The battle for Bitcoin custody in October 2026

Institutional capital and the flow of Bitcoin ETFs

US spot Bitcoin ETFs pulled in $2.4 billion in net inflows for the week ending September 25, 2026. This accumulation reached levels not seen since early October 2025. Year-to-date net flows for spot Bitcoin ETFs sit at $934 million. This recovery follows a period where the category faced a $5.8 billion deficit as recently as mid-July. BlackRock’s iShares Bitcoin Trust attracted $1.2 billion during that week, while Fidelity’s FBTC drew $702 million. ARK 21Shares’ ARKB added $295 million. These three products accounted for 90% of the weekly capital. Bitcoin prices touched $87,000 early in the week before retreating to the $83,000 to $84,000 range. On Monday, inflows peaked at nearly $999 million. On Wednesday, inflows reached $528 million. Total assets under management for spot Bitcoin ETFs reached $108 billion by late September 2026. Since their introduction in January 2024, cumulative net inflows exceed $57 billion. Analysts watch the $95,000 resistance level and the $81,000 floor. Over a five-day period, spot Bitcoin ETFs recorded cumulative net outflows of $679 million.

Technical divergence between MPC and HSM

Institutional investors weigh technical architectures when selecting custodians. Multi-party computation (MPC) uses cryptographic algorithms to allow multiple parties to evaluate a computation without disclosing private data. In a typical MPC setup, three parties like a client, a solicitor, and a custodian split a private key into fragments using sharding methods such as Shamir’s or Blakley’s. A threshold, such as 2-of-3, requires two parties to co-sign a transaction. Because the signature threshold often defaults to 2-of-2 in real-world applications, the client must maintain the same level of security for their private key shard as the professional custodian to prevent the permanent loss of their assets. Chainanalysis reported that 20 percent of the 18.5 million Bitcoin in existence resides in lost or stranded wallets as of 2021. Hardware Security Modules (HSM) provide a different layer of security. These modules use a physical shell to resist electromagnetic interference and radio frequency interference. They incorporate a dedicated encryption chip to prevent malicious infiltration through channel measurement or fault injection. Cactus Custody deploys HSMs in Tier 3 data centers across three continents. Their system requires 2-of-4 signatures from randomly selected data centers. Ledger notes that MPC-only solutions are not ready for production. The complexity of algorithms makes implementing an MPC version of BIP-32 unworkable with more than two signers due to computational complexity. MPC also lacks a way for signers to securely review what they are signing through a trusted display. Will the industry move toward a unified standard for MPC security?

The reality of insurance denials and security breaches

Security failures and insurance disputes create significant hurdles for adoption. DB Insurance denied a 3 billion won claim from Yapian, the operator of Youbit, because the company violated the "advance notice obligation". This violation involves failing to disclose information used to calculate premiums. Yapian filed for bankruptcy after suffering a 17.2 billion won loss due to a cyber attack. The company obtained its insurance policy in December 2025 and stopped transactions in December 2025. The premium for this policy was 250 million won. The policy covered five risks, including information maintenance violation liability, personal information infringement damage, and network security liability. Investigators in South Korea suspect North Korean involvement in the Youbit attack. Bitcoin of America also sued The Silver Logic for failing to implement firewalls and whitelists after hackers stole 11.3 BTC. You know that security depends on the strength of the private key. Chainalysis identified two groups, Alpha and Beta, as the cause of more than $1 billion in cryptocurrency heists. Alpha is a large organization driven by nonmonetary goals, while Beta is a smaller group focused on money.

Competitive dynamics of BitGo and Fidelity

BitGo and Fidelity lead the competition for institutional capital. BitGo manages $90 billion in assets and reported $4.2 billion in revenue during the first half of 2025. The company plans to list on the New York Stock Exchange under the ticker BTGO. BitGo uses dual-class shares to retain control. Underwriters Goldman Sachs and Citigroup support the move. The company’s initial public offering target was $201 million. BitGo serves more than 4,600 institutional clients. Fidelity’s FBTC recorded 391 million dollars in net inflows on a single day in December.