The True Cost of Bitcoin Custody and Insurance
What pricing reveals about Multi-Institution Custody and the economics of protecting bitcoin. What holders say they want from custody, what they actually fund, and why the distance between the two decides which custodians last.
What somebody wants and what they’ll pay for are two different things.
Ask any bitcoin holder what they want from custody and the list is beautiful. Ask what they’d pay for and the list gets short fast.
That gap is the market working, not failing. You can insure almost anything; there is an underwriter somewhere for every risk at some price. Nobody insures a shirt. Insurance earns its premium when a loss would be catastrophic and the risk cannot be engineered away.
So the existence of a policy tells you nothing about a custody model. What risks the model still carries, and who pays to cover them, tells you everything.
Ask what they want from custodyAsk what they’d pay for
- A 3-of-5 quorum across independent institutions
- Keys in multiple jurisdictions
- A seat in the quorum for the client themselves
- Around-the-clock monitoring
- Inheritance built in
- A named policy covering every satoshi one-to-one
Every item on that list is buildable, and we intend to build all of it. Sequencing is the discipline. Pioneering Multi-Institution Custody cost more to operate at the start, and scale has driven that cost down to the pricing clients see today.
“Insured” is the least informative word in the custody market.
Until recently, bitcoin insurance offered two structures and nothing sensible in between. Both ends were selling a feeling.
“Bitcoin insurance had a barbell problem: trust a single-custodian policy that never covers 100% of assets, or insure a bespoke self-custody setup at cost-prohibitive premiums. Multi-institution custody collapses that barbell entirely.”Michael Tanguma · CEO, Onramp
What actually protects bitcoin
More bitcoin has been lost behind a false sense of security than to the absence of an insurance policy. In every era of this asset class, catastrophic losses came from architecture nobody examined, sitting behind an assurance everybody trusted.
When a custody pitch leads with the policy instead of the architecture, ask why the risks being insured still exist in the model at all.
Someone has to get paid for all of it.
The baseline cost of custody done properly barely varies between competent providers. The market is still maturing around this point, but the direction is set: paying for custody in bitcoin is a feature, not a bug, when it is done the right way.
Custody as the wedge
An exchange can offer custody cheaply, even free, because custody is not the business. Trading fees, spreads, lending, and order flow pay for it, and the custodied assets feed those revenue lines. The same logic reaches any provider whose economics depend on an adjacent line of business.
Three institutions share the economics
The best analogy is banking before fiat, when a bank’s business was safeguarding clients’ precious assets and it earned a market-clearing fee for exactly that. The fee was the product, and everyone understood what it bought.
Three distinct regulated entities each hold key material, each run their own security operations, compliance, and audits, and each must earn a return for standing behind the quorum. Honest distributed custody will never be the cheapest headline in the market. That difference is not margin. It is the cost of removing the single point of failure, paid to the institutions that actually remove it.
Either the economics are subsidized to buy share, and subsidized economics end. Or the margin lives in an adjacent product the client is expected to buy next, at attach rates the product’s own pricing makes unlikely. And where coverage is optional, the lowest headline often pairs with terms that disclaim liability for nearly everything that could go wrong.
Custody is measured in decades, and the provider’s survival is itself a security property. A sound custodian prices at the market-clearing level so its security operations can scale with the balances it protects, because securing $1 billion and securing $100 billion are not the same job. A company that cannot fund its own cost stack eventually raises prices on a captive base, cuts the controls the model depends on, or exits and forces a migration nobody planned for. All three land on the client.
Engineer the risk away. Insure only what remains.
The risks that cost 0.8% a year to insure elsewhere are, in this architecture, largely gone before an underwriter picks up a pen. What remains is genuine tail risk, which is what insurance is actually for.
The category had to be built first
When Onramp and Native brought Multi-Institution Custody to Lloyd’s of London, underwriters had never seen a multi-redundancy custody setup in practice. The design brief had three requirements. The solution was to insure the residual, not the architecture.
The policy was scoped to the residual institutional factor no key ceremony can design away: collusion among the institutions in the quorum itself. Narrower scope, honestly drawn, is what made the economics work.
What Lloyd’s validated before quoting terms
- No single custodian can unilaterally access client assets
- Consensus mechanisms across independent regulated entities
- Permission structures and authorization workflows
- Collusion scenarios and their likelihood, analyzed
Canopius re-underwrites the model annually and has priced it accordingly.
Insure the tail at the company level. Hand the client protection they never get billed for.
Digital asset custody insurance through Canopius, a Lloyd’s of London syndicate, covering Onramp’s custody operations. Coverage is conditioned on Onramp’s declared security controls, so a claim examines our operation, never a client’s personal key handling.
Standalone policy on the open market
The architecture already did the work
Named policy at Onramp (optional)
Most people, shown all three columns, take the middle one. Almost nobody chooses to pay close to 1% a year to hold the risks themselves.
Getting underwritten is itself an examination.
The world’s most established insurance market only underwrites custody architectures it considers low-risk, which is why single-custodian models rarely qualify for comparable coverage. The alternative pitch in this market is “read the policy.”
Three independent parties examine this operation on a recurring cycle. The policy is one of them.
The companies that last close the gap with engineering instead of a premium.
Remove the risk by architecture, insure the tail at the company level, and let scale compress the cost to flat monthly pricing within each tier, stepping up as the relationship grows. That is the whole model.
Currently $100 a month for clients under five bitcoin
This report is informational only and does not amend or replace any insurance policy; policy terms govern. Policy-level questions are handled by Native, the regulated insurance broker on Onramp’s custody policy. Onramp is registered with the Financial Crimes Enforcement Network (FinCEN) as a money services business; registration does not constitute endorsement by FinCEN or any government agency. Nothing here is investment, legal, or tax advice.