Institutional RWA Custody Solutions: Compliance Requirements for Tokenized Asset Custody
Institutional investors — pension funds, insurance companies, sovereign wealth funds — cannot hold tokenized real-world assets without custody solutions that satisfy their regulatory requirements. The custody question is one of the most frequently cited blockers for institutional RWA adoption. This article covers what qualified custodians exist, how they integrate with compliance protocols, and what ERISA and Solvency II require.
TL;DR — Key Takeaways
- ✓Qualified Custodian Definition: US SEC Custody Rule requires banks, registered broker-dealers, or futures commission merchants. For digital assets: Anchorage (OCC federal charter), Fidelity Digital Assets, Coinbase Custody, BitGo Trust — all state trust companies. Bank custodians (BNY, State Street, JPMorgan) building digital capabilities.
- ✓How Digital Custody Differs: Private key management (HSM + MPC + multisig) vs certificate holding. On-chain compliance protocol integration required — custodian cannot execute protocol-rejected transfers. Regulatory classification still evolving for SEC, ERISA, Solvency II.
- ✓ERISA Requirements: Qualified trustee (bank, insurance co, or registered broker-dealer required). Fidelity bonding for digital asset risks. Prohibited transaction screening for affiliated custodians. Indicia of ownership question for private key control — US-regulated entity advised.
- ✓Custody Tiers: Tier 1: BNY Mellon, State Street, JPMorgan (highest trust, limited protocol integration). Tier 2: Anchorage, Fidelity Digital, Coinbase Custody, BitGo (purpose-built, deepest protocol integration). Tier 3: SEBA, Copper (international/European markets).
- ✓Sub-Custody Model: Prime custodian responsible for overall compliance and reporting. Local sub-custodians in each jurisdiction. Nominee custody model (omnibus wallet) tracked at Blockmaze beneficial owner registry level even when on-chain holder is custodian address.
Why Custody Is the Institutional RWA Adoption Blocker
Custody is consistently cited as one of the top three blockers for institutional adoption of tokenized real-world assets — alongside regulatory clarity and secondary market liquidity. The reason is straightforward: institutional investors are required by regulation to hold assets with qualified custodians. Without a custodian that satisfies ERISA, Solvency II, or equivalent requirements, regulated institutional investors cannot legally hold the position regardless of the investment's merits.
According to a BNY Mellon institutional survey, 91% of institutional investors are interested in tokenized assets, yet custody and regulatory clarity remain the leading barriers to allocation. Custody sits at the start of the tokenized asset lifecycle — every distribution, transfer, and redemption downstream depends on where the keys are held.
The custody landscape for digital assets has matured significantly since 2020, with major bank custodians building digital asset capabilities and digital-native custodians obtaining regulatory licenses that bring them closer to qualified custodian status. But the regulatory question is not fully resolved — whether a given digital asset custodian satisfies ERISA custody requirements or Solvency II requirements depends on specific regulatory guidance that is still evolving in most jurisdictions.
“We can build the best tokenized infrastructure bond program in the world. But if we cannot answer 'where is the custody, who holds the keys, and does it satisfy ERISA,' the pension funds cannot participate. Custody is not a technical question — it is a regulatory and fiduciary question.”
— Head of Digital Asset Infrastructure, Global Institutional Investor Services, 2025
Custody Provider Comparison
Institutional RWA custody splits into three tiers: bank custodians (BNY Mellon, State Street, JPMorgan) with the clearest ERISA status, purpose-built digital trust companies (Anchorage, Fidelity, Coinbase, BitGo) with the deepest protocol integration, and international qualified custodians for local regulatory needs.
Research by McKinsey estimates that roughly 2 trillion dollars of assets could be tokenized by 2030 in a base-case scenario — a volume that regulated custodians must be able to hold before pension funds and insurers commit capital at scale.
Anchorage Digital Bank
Federally chartered bank (OCC, 2021)
Strengths
Highest regulatory clarity of any digital custodian. OCC supervision = clearest ERISA qualified trustee status. Institutional API with protocol integration.
Limitations
US-only. Limited to assets with Ethereum/EVM support. Higher pricing than state trust companies.
Fidelity Digital Assets
State trust company (NY BitLicense + state charters)
Strengths
Fidelity brand trust. Deep institutional relationships. Full integration with Fidelity custody infrastructure for traditional + digital positions.
