What you will learn
- Explain why control of private keys defines control of a digital asset.
- Compare self-custody, custodial and multi-signature arrangements.
Keys determine control
Spending a digital asset requires a valid signature from the private key that controls it. Whoever can produce that signature controls the asset on the ledger, whatever name appears on any account or statement.
This creates two basic arrangements. In self-custody the owner holds the keys and carries all operational responsibility. In custodial arrangements an exchange or custodian holds them, and the customer holds a claim against that firm instead.
Storage models and trade-offs
A hot wallet is online, which is convenient but exposed to malware and phishing. Cold storage keeps keys offline, on a hardware device or a paper backup, which narrows the attack surface but adds the risk of loss, damage or error.
Multi-signature setups need several keys to approve a transfer. A two-of-three design tolerates the loss of one key and resists the theft of one key, but it adds coordination work and depends on where the keys are kept.
Failure modes to examine
Self-custody fails through lost recovery phrases, damaged backups, mistyped addresses and scams, and lost keys generally cannot be recovered. Custodial arrangements fail through hacks, mismanagement, insolvency or frozen withdrawals.
Useful questions for a custodian: are customer assets segregated, can they be lent out, who audits the reserves, and which legal terms apply? No arrangement removes risk; each swaps one set of failure modes for another.
Worked example: Two-of-three failure odds
Suppose each of three keys independently has a 2% chance of failing in a year, where failing means lost or exposed. One key alone fails 2% of the time. A two-of-three scheme has trouble only if at least two fail: 3 × 0.02² × 0.98 + 0.02³ = 0.001176 + 0.000008 = 0.001184, about 0.12%. The gain shrinks if keys share one location or one person's mistakes.
Check your understanding
Repeat the two-of-three calculation when each key independently has a 5% chance of failing. How does the result compare with a single key?
Show answer and explanation
Failure of at least two keys: 3 × 0.05² × 0.95 + 0.05³ = 0.007125 + 0.000125 = 0.00725, or 0.725%. A single key fails 5% of the time, so under independence the setup fails about 5 ÷ 0.725 ≈ 6.9 times less often. Two keys in one drawer would be correlated and weaken that benefit.