Institutional Bitcoin custody no longer looks like a side note to the trade. It looks like hidden architecture. Large holders secure Bitcoin like critical infrastructure, not like a speculative wallet. Strategy said it held about 762,099 BTC as of March 29, 2026. Tesla reported 11,509 Bitcoin at the end of 2025. MARA reported 53,822 Bitcoin, including coins that were loaned or pledged.
Those balances change the debate. The issue is no longer whether corporations can buy Bitcoin. It is whether they can safeguard positions large enough to affect earnings, financing flexibility, and investor confidence during market stress.
How the biggest holders actually secure BTC
The clearest model is Strategy’s. The custody playbook is diversification plus legal engineering. In its 2025 annual report, the company said substantially all of its Bitcoin sat with three United States custodians: Coinbase Custody, Anchorage Digital Bank, and Fidelity Digital Assets. As of February 13, 2026, about 40% sat with Coinbase, 37% with Anchorage, and 23% with Fidelity. The company also described cold storage, multifactor authentication, SOC report reviews, and contractual terms meant to keep its Bitcoin outside a custodian bankruptcy estate. That is revealing. Big corporate holders are not only buying coins. They are buying layered operational resilience.
Funds are pushing the same logic further. Institutional custody is becoming a stack of specialized roles, not a single vault. The iShares Bitcoin Trust disclosed that Coinbase Custody holds the trust’s Bitcoin, Coinbase Inc. acts as prime execution agent, and BNY Mellon holds cash and handles administration. By the first quarter of 2025, Anchorage Digital Bank had also been named as an additional Bitcoin custodian, even though no transfer plans were disclosed. That structure matters because it separates safekeeping, trading, and cash operations. In practice, the large fund model is turning Bitcoin custody into something closer to market infrastructure.
Where custody risk really migrates
Not every large holder follows the same template. The more active the balance sheet, the more custody starts to resemble risk management. Tesla’s filing says it owns and controls digital assets but may use third party custodial services, a simpler posture than firms built around Bitcoin strategy. MARA is more aggressive. It said it held Bitcoin across multiple custodial wallets, had loaned about 9,377 BTC, and had pledged 5,938 BTC as collateral for borrowings at year end 2025. That mix can generate income and liquidity, but it also proves that secured Bitcoin is not always passive Bitcoin.
My view is that institutional custody is maturing fastest where rhetoric is quietest. Security now means diversification, segregation, cold storage, audits, and legal clarity, not just private keys. The companies and funds holding the most Bitcoin are building arrangements that look familiar to traditional finance, even when the asset remains volatile. That should reassure investors, but only partly. Larger balances also mean failure points, counterparties, and tougher governance demands. The next phase of adoption will not be decided by who buys more BTC. It will be decided by who can prove that the custody model survives stress, litigation, and time.