Limitations
Primarily BTC/ETH focused. RWA token protocol integration requires custom work.
BNY Mellon Digital Assets
Full banking license (Federal Reserve supervised)
Strengths
Highest institutional trust. Traditional securities custody + digital in one relationship. ERISA status unambiguous. Global reach.
Limitations
Digital asset protocol integration is less mature than digital-native custodians.
BitGo Trust
State trust company (SD, NY)
Strengths
Most institutional digital asset clients. Deep protocol integration experience. Multi-sig + MPC key management. Institutional insurance coverage.
Limitations
State trust company — ERISA qualified trustee status less clear than OCC charter.
Blockmaze Custody Integration
Blockmaze's protocol integrates with institutional custody providers through a validated transfer flow: a transfer instruction from a custodian is submitted to the protocol, which validates it against the compliance registry (buyer eligibility, holding period, concentration limits) before the token position moves. If the protocol rejects the transfer, the custodian's instruction does not execute — the compliance check is at the protocol level, not delegated to the custodian.
For nominee custody (where the custodian holds tokens in an omnibus address on behalf of beneficial owners), Blockmaze maintains a beneficial owner registry that tracks the actual investor behind each omnibus position. Compliance checks at transfer run against the beneficial owner's registry record, not the custodian's address — ensuring that the compliance perimeter is maintained even when the on-chain token holder is the custodian rather than the investor directly. The same registry feeds the reporting layer described in compliant RWA administration and reporting for asset servicers.
“Custody of digital assets is not simply about holding a private key. It is about meeting the same fiduciary, segregation, and recordkeeping standards that apply to traditional securities — and proving it to regulators and auditors on demand.”
— OECD, The Tokenisation of Assets and Potential Implications for Financial Markets, 2020
For the full institutional infrastructure context, see how custodians ensure compliant RWA transfer with Blockmaze's protocol.
Setting Up Institutional Custody for Your RWA Program?
Blockmaze integrates with leading institutional digital asset custodians — beneficial owner registry, nominee custody support, and protocol-level transfer validation that works with your custodian's key management infrastructure.
Frequently Asked Questions
What is a qualified custodian for tokenized securities?
A qualified custodian for tokenized securities is an institution that meets the custody requirements of applicable securities regulation for holding client assets. In the US, the SEC's Custody Rule (Rule 206(4)-2 under the Investment Advisers Act) requires investment advisers to maintain client funds and securities with a qualified custodian — which includes: (1) banks and savings associations; (2) registered broker-dealers; (3) registered futures commission merchants; and (4) foreign financial institutions that hold client assets in the ordinary course of business. For digital assets and tokenized securities, the SEC's proposed custody rule update (2023 re-proposal) would extend qualified custodian requirements to digital asset securities, requiring that tokenized assets be held by entities that meet specific financial strength, insurance, and operational requirements. Currently, Anchorage Digital Bank, Fidelity Digital Assets, Coinbase Custody (state trust company), and BitGo Trust are the most commonly cited qualified custodians for institutional digital asset custody. Bank custodians (BNY Mellon, State Street, JPMorgan) are building or have built digital asset custody capabilities that would qualify under an extended rule.
How does RWA token custody differ from traditional securities custody?
RWA token custody differs from traditional securities custody in three important ways: (1) Private key management — traditional securities custody involves holding paper or electronic certificates in a centralized depository (DTC in the US, Euroclear in Europe). Digital asset custody requires managing cryptographic private keys that control on-chain token positions. Key loss or compromise is catastrophic and irreversible in a way that paper certificate loss is not. Qualified digital custodians use Hardware Security Modules (HSMs), multi-party computation (MPC), and multi-signature schemes to manage keys without a single point of failure. (2) On-chain compliance integration — traditional securities custodians are passive holders. Digital asset custodians must integrate with the compliance protocol governing the token: they cannot execute transfers that the protocol rejects, and their key management must interact correctly with the protocol's transfer validation logic. Blockmaze requires that custody integrations support the protocol's transfer confirmation flow — a transfer initiated by a custodian is validated against the compliance registry before execution. (3) Regulatory classification — the regulatory status of tokenized securities in custody is still evolving. Whether a token custodied with a digital asset custodian satisfies the SEC Custody Rule, ERISA custody requirements, and Solvency II custody rules depends on the custodian's specific regulatory status, which varies significantly across providers.
