PROOFOFCUSTODY
Scores
Incidents
Learn
About
Get the Report
PROOFOFCUSTODY

The independent scoring system for Bitcoin custody. Every platform scored and ranked.

$1B+ in assets under custody expertise

No spam. Unsubscribe anytime.

PLATFORM SCORES
All ScoresCompareMethodologyIndependence StandardDataCustody Assessment
LEARN
Bitcoin 101Custody GuidesCustody InsuranceIs Your Setup Safe?Custody TimelineIncidentsFAQQuiz
COMPANY
AboutAuthorsEditorial IndependenceChangelogCorrections
RESOURCES
PodcastPressReport
CONNECT
Twitter / XLinkedInYouTubehello@proofofcustody.io
2026 Proof of Custody. Published by Onramp Bitcoin. Editorial Independence.PrivacyTermsproofofcustody.io
Situation

I am retired with a large holding on one hardware wallet and three heirs. What should change?

It depends on whether your heirs could reconstruct what you built, together, after you. One device and one seed is a plan that is tested exactly once, and at this size a single lost seed or one coerced evening is total loss. The exposure ceiling flags that whatever else the setup scores. The models that remove the single point of failure without asking three people to run a signing ceremony are multi-institution custody and, where a technical heir exists, collaborative multisig with a documented inheritance service. Selling into an ETF is a taxable sale and swaps key risk for issuer and custodian concentration; it is a trade-off, not an answer.

What decides it
  • Which heir, if any, can handle keys
  • Single point of failure at this size
  • A documented inheritance mechanism, not a drawer
  • Tax consequences of moving the holding

Which custody models fit, by the published rules

Fit engine rules 0.1 (1 Nov 2026), with this situation's inputs preset. Adjust the inputs to your own case. Proof of Custody is published by Onramp Bitcoin, which appears here where its custody model fits and is scored by the same methodology as every other platform.

Multi-institution custody
fits · 100
  • The recoverer works with identity documents and institutions, not devices.
  • No single party can move or lose the holding alone, which matters most at this size.
  • Long horizons favour structures that do not depend on one party staying solvent and competent.

Recovery: Identity and authority documents to the institutions; no device, seed or ceremony on the heir's side.

Onramp90publisherOnramp Lending83publisher
Qualified custodian
partial · 55

Single point of failure at this size: one device, company or person can lose the whole holding.

  • The recoverer works with identity documents and institutions, not devices.
  • You hold nothing that can be lost.

Recovery: Identity and authority documents to the custodian; the custodian's own succession procedure.

Onramp Finance89publisherFidelity Digital Assets76Choice by Kingdom Trust73Choice by Kingdom Trust73BitGo71Sygnum70
Collaborative multisig
partial · 55

Fits only where the provider documents an assisted inheritance path the recoverer can follow with support; otherwise the arrangement becomes a puzzle box the day you are gone.

  • No single party can move or lose the holding alone, which matters most at this size.
  • Long horizons favour structures that do not depend on one party staying solvent and competent.

Recovery: Locate the devices and seed backups, run a signing ceremony with the provider's key; or, where the provider documents an assisted inheritance path, follow that path with the provider.

Unchained85Unchained84Casa82Unchained IRA81Unchained IRA81Unchained Lending80
Exchange or single-custodian account
partial · 50

Single point of failure at this size: one device, company or person can lose the whole holding.

  • The recoverer works with identity documents and institutions, not devices.
  • Password recovery exists, at the cost of counterparty risk.

Recovery: Prove identity and, for an estate, present letters of administration to the company's support desk.

River82Swan Bitcoin80Fidelity Crypto74Strike74Strike (Global)70Cash App69
Spot bitcoin ETF
partial · 50

Single point of failure at this size: one device, company or person can lose the whole holding.

  • The recoverer works with identity documents and institutions, not devices.
  • Nothing to lose but a brokerage login.

Recovery: The brokerage's beneficiary or estate process; no keys involved.

iShares Bitcoin Trust (IBIT)77Fidelity Wise Origin (FBTC)76Bitwise Bitcoin ETF (BITB)74ARK 21Shares (ARKB)70Franklin Bitcoin ETF (EZBC)70Grayscale Bitcoin Mini (BTC)69

Excluded by the rules: Self-managed multi-vendor multisig (Recovery floor: this model requires the recoverer to run a hardware wallet and handle a seed phrase, and the person you named cannot be expected to.); Single-signature hardware wallet (Recovery floor: this model requires the recoverer to run a hardware wallet and handle a seed phrase, and the person you named cannot be expected to.)

These are custody models that fit the situation described, by Proof of Custody's published rules, version 0.1 (1 Nov 2026). They are not a recommendation to buy, sell, move or hold anything, and not legal, tax or estate advice.

Tests to run on any provider you shortlist

Buyer refuses to manage any hardware

The buyer will not store a device, will not write down a seed phrase, and will not be responsible for anything physical.

  • No hardware device required of the buyer at setup or for ongoing access
  • No seed phrase or backup material held by the buyer
  • Access through software the buyer already uses, with account recovery that does not depend on the buyer's own key material
  • A documented path for the buyer's heirs that also requires no hardware
Holding over $10M

The buyer holds more than $10M and needs the arrangement to survive scrutiny from a board, an auditor and an insurer.

  • Insurance terms disclosed: carrier, limit, whether the limit is per client or an aggregate, and what is excluded
  • No shared key material or shared signing infrastructure across clients, or a clear explanation of what is shared
  • Named operational contact with a response commitment
  • Independent examination of custody operations within the last twelve months
Routing row INH-03

Agent tool: fit_custody_setup. Primary sources: poc-scores, poc-hardware. Refresh: rules versioned. All routes.

Hardware wallet rubric →Spouse cannot recover →
Add to your agent

Free, read-only, no key. Every answer carries its source URL, as-of date and the publisher disclosure.

Add to ClaudeAdd to CursorAdd to VS CodeChatGPT and other agents →