Stablecoin Custody:
The Complete Guide.
Over $230 billion sits in stablecoins. But who custodies the reserves? How are they verified? And what happens if a custodian fails? This guide covers everything you need to know about stablecoin reserve custody — from architecture to regulation.
Table of Contents
What Is Stablecoin Custody?
Stablecoin custody refers to the safekeeping of reserve assets that back a stablecoin's value. When you hold USDC, USDT, or PYUSD, you're trusting that the issuer has placed real dollars — typically US Treasury bills and bank deposits — with a regulated custodian who holds them separately from the issuer's own funds.
The custody architecture matters because it determines what happens if the issuer fails, if a bank collapses, or if reserves are mismanaged. A stablecoin is only as reliable as its custody chain.
Stablecoin custody ≠ wallet custody. When we talk about stablecoin custody, we mean who holds the reserves (Treasuries, cash) that back each token — not who holds your private keys to the tokens themselves.
The stablecoin custody chain has four layers: the issuer who creates the token, the custodian who holds the reserves, the auditor/attestor who verifies the reserves, and the regulator who oversees the operation.
The Three Reserve Models
Not all stablecoins custody their reserves the same way. There are three dominant models, each with different risk profiles.
Multi-Institution Reserves
Reserves are distributed across multiple regulated institutions. USDC uses this model: US Treasuries held by BlackRock (Circle Reserve Fund) and cash deposits at BNY Mellon. If one institution fails, reserves aren't concentrated in a single point of failure.
Example: Circle (USDC) — BlackRock + BNY Mellon
Single-Custodian Reserves
All reserves are held by a single custodian or through a single arrangement. This is simpler to manage but creates concentration risk. If the custodian has operational issues, all reserves are affected.
Example: Tether (USDT) — Cantor Fitzgerald
Algorithmic / Endogenous Reserves
Reserves are backed by crypto-native assets or algorithmic mechanisms rather than traditional financial assets. These models have the weakest custody guarantees because the backing assets are volatile.
Example: DAI — Crypto-collateralized (ETH, stETH, USDC)
Who Are the Custodians?
The custodians behind the major stablecoins range from the world's largest bank to a single brokerage firm. Understanding who holds the reserves is essential to evaluating stablecoin risk.
| Stablecoin | Reserve Custodian(s) | Custodian Type | Regulation |
|---|---|---|---|
| USDC (Circle) | BlackRock + BNY Mellon | Asset Manager + Bank | US (49 state MTLs) |
| USDT (Tether) | Cantor Fitzgerald | Brokerage Firm | BVI / El Salvador |
| PYUSD (PayPal) | Paxos (as issuer) | NY Trust Company | NY DFS |
| USDP (Paxos) | Paxos Trust | NY Trust Company | NY DFS |
| RLUSD (Ripple) | TBD (NY DFS approved) | Trust Company | NY DFS |
| BUSD | Discontinued (Paxos) | — | — |
How Reserves Are Verified
Reserve verification is the mechanism by which holders can confirm that a stablecoin is actually backed. There are three levels of verification assurance.
Full Audit
Highest AssuranceA comprehensive examination of financial statements by an independent auditor under AICPA or PCAOB standards. Includes testing of internal controls. No major stablecoin has completed a full audit as of 2026.
None currently
Attestation
Medium AssuranceAn independent accountant verifies specific assertions (e.g., 'reserves ≥ tokens outstanding') at a point in time. This is what Circle (Deloitte) and Paxos (WithumSmith+Brown) publish monthly. Tether publishes quarterly through BDO Italia.
Circle (monthly), Paxos (monthly), Tether (quarterly)
Self-Reported
Lowest AssuranceThe issuer publishes reserve data without independent verification. This provides minimal assurance and relies entirely on trust in the issuer.
Smaller stablecoins, DeFi-native stablecoins
Attestation ≠ Audit. An attestation verifies a specific claim at a point in time. An audit examines the entire financial operation over a period. No major stablecoin issuer has published a full, independent audit. Our USDT vs USDC comparison breaks this down in detail.
GENIUS Act Custody Requirements
The GENIUS Act (signed July 2025) is the first US federal law regulating stablecoin reserve custody. It establishes mandatory requirements that all stablecoin issuers operating in the US must meet by July 2027.
Key custody requirements include:
How to Evaluate Stablecoin Custody
When evaluating a stablecoin's custody architecture, ask these five questions. The answers determine how much trust you're placing in the system.
1. Who holds the reserves?
Is it a regulated bank (BNY Mellon) or an offshore brokerage? Is there concentration in a single custodian or distribution across multiple institutions?
2. How are reserves verified?
Monthly attestations by a Big Four firm? Quarterly reports from a lesser-known auditor? Or self-reported data with no independent verification?
3. What assets back the stablecoin?
Short-term US Treasuries are the gold standard. Cash in FDIC-insured banks is solid. Commercial paper, corporate bonds, or crypto-native assets carry more risk.
4. Are reserves legally segregated?
If the issuer goes bankrupt, can creditors access the reserves? Segregated accounts in trust structures protect holders. Commingled reserves do not.
5. What jurisdiction governs?
NY DFS oversight provides the strongest regulatory framework. BVI or other offshore jurisdictions have weaker enforcement mechanisms.
Stablecoin Custody Scores
We score every stablecoin issuer and custody provider across six categories: custody architecture, ease of use, fees, features, transparency, and support. Compare them all side by side.