What are the ERISA custody requirements for pension funds holding tokenized RWA?
ERISA (Employee Retirement Income Security Act) imposes specific custody requirements on plan assets held by pension funds and ERISA plans: (1) Qualified trustee requirement — ERISA requires plan assets to be held by a qualified trustee or custodian. For digital assets, this means the tokenized RWA position must be custodied by an institution that is either a bank, insurance company, or registered broker-dealer. Digital-only custodians without a banking or broker-dealer license may not qualify as ERISA custodians. (2) Fidelity bonding — persons handling ERISA plan funds must be covered by fidelity bonds. Digital asset custodians must carry fidelity coverage specific to digital asset risks (key compromise, operational failure). (3) Prohibited transaction rules — ERISA's prohibited transaction rules restrict self-dealing and conflicts of interest. If a tokenized RWA fund manager is affiliated with the custody provider, this could be a prohibited transaction requiring an exemption. (4) Indicia of ownership — ERISA requires that indicia of ownership of plan assets be maintained in the jurisdiction of the plan's trustee or at an entity regulated to hold plan assets. For digital assets, 'indicia of ownership' in the context of private key control is an evolving regulatory question. Most ERISA counsel advise that tokenized assets be held by US-regulated entities for ERISA plans.
Which custody providers are most suitable for institutional tokenized RWA?
The institutional tokenized RWA custody market has several tiers: (1) Tier 1 — Bank custodians building digital asset capabilities: BNY Mellon Digital Assets (custody for digital securities, partnered with Fireblocks), State Street Digital (digital asset custody through partnership), JPMorgan Onyx (institutional digital asset services). These carry the highest institutional trust and clearest regulatory status but may have limited support for non-Ethereum asset classes. (2) Tier 2 — Regulated digital asset trust companies: Anchorage Digital Bank (federally chartered, OCC-supervised), Fidelity Digital Assets (state trust company), Coinbase Custody Trust (state trust company), BitGo Trust (state trust company). These were purpose-built for digital asset custody with institutional clients and have the deepest protocol integration capabilities. (3) Tier 3 — International qualified custodians: SEBA Bank (Switzerland, FINMA-licensed), Metaco (acquired by Ripple, institutional digital asset infrastructure), Copper.co (UK FCA-registered). These serve European and international institutional clients with local regulatory requirements. For Blockmaze programs, Tier 2 and Tier 1 custodians with institutional digital asset capabilities are the standard, with custodian selection driven by the regulatory requirements of the specific institutional investors participating in the program.
How does sub-custody work for internationally distributed tokenized RWA?
Sub-custody for internationally distributed tokenized RWA follows a similar structure to traditional securities sub-custody: (1) Prime custodian — the program appoints a prime custodian (typically a major bank or Tier 1 digital custodian) that is responsible for overall custody compliance and investor-facing reporting. (2) Sub-custodians — in jurisdictions where the prime custodian does not operate directly, local regulated sub-custodians hold the on-chain position on behalf of local investors. The prime custodian retains oversight of the sub-custodian and is responsible for sub-custodian due diligence. (3) Token representation — for tokenized RWA distributed across multiple custodian infrastructures, the on-chain token position may be held by the custodian's omnibus wallet address, with individual investor positions tracked in the custodian's internal books. This 'nominee' custody model is common in traditional securities markets but creates a disconnect between the on-chain position (custodian's address) and the beneficial owner (the investor). Blockmaze's compliance registry can accommodate nominee custody by tracking the beneficial owner at the protocol level even when the on-chain token holder is a custodian omnibus address.
Related Articles
Digital Asset Lifecycle Management for RWA Tokenization
Managing tokenized assets from issuance through secondary transfers, corporate actions, and redemption at the protocol level.
How Custodians Ensure Compliant RWA Transfer
The validated transfer flow that lets custodians move tokens only when the compliance registry approves.
Asset Servicers: Compliant RWA Administration and Reporting
How servicers handle post-issuance reporting, corporate actions, and beneficial-owner records alongside custody.
Fund Administration: Streamlining RWA Post-Issuance Compliance
Coordinating fund administrators and custodians for distributions, NAV, and investor reporting on tokenized funds.