When you use an exchange the exchange usually controls the private keys and therefore controls your cryptocurrency while it is held on the platform but you retain the right to withdraw if the platform allows it however access depends on the exchange terms security practices and regulatory environment.
What custody means in practice
Custody in the world of digital assets means who has the private keys that allow moving or spending the asset. If you hold the private keys you can send the asset from one address to another without needing permission. If a service holds the private keys for you it can move the asset subject to its own controls and rules. Custody therefore separates legal ownership from practical control in everyday use.
Custody is about who holds the private keys that enable access and control of the asset.
Custody models explained
Broadly there are two common models. In one model a custodial exchange or service holds the private keys and provides an account balance that represents your holdings. In the other model you control a wallet that holds the private keys yourself or via software or hardware designed for individual ownership. Many users use a mix of both for convenience and security.
Different custody models trade off convenience and control.
How exchanges control access
When you deposit cryptocurrency on an exchange you transfer the asset into an address where the exchange holds the private keys. The exchange then updates its internal ledger to reflect your balance. You can only move the asset off the platform by following the exchange withdrawal procedures which may include identity checks and additional security checks. The exchange can also freeze accounts or pause withdrawals under certain conditions and may apply its own withdrawal limits and delays.
Using an exchange means relying on that service to operate access controls and withdrawal processes on your behalf.
What is a wallet and how does it differ from an exchange
A wallet is software or hardware that stores private keys and constructs signed messages to move assets on a public ledger. A software wallet runs on a phone or computer while a hardware wallet stores keys in a dedicated offline device. Importantly a wallet by itself does not hold assets in the way a bank holds money it only stores the credentials that prove control over an address on a public ledger.
A wallet stores the credentials that let you prove control not the asset itself.
Risks of losing access to a wallet
Losing the private keys to a wallet is effectively losing access to the asset. Common ways access is lost include losing a device without a backup recovery phrase losing the recovery phrase or having the recovery data corrupted. Malware can steal keys from software wallets and phishing sites can trick users into revealing recovery data. Unlike a bank account there is often no central arbiter who can restore access if the keys are gone.
If you lose the private keys and have no recovery data you will likely lose access permanently.
Risks when you keep assets on an exchange
Keeping assets on an exchange carries different risks. The platform may suffer a security breach misuse funds or act fraudulently. The exchange may be subject to court orders regulatory intervention or insolvency which can restrict withdrawals. Insurance arrangements and regulatory oversight vary widely and do not guarantee full recovery of user assets. Users should understand the exchange custody policy and the legal protections in the jurisdiction where the exchange operates.
Holding assets on an exchange means trusting the platform to hold both the keys and the promise to return funds on demand.
Practical steps to reduce custody risk
Decide which assets you need on an exchange for trading or convenience and which you prefer to keep under your own keys. Use hardware wallets for long term holdings and enable strong device level security. Keep offline backups of recovery data in secure locations and consider splitting backups across trusted custodians for redundancy. Use exchanges with clear custody policies and good security track records and avoid sharing recovery data.
Think ahead about who should control the keys for each holding and plan backups accordingly.
Regulation and how it affects custody
Regulatory frameworks can shape custody arrangements by imposing standards on how platforms hold and segregate client assets and how they communicate risk. Some platforms operate with regulated custody providers or publish proof of reserves though such statements require careful scrutiny. CurveBlock is approved for Gate 1 of the Bank of England and FCA Digital Securities Sandbox for its regulated digital share platform and this Sandbox approval is not full FCA authorisation. Participating in a Sandbox does not mean a platform can offer every type of product in every jurisdiction.
Regulation can improve transparency and protections but does not eliminate custody risk entirely.
When to withdraw to a personal wallet and liquidity considerations
Withdrawing assets to a personal wallet gives you control but may reduce immediate liquidity if you rely on an exchange to execute trades. Moving assets can also incur network fees and time delays. Think about your need for quick access against your tolerance for counterparty risk. Read more on market mechanics and timing in our primer at Liquidity explained why selling an investment is not always immediate and on differences between ledger based assets and ownership of physical assets at Bitcoin and Ethereum explained how cryptocurrencies differ from ownership of real assets.
Weigh the trade off between immediate market access and direct control when choosing custody.
Frequently asked questions
Who controls my cryptocurrency when I use an exchange?
While your account record shows you as the owner the exchange holds the private keys and so controls the cryptocurrency while it is held on the platform subject to its rules.
Can an exchange lose my cryptocurrency?
Yes an exchange can lose funds through hacks fraud or operational failures and users may not be fully compensated depending on the exchange policies and the legal process.
Is a hardware wallet necessary?
A hardware wallet is a strong option for protecting long term holdings because it stores keys offline but it is not the only solution and requires careful backup procedures.
What happens if I forget my wallet recovery data?
If there is no backup of your recovery data you will almost certainly lose access to the wallet and the assets held by that wallet.
General information about the CurveBlock platform. Not financial, legal or tax advice. Capital is at risk. The value of digital shares can fall as well as rise. Past performance is not a guide to future returns.
CurveBlock