NewsCryptoBitGo Says It Cannot Touch Client Assets Without Explicit Permission

BitGo Says It Cannot Touch Client Assets Without Explicit Permission

Author: CryptoBriefing·

Key Takeaways

  • •BitGo's custodial services agreements prohibit the firm from accessing or deploying client assets without direct client authorization, and clients retain full ownership of funds held in custody.
  • •Client assets are held on a strict 1:1 basis with no rehypothecation and are maintained in segregated accounts separate from BitGo's own balance sheet.
  • •BitGo relies on multi-signature wallets and multi-party computation, both of which restrict unilateral transaction approval so no single party can move funds alone.
  • •BitGo carries up to $250 million in insurance coverage from Lloyd's of London, a figure that represents a coverage ceiling rather than a guarantee against all possible losses.
  • •The reaffirmation comes as BitGo expands into prime brokerage, staking, and tokenized assets, while its federally chartered banking arm, BitGo Bank & Trust, NA, is overseen by the Office of the Comptroller of the Currency.
BitGo Says It Cannot Touch Client Assets Without Explicit Permission

BitGo Chief Product Officer Eugene Hahr has reaffirmed that the digital asset custodian operates strictly as a custodian and cannot access or redeploy client assets without explicit client authorization.

The statement comes at a pivotal moment for the company. BitGo is pushing into prime brokerage, staking, and tokenized assets—business lines that routinely prompt institutional clients to ask a fundamental question: where does their money actually sit, and who is able to move it?

Contractual Commitments, Not Marketing Claims

According to BitGo, the commitment is embedded directly in its custodial services agreements. Under those contracts, BitGo cannot access or deploy client assets without direct authorization from the client.

Ownership follows the same principle. Clients retain full ownership of their assets at all times, and no transfer of ownership occurs when funds are placed into BitGo's custody.

BitGo further states that assets are held on a strict 1:1 basis with no rehypothecation. The term refers to the practice of a custodian taking assets that a client has pledged or deposited and reusing them for its own purposes, such as lending them out or posting them as collateral elsewhere. BitGo says that does not happen with client funds: one coin deposited means one coin held. That distinction carries industry weight. The 2022 collapse of crypto exchange FTX, in which customer funds were commingled and used by an affiliated trading firm, turned segregation and rehypothecation policies into standard due-diligence questions for institutional allocators.

Client assets are also kept in segregated accounts, meaning they are not pooled together with the company's own balance sheet.

In addition, BitGo says it carries up to $250 million in insurance coverage from Lloyd's of London. That figure represents a ceiling on coverage rather than a guarantee that every possible loss would be made whole.

The Technology Enforcing the Paperwork

Contracts are only as strong as the systems that back them. BitGo relies on two technologies to underpin its promises: multi-signature wallets and multi-party computation, commonly abbreviated as MPC.

Multi-signature is the crypto equivalent of a joint bank account that requires more than one signature on every check. A transaction only goes through when several separate keys approve it, so no single party can push funds out the door alone.

MPC reaches a similar outcome by a different route. Instead of using several full keys, one key is mathematically split into shares held by different parties. Those shares cooperate to sign a transaction without the complete key ever existing a single location.

Both setups restrict unilateral transaction authorization, according to BitGo. In practical terms, the company has engineered its systems so that it cannot quietly move client funds on its own, even if someone internally wanted to.

Why Custody Is Drawing More Attention Now

BitGo is no longer just a vault. The company has expanded into prime brokerage and stablecoin services, and it is building out staking and tokenized asset offerings.

BitGo says it serves thousands of institutional clients. Its banking arm, BitGo Bank & Trust, NA, is a federally chartered institution overseen by the Office of the Comptroller of the Currency, or OCC, the US regulator that charters and supervises national banks.

Hahr has also argued that strong custody infrastructure is essential for scaling tokenized equities in markets that run around the clock. Traditional stock exchanges close overnight and on weekends, while crypto markets never do. If tokenized stocks trade 24/7, the plumbing holding them has to operate around the clock as well. The tokenization push is part of a broader industry shift: major asset managers, including BlackRock, have launched tokenized funds on public blockchains since 2024.

What It Means for Institutions and the Custody Race

For institutional clients, the message is one of control. Funds remain theirs, stay segregated, and cannot be redeployed without their sign-off.

The more interesting tension is commercial. Prime brokerage and staking are typically where custodians generate additional revenue, and in some business models that revenue comes from putting client assets to work. The stakes of that line are familiar from traditional finance: prime brokers there routinely rehypothecate client collateral under standard agreements, and Lehman Brothers' 2008 bankruptcy left some hedge fund clients as unsecured creditors after their assets had been rehypothecated. BitGo is effectively signaling that it intends to grow in those areas without crossing the line from custodian to user of client funds. Clients can opt in to activities such as staking, but the default is that nothing moves without them.

How BitGo structures opt-in products such as staking and tokenized assets—contexts where client assets are, by design, put to work—and whether each use remains gated behind explicit client authorization will be the practical test of those commitments as its expansion continues.