Crypto Custody Insurance Cost 2026: Cold vs Hot Wallet Coverage, Limits and Premiums

What crypto custody insurance costs and what it actually covers

If you run or vet a digital-asset custodian, here is the blunt version: there is no sticker price, and the coverage is narrower than most people assume. Custody insurance protects against the theft, physical loss or destruction of the crypto you hold on behalf of clients. It does not protect against the price of that crypto falling, a protocol getting exploited, or a bad trade. My read is that the single biggest mistake buyers make is confusing “insured” with “protected against everything,” and the second is assuming a policy that covers cold storage will pay out on a hot-wallet breach. It usually will not.

On price, the workable rule of thumb in 2026 is this: cold-storage coverage is comparatively cheap and available, hot-wallet coverage is expensive and scarce. Cold-storage specie programs commonly price at a low single-digit rate on line, meaning roughly 1-2% and up of the limit purchased per year, though a strong applicant with excellent controls can do better and a weak one worse. Hot-wallet exposure prices at a multiple of that, sometimes several times higher, and often you simply cannot buy the limit you want at any price. Everything else in this guide explains why those two worlds are priced so differently and how to get the best terms in each.

Why cold and hot wallets are insured on completely different terms

The whole market splits along one line: is the private key connected to the internet or not? A cold wallet keeps keys offline, typically air-gapped, in hardware security modules or physical vaults, with multi-signature or multi-party-computation controls so no single person can move funds. A hot wallet holds keys on internet-connected systems so the custodian can process withdrawals quickly. From an underwriter’s chair, those are almost different risks.

Feature	Cold-wallet (specie) coverage	Hot-wallet (crime) coverage
Policy type	Specie / stored-asset	Crime / computer fraud
Peril insured	Physical loss, theft, destruction of offline keys	Theft, hacking, funds-transfer fraud, employee dishonesty
Capacity available	Broader, deeper	Scarce, capped
Typical rate on line	Low single digits	A multiple of cold storage
Deductible	Meaningful	Higher, often percentage-based
Underwriter comfort	Higher (air-gapped)	Lower (attack surface)

The practical consequence: most custodians insure the overwhelming majority of client assets in cold storage and keep only operational float in hot wallets. Insurers reward that structure. If your hot-wallet balance is a small, capped percentage of the book with tight withdrawal controls, you get a far better program than a platform running large connected balances. The same discipline that makes a custodian safe also makes it insurable.

How the Lloyd’s specialty market and players like Evertas fit in

Very little of this coverage comes from mainstream commercial insurers you would recognize from a homeowner’s policy. It concentrates in the London specialty market, historically the Lloyd’s of London syndicates that have insured vaults, gold and fine art through specie underwriting for a century, plus a cluster of Bermuda and specialty carriers. Specialist managing general agents such as Evertas underwrite or arrange digital-asset programs on behalf of that capacity, and carriers such as Relm write it directly. You reach them through specialty brokers, most commonly Marsh, Aon or Lockton, who assemble the program.

Because no single syndicate wants concentration risk on one custodian, large programs are built as towers: a lead insurer takes the first layer, and successive layers stack on top from different syndicates and carriers until the target limit is reached. This is why a custodian can advertise “$500M+ in insurance” that no one carrier is actually standing behind alone. It also means capacity is genuinely finite. Aggregate market capacity for digital-asset custody is small relative to total assets under custody, so even large custodians insure a fraction of what they hold and self-retain the rest. That structural scarcity is the backdrop for everything about pricing.

What actually drives the premium

Two custodians holding the same dollar value of crypto can pay wildly different premiums. The underwriter is pricing the probability of a claim and the size of it, and a short list of factors moves the needle.

Premium driver	Effect on price	Why underwriters care
Limit purchased vs assets held	Larger limit costs more in absolute terms	Bigger payout exposure
Hot-vs-cold split	More hot exposure raises the rate sharply	Attack surface and speed of loss
Security controls (MPC, multi-sig, HSM)	Strong controls lower the rate	Fewer single points of failure
Audits (SOC 2 Type II, ISO 27001)	Clean reports lower the rate	Independent verification of controls
Insider controls, segregation of duties	Weak controls raise the rate or cap limits	Employee theft is a top loss cause
Jurisdiction and regulatory status	Regulated, transparent regimes help	Enforceability and oversight
Loss history and time in market	A clean multi-year record helps	Demonstrated operational maturity
Deductible chosen	Higher retention lowers premium	Buyer shares more of the loss

Notice how much of this is operational, not financial. An applicant with a fresh SOC 2 Type II report, documented multi-party key ceremonies, hardware security modules, penetration-test results and a clean loss run negotiates from strength. This is the same logic that governs pricing in adjacent specialty lines: the way a broker builds and defends the security story for a crypto program is not far from how a firm shapes its cyber liability insurance for a small business, where documented controls, not size alone, decide the rate. And just as small businesses learned that a crime or cyber tower sits on top of, not inside, their general business liability insurance, a custodian’s specie and crime program is separate from the ordinary liability and directors-and-officers cover the company also needs.

How to actually get a quote

The process is closer to arranging a complex commercial program than clicking “buy.” Expect it to take weeks, not minutes.

