Self-custody for companies: what it means day to day

What self-custody means for a finance team

Corporate self-custody is about control, not simply where a wallet is displayed. The company must control the signing authority required to move its USDC, USDT or other digital assets. A technology provider may host the interface, coordinate approvals and broadcast an authorized transaction, but it should not be able to transfer company funds unilaterally.

This distinction determines what happens during routine payments and exceptional events. Finance leaders need to know who can propose and approve a transfer, which parties participate in signing, how administrators can change those permissions and whether the company can recover access if a signer or provider becomes unavailable.

Self-custody does not eliminate dependence on software, networks or service providers. It limits custody risk by ensuring that no outside provider alone has sufficient authority to move the assets. The quality of the arrangement therefore depends on both its cryptographic design and the company's operating procedures.

How an MPC wallet works

A conventional crypto wallet authorizes transactions with a private key. If a complete key or the seed phrase that recreates it is stored in one place, theft or loss of that material can create a single point of failure.

Multi-party computation, or MPC, divides signing authority into cryptographic shares. The shares participate in a protocol that produces a valid blockchain signature without reconstructing the complete private key in one location. A company can require a threshold, such as participation by two of three authorized signers, before a transaction can be completed.

MPC is different from a smart-contract multisignature wallet. A multisignature wallet generally records multiple signatures through an on-chain contract. MPC normally produces a standard blockchain signature after the required shares participate. Both approaches can prevent one compromised participant from moving funds, but they differ in network compatibility, transaction mechanics, recovery and on-chain visibility.

MPC does not automatically equal self-custody. The decisive questions are who controls the shares, which combinations can sign, who can alter the threshold and how recovery works.

Questions that establish who really controls the wallet

Labels such as non-custodial or self-custodial are not substitutes for an architecture review. Before funding a wallet, document the following answers.

What happens during a normal stablecoin payment

A controlled payment process should separate business approval from technical signing while preserving evidence of both. A typical USDC or USDT payment follows these steps:

1. Create the instruction. A finance user enters or uploads the recipient, amount, asset and network, then links the payment to an invoice, payroll file or treasury instruction.
2. Validate the destination. Confirm the wallet address, supported network and token contract. An address may be technically valid while the recipient's exchange or payment service does not credit deposits made over that network.
3. Check the recipient. Compare the destination with an approved address record and perform sanctions or address screening before the transfer is authorized.
4. Approve the payment. The required people review the business purpose, destination, amount and timing under the company's approval matrix.
5. Sign and broadcast. The necessary signing shares participate, and the authorized transaction is submitted to the selected blockchain.
6. Confirm and reconcile. Finance captures the transaction hash, network fee, approvers, timestamps and supporting documents, then matches the transfer to the accounting record.

Internal approval time and blockchain confirmation time are separate. A transfer may wait for company approvers before it is broadcast; after broadcast, settlement depends on the network and current conditions. A confirmed blockchain transaction generally cannot be reversed by the wallet provider.

The wallet also needs a way to pay network fees. Depending on the chain and product workflow, this may require a balance of its native token, such as ETH for Ethereum or Base and TRX for Tron. Treasury teams should monitor fee-token balances rather than discover a shortfall during an urgent payment.

Controls for common payment risks

How self-custody changes counterparty risk

With an exchange or traditional custodian, a company may hold a contractual claim against the provider rather than direct authority over a specific on-chain wallet. Access can depend on the provider's solvency, account controls, withdrawal procedures and systems. An account restriction or provider failure may delay withdrawals even when a dashboard shows a balance.

In a properly structured self-custodial wallet, the company retains transaction authority. This reduces reliance on a provider to release assets, but it transfers more operational responsibility to the company. Signer security, network selection, destination verification, recovery and recordkeeping become treasury controls rather than tasks delegated entirely to a custodian.

Many companies use a mixed model. They keep operational treasury balances under company-controlled signing while leaving limited amounts with exchanges or other providers for defined trading, conversion or liquidity needs. The appropriate split depends on payment frequency, access requirements and the counterparty exposure the company is willing to accept.

Disaster recovery is part of custody

A custody design is incomplete if it works only while every employee, device and provider is available. Recovery should assume that people leave, hardware fails, credentials are locked and a service can become temporarily inaccessible.

The recovery plan should identify the roles controlling signing authority without placing sensitive recovery material in an ordinary procedure document. It should explain how to replace a lost device, remove a departing signer, approve a quorum change and verify balances independently through a blockchain explorer.

Teams should also determine whether provider-assisted recovery gives the provider an unexpected route to control. A convenient reset process can undermine self-custody if support personnel or a single administrator can bypass the company's signing threshold.

Test recovery with a low-value wallet or controlled exercise rather than the primary treasury. Record who participated, how long each stage took, which dependencies were required and what failed. A recovery procedure that has never been exercised is an untested assumption.

Accounting and audit evidence

The blockchain transaction is only one part of the accounting record. A useful evidence package links the on-chain transfer to its business purpose and internal authorization. It should include the asset and amount, sending and receiving addresses, network, transaction hash, network fee, creator, approvers, signing outcome and supporting invoice or treasury instruction.

Finance should reconcile the wallet independently rather than relying only on the platform interface. Compare opening balances, incoming and outgoing transfers, fees and closing balances against the ledger. Establish a documented method for valuing stablecoin activity and recording network fees under the company's accounting policy.

Stablerail supports corporate treasury operations for a company's own USDC and USDT, including approval and signing quorum, sanctions and address screening before send, global payouts, fiat conversion, corporate cards and exportable audit evidence. Regardless of platform, the company should retain its own records and periodically verify on-chain balances.

Practical self-custody checklist

• Map every signing share, valid quorum and recovery path.
• Require more than one person for material transfers.
• Separate payment creation from approval where staffing permits.
• Verify the recipient, token and network before sending.
• Allowlist recurring treasury, vendor and payroll destinations.
• Use a low-value test transfer for a new or changed address.
• Screen destination addresses before authorization.
• Monitor native fee-token balances where required.
• Remove or replace signers promptly after role changes.
• Reconcile on-chain activity to source documents and the ledger.
• Test signer loss and provider-outage scenarios periodically.

The day-to-day trade-off

Self-custody reduces dependence on an exchange or custodian to release company assets, but it does not make treasury operations automatic or risk-free. The strongest setup is one where signing authority, approval responsibilities, recovery routes and accounting evidence are explicit and tested. For finance teams, control over the assets must be matched by control over the process used to move them.