When a CFO or treasurer asks whether a stablecoin platform is "safe," they're usually asking a bundle of related questions: Is my money at risk? Who controls it? What happens if the platform goes bankrupt? What regulatory framework applies?
The answer to all of these questions turns largely on one architectural distinction: custodial versus non-custodial.
In a custodial model, the platform holds your assets on your behalf. Your bank balance isn't "your money sitting in a vault"—it's a claim against the bank. The bank has your dollars, and you have a contractual right to demand them back. This is why bank failures are consequential: if the bank cannot honor that obligation, your claim may be impaired.
Custodial crypto platforms work the same way. When you deposit USDC on a custodial exchange, the exchange holds the private keys to the wallet where your USDC sits. You have a claim against the exchange, not direct ownership of the USDC. The collapses of FTX, Celsius, and BlockFi are case studies in custodial risk: when the platform failed, user assets were trapped.
In a non-custodial model, the platform never holds your private keys. You retain cryptographic control of your assets at all times. The platform provides a user interface, routing logic, compliance infrastructure, and counterparty connectivity—but it cannot access or freeze your assets, because it never holds the keys.
This distinction has several practical consequences for enterprise finance teams:
Counterparty risk is different (and lower). If your non-custodial platform goes bankrupt, your assets are not assets of the bankruptcy estate. Your USDC is still in your wallet. You need new software to access it, but the assets themselves are not at risk.
Regulatory treatment may differ. In jurisdictions that define VASP activities as involving custody or control of virtual assets, a non-custodial platform may not meet the definition of a VASP—because it never holds or controls assets. This has implications for regulatory categorization and compliance obligations.
Operational controls are different. Because you hold the keys, you bear responsibility for key management. Enterprise non-custodial platforms address this through institutional-grade multi-signature and MPC (multi-party computation) architectures, which provide the security of self-custody without requiring a single user to manage private keys manually.
Stabled operates a non-custodial model. The wallet infrastructure is provided through our infrastructure partner, whose architecture enables self-custodial wallet capabilities. Stabled never holds private keys and never exercises discretionary control over user funds.
For enterprise finance teams, this means:
The answers to these questions will tell you whether you're working with a custodial or non-custodial provider—and help you assess the risk profile accordingly.
Want to understand how Stabled's non-custodial architecture applies to your specific situation? Talk to our team.
See how much your enterprise can save with Stabled's 1.5% flat-fee settlement.