruments -- NOT VERIFIED until made; commencement 9 April 2027
- South Korea standalone custody licence and dedicated bankruptcy-remoteness rules -- PROPOSED only (second-phase Digital Asset Basic Act); NOT VERIFIED
- Brazil and Bahrain codified bankruptcy-remoteness -- NOT VERIFIED / not tested in court
- Canada Stablecoin Act (Royal Assent 26 March 2026) reserve creditor-protection -- enacted but not yet in force