Custodial vs Non-Custodial: Who Actually Holds Your Funds?

Your balance says the funds are there. But a balance on a screen and control of the funds behind it are two different things. The question that separates them is short: who can move the money?

On a blockchain, the answer comes down to keys. Whoever holds the private key that can sign a transaction from an address can move what that address holds. Everything that gets called custodial or non-custodial is a different answer to the question of who that is.

This piece stays vendor-neutral on purpose. It explains the two ends of the spectrum, the multisig setups that sit between them, and the questions that tell you which model you are actually using, whether you hold crypto yourself or trade with someone else's capital.

What Custody Means on a Blockchain

In traditional finance, custody means a bank or broker keeps your assets and its books record that they belong to you. On a public blockchain, there are no books in that sense. There is an address, and there is a private key that can authorize transactions from it.

A wallet address is the public identifier derived from a key pair; you can share it freely, while the private key stays secret. The private key is the part that signs. If you can sign, you can move the funds. If you cannot, you can only ask someone who can.

That makes custody a technical fact before it is a contractual one. Control follows the key, not the name. A screen can show your name next to a balance, but if a provider holds the key, the provider decides whether a transfer happens, and when.

One more term matters here. A seed phrase is a list of words from which a wallet can recreate its private keys. Holding the seed phrase is, in practice, holding the keys.

So when you ask whether something is custodial or not, you are asking one precise thing: which person or company holds the keys, or the seed phrase, that can sign a transfer of these funds. Nothing else decides it.

Custodial: Someone Else Holds the Keys

In a custodial setup, a provider holds the private keys on your behalf. The textbook example is an account on a centralized exchange. You deposit funds to an address the exchange controls, and from then on the exchange keeps its own record of what belongs to you.

That internal record is the part to understand. Inside the exchange, your trades and transfers between users are entries in the provider's database, not transactions on a blockchain. The chain only sees funds moving into and out of the exchange's addresses.

A balance there is a claim, not a key. It says the provider owes you that amount. It does not give you the power to move it.

Custody has real advantages, and they are worth stating plainly. If you forget a password, there is a recovery process. If something goes wrong, there is a support desk to contact. You never have to back up a seed phrase or check the details of a transaction before you sign it. Those are legitimate reasons to choose a custodian.

The cost is what you rely on. You rely on the custodian to secure its own keys, to hold enough assets to cover what it owes its users, and to process your withdrawal when you ask for it.

A custodian can pause withdrawals, freeze an account or fail outright. In each of those cases you cannot move the funds yourself, because you never held the keys. You hold a claim.

That dependence is exactly what a custodian's reserve disclosures try to address, and it is worth knowing what a proof of reserves does and doesn't prove before you treat one as an answer.

Non-Custodial: You Hold the Keys

Non-custodial means no third party holds the keys that control your funds. You do. In a self-custody wallet, the private keys are generated and kept on your own device, or on a dedicated hardware wallet, and a transfer happens only when you sign it.

Non-custodial applications follow the same principle. A non-custodial exchange or trading app lets you trade through smart contracts, while the funds stay under your keys until you sign a transaction. The app can show you prices and prepare a transaction for you. It cannot move your funds without your signature.

The trade-off is responsibility. No provider can freeze your wallet, but no provider can recover it either. If you lose both the device and the seed phrase, the funds are out of reach. If someone else gets the seed phrase, they control the funds just as fully as you do.

And because you sign everything yourself, you also carry the consequences when you sign a harmful transaction or send funds to the wrong address. Nobody can stop you, including from mistakes. The same fact that keeps a custodian out also keeps a safety net out.

There is a subtler point too. Non-custodial describes who holds the keys, not whether every risk is gone. A smart contract you deposit into can contain bugs.

A contract can also have admin functions that let its operators pause it or change its rules. And a token approval you signed months ago can let a contract move that token from your wallet later, without a fresh signature from you.

Your keys can stay yours while something you signed still acts on your funds. That is why the label is a starting point for questions, not the end of them.

Multisig: The Middle of the Spectrum

Between a provider holding every key and you holding a single key, there is a third model. A multisig, short for multi-signature, is a wallet or contract that moves funds only when a set number of keys out of a larger group approve the transaction. In a two-of-three setup, for example, any two of the three keyholders must sign before anything moves.

The point of a multisig is that no single key is enough. In a setup like that, one lost key does not lock the funds, and one stolen key cannot move them on its own. Control is spread across several holders, and so is the risk of failure.

What a multisig does not decide on its own is whose funds these are, in any practical sense. That depends entirely on who holds the keys:

• If a provider or a team holds all the keys, it is still custody. It is custody with internal checks, because more than one person has to agree, but you hold none of the keys.
• If you hold some of the keys and a service holds the others, control is shared only if the service holds fewer keys than the threshold requires. In that case, the service cannot reach the threshold without you, and whether you can reach it without the service depends on how many keys you hold. If the service holds enough keys to reach the threshold alone, it is still custody, even though you hold a key.
• If you hold all the keys, for example on separate devices in separate places, it is self-custody with a backup built in.

The signature count is not the answer. The keyholder list is. The same mechanism can describe a firm protecting its treasury against a single rogue signer or a person protecting savings against a single lost device. How multisig wallets work under the hood is a topic of its own; for custody, the only question is who signs.

How to Tell Which Model You Are Using

Labels drift. A product can call itself non-custodial because one part of it is, while another part still depends on someone else's keys. These questions cut through the label:

1. Who can sign a withdrawal? If the answer includes anyone other than you, someone else has at least partial custody.
2. Can you move your funds without anyone's approval? If you need a support ticket, a manual review or a working website to get them out, you are relying on whoever controls that path.
3. Do you hold a seed phrase or a key yourself? If you never saw one, you most likely do not hold the keys.
4. Where does your balance live? An address you can look up on-chain is different from a number in a provider's database.
5. Who can pause, upgrade or change the contracts involved? Admin keys are keys too, and they belong on your list.

The fourth question is one you can answer yourself. If your funds sit at an address, you can read the balance and transaction history of a wallet on a block explorer and see what the chain says rather than what a dashboard says. An explorer will not tell you who holds the key behind an address. It will tell you whether the funds are where you were told they are.

The fifth question looks beyond the wallet itself. A wallet can be entirely yours while the contract it deposits into is controlled by a small group of keyholders. Read both layers. Then decide which model you are in.

What Changes When the Capital Isn't Yours

Everything above assumes the funds are yours. Prop trading turns the question around. You trade an account the firm sets up, not your own deposit, and the money that pays out your profits sits with the firm. The keys to it were never going to be yours. Asking whether a prop firm is custodial or non-custodial in the wallet sense does not get you far.

The useful questions are narrower: who can move the capital that backs funded accounts, whether one person holds that power or several signers have to agree, and whether you can see any of it yourself or only through the firm's own dashboard.

Those questions apply to the capital behind your account and to the payouts you expect, because a payout is a transfer that someone has to sign.

You will not get a useful answer by asking whether a firm is non-custodial. You will get one by asking who signs. If you want to see what a firm's disclosure can look like, here is what CarrotFunding publishes about its wallets and fund flows. Read it with the questions above in mind.

Conclusion

Custodial and non-custodial are not two brands of the same product. They are two answers to one question: who can sign. A custodian offers convenience and recovery in exchange for your reliance on its security and its solvency. Self-custody removes that reliance and hands you the full weight of keeping keys safe and signing carefully. Multisig lets either side spread that weight, but only the keyholder list tells you where control really sits.

So the decision in front of you is not which label sounds safer. It is which party you are willing to rely on, for which funds, and whether you can check that reliance yourself instead of taking it on trust.