How custody models differ?
Token custody models define who holds control over the private keys associated with a wallet address and, therefore, who carries the authority to initiate transactions from that address. Custodial models place key control with a platform operator, while non-custodial models retain key control with the individual wallet owner. Hybrid models distribute control between the platform and the user through multi-signature or threshold signature arrangements that require cooperation between parties before a transaction executes. The custody model in use determines the attack surface profile of the wallet and the security architecture required to maintain token safety at both the platform and player level. https://crypto.games/ custody model selection affects platform-level security architecture and individual player wallet exposure across every stage of the deposit, play, and withdrawal cycle.
What non-custodial models require?
Non-custodial wallets place full key management responsibility with the wallet owner. The private key or seed phrase generated at wallet creation is the sole credential required to authorise transactions, and loss of this credential produces permanent loss of access to all tokens held at the associated address.
- Hardware wallet signing – Hardware wallets store private keys within a dedicated physical device that signs transactions internally without exposing the key to the connected system. The signing operation occurs within the hardware module, and the key never passes through the host operating system during the authorisation process.
- Browser extension – wallets store keys in encrypted form within the browser’s local storage and require a password to decrypt them for signing. This model offers accessibility while requiring careful management of the decryption password to maintain key security at the user level.
- Contract interaction authorisation – Gaming platforms supporting non-custodial wallets allow players to authorise contract interactions directly from their wallet without transferring key material to the platform at any point during the session.
- Approval scope management – Non-custodial wallet users control the approval scope granted to gaming contracts. Setting finite approval amounts rather than unlimited approval limits the token volume accessible to the contract at any point in time.
Custodial security architecture
Custodial models concentrate key control within the platform operator’s infrastructure, making platform-level security the determining factor in token safety for all wallets under custody.
- Hot wallets hold keys in operationally connected systems for active transaction processing, with balances limited to the minimum required for ongoing platform operations.
- Cold storage holds reserve balances in air-gapped environments, with periodic transfers moving excess hot wallet balances into cold storage to reduce connected key exposure.
- Multi-signature configurations on custodial wallets require approval from multiple keyholders before any transaction executes, reducing the impact of individual key compromise within the custodial infrastructure.
- A two-of-three multi-signature arrangement means that two valid signatures must be present within the transaction before the protocol accepts it, regardless of which single keyholder initiates the request.
Token custody models set the structural parameters of wallet security across gaming platforms. Key control distribution, storage architecture, multi-signature configurations, and hybrid contract arrangements collectively determine the resilience of platform and player wallets across every operational stage.