1. Engage a specialty broker who places digital-asset risk. This is not a retail product; the broker’s relationships with Lloyd’s syndicates and specialty carriers determine what capacity you can even access.
2. Complete a detailed underwriting submission. This covers architecture, the cold-vs-hot split, key management, custody technology (self-built vs a third-party custody platform), governance and insider controls.
3. Provide independent evidence: SOC 2 Type II or ISO 27001 reports, penetration tests, proof-of-reserves practices, disaster recovery and business continuity plans.
4. Underwriters may request a call or technical review, especially for large limits.
5. The broker assembles a tower, negotiates each layer’s rate, deductible and sublimits, and returns a program you can accept or refine.

The quality of the submission is not a formality. A thin, vague application signals weak controls and gets priced accordingly or declined. Applicants that treat the submission as a chance to show off their security posture consistently get better terms.

The exclusions that catch custodians off guard

This is where buyers get hurt. A policy can be genuine, in force, and still not pay a specific loss because of how it is scoped. Read the exclusions before the limit.

Common exclusion or limitation	What it means in practice
Private-key mismanagement by the insured	Loss from the custodian’s own negligent key handling may be denied
Protocol / smart-contract / DeFi risk	Exploits of code the assets are deployed into are generally not covered
Market and price risk	A token losing value or depegging is never an insured peril
Senior-principal or owner acts	Some crime policies exclude dishonesty by the controlling people
Unexplained or mysterious disappearance	May be excluded or require a higher standard of proof
War, nation-state, infrastructure failure	Broad exclusions can apply depending on wording
Forks, airdrops, protocol changes	Value or asset changes from chain events may fall outside cover

The insider-theft point deserves care because it is a leading cause of real losses. Crime policies can cover employee dishonesty, but many require proof that the employee intended to cause the loss and to make a personal gain, and some carve out acts by directors or owners. A custodian relying on “we have crime cover” without reading the employee-theft insuring clause and its definitions may find the exact scenario it feared is outside the grant. This ring-fencing is a rational response to uncertain, fast-moving risk. It is the same instinct that led health plans to write tight, specific rules around expensive new treatments the way they did for GLP-1 drugs like Ozempic and Wegovy: when the loss exposure is large and hard to model, insurers narrow the grant rather than refuse to write it.

Common mistakes buyers and their clients make

The recurring errors are avoidable once you know them.

Confusing insured with fully protected. A “$500M insured” headline says nothing about whether your specific holdings, in your specific wallet type, are within the limit and free of exclusions. Ask what perils, which wallets, and what the aggregate is against total assets under custody.

Assuming client assets are individually covered. Custody insurance usually protects the custodian’s book, not a per-client guarantee. If the custodian holds far more than the insured limit, a total loss would not be fully covered and clients share the shortfall. This is a diligence question every institutional client should ask.

Ignoring the deductible. A large retention means the custodian eats the first slice of any loss. On a big program, that floor can reach seven figures before the policy responds at all.

Treating the policy as static. Coverage is annual and controls-dependent. Growth in hot-wallet balances, a new staking product, or a lapsed audit can quietly move you outside what the underwriter priced. Insurance is risk transfer for a defined risk, not a permanent shield you buy once. That framing matters as much here as it does in life cover, where confusing a policy’s protection with an asset is a classic error, the same trap explained in the guide to whole life insurance cash value.

Why hot-wallet limits stay scarce and what to do about it

Even a well-run custodian struggles to buy deep hot-wallet limits, and that will not change quickly. The reason is structural: a connected wallet can be drained instantly and at scale, correlated losses across insureds are plausible in a systemic exploit, and there is limited historical loss data to price against. Underwriters respond by keeping hot-wallet capacity thin, sublimiting it, and pricing it dear.

The practical playbook is to minimize the need. Keep the hot balance as a small, hard-capped percentage of the book. Use withdrawal automation with velocity limits, allow-lists and multi-party approval so no single compromise empties the float. Move settled assets into cold storage promptly. Where commercial capacity runs out, larger players retain the residual risk through a captive insurer or a dedicated reserve, then buy commercial cover on top of that retention. Emerging specialty markets are gradually expanding capacity, much as they are in other young, hard-to-price niches such as EV charging station insurance, but for now insurable hot-wallet limits remain the binding constraint, and good architecture is worth more than a bigger policy.

How institutional holders should factor insurance into custody choices

For a fund, treasury or exchange choosing a custodian, insurance is one input, not the whole answer. The right questions are specific: What is insured, cold or hot? What is the aggregate limit against your total holdings? Who are the carriers, and is it a real Lloyd’s-backed tower or a vague claim? What are the key exclusions? What is the deductible? A custodian that answers precisely is telling you it understands its own risk.

Insurance also interacts with the rest of an institution’s financial picture. Gains realized when digital assets are eventually sold carry their own tax consequences, which sit alongside the custody question and are worth planning for using a framework like the capital gains tax guide. And for allocators weighing digital-asset exposure against other growth themes, custody safety is one leg of a broader thesis that also runs through the AI stocks investment guide. The point is that a policy is a risk-transfer tool with hard edges, not a guarantee. Understand the edges, insist on cold-storage dominance, verify the tower, and read the exclusions. That is how you turn a confusing specialty product into a decision you can defend.

---

This article is for general informational purposes only and is not insurance, legal, tax or investment advice. Coverage terms, market capacity, limits and pricing for digital-asset custody insurance change frequently and vary by insurer, jurisdiction and applicant. Verify all details with a licensed insurance broker and review actual policy wording before relying on any coverage.