Self-Custody & Client-Controlled Wallets
Client-controlled wallets, advisory oversight.
How client-controlled wallet structures can support active digital asset management without Protocol Wealth taking custody.
In some situations, a client-controlled wallet may be the right structure for digital assets that require on-chain interaction. In those cases, the client controls the wallet and the recovery path. Protocol Wealth’s role is limited by documented permissions, strategy parameters, and human fiduciary oversight.
We do not receive client private keys. We do not control client recovery materials. We do not have authority to move assets to Protocol Wealth wallets. Policy changes that expand or alter permissions require the required client and firm approvals.
This structure is designed to separate advisory authority from unilateral control. It remains subject to client agreements, system configuration, compliance review, and legal analysis.
What this page is. A description of how client-controlled wallet workflows can work, and the controls designed to keep the firm in an advisory role. Fordefi and Turnkey are described here as wallet infrastructure — the technology that applies policy and signing rules to a wallet. They are not qualified custodians, and they are not the same thing as the independent qualified custody options described on the qualified custody page.
What this page is not. A personalized recommendation, an offer of any specific wallet or protocol, or a representation that any arrangement is automatically non-custodial, free of risk, or guaranteed for every fact pattern. Whether a client-controlled wallet is appropriate, and how it is configured, depends on the client and is determined under a signed advisory agreement and applicable compliance review.
Section 1
How the controls work
A client-controlled wallet can still be actively managed, because the wallet enforces rules about what is allowed. The design goal is a deny-first posture: activity is blocked unless a specific permission has been approved.
- The default posture is to block activity unless a specific permission is approved.
- Approved permissions can be limited to specific wallets, contracts, strategies, and destinations.
- Policy changes that expand or alter permissions require the required client approval and firm review.
- Protocol Wealth does not have unilateral authority to withdraw client assets to a Protocol Wealth–controlled wallet.
- The client keeps an independent backup or recovery path so that access does not depend on the firm.
Section 2
Fordefi — MPC wallet infrastructure
Fordefi may be used as institutional MPC (multi-party computation) wallet infrastructure to apply policy rules to a client-controlled wallet. The default posture is deny-first: activity is blocked unless a specific permission is approved. Approved activity can be limited to specific destinations, contracts, strategies, and workflows. Policy changes that expand or alter permissions require the required client and firm approvals.
Fordefi is wallet and policy infrastructure. It is not a qualified custodian, and using it does not, on its own, make an arrangement non-custodial. Wallet policy engines also have limits — for example, they may not fully inspect nested transaction data in every on-chain interaction — so the firm pairs policy rules with destination allowlists, amount and allowance limits, multi-approver rules for material transactions, and transaction review where needed.
Note on a recent vendor development. Paxos has announced an acquisition of Fordefi. We track this as a vendor and diligence item on our industry watch page. It does not, on its own, change the role Fordefi plays in any Protocol Wealth client workflow, and it does not make Fordefi a qualified custodian for client assets. Any change to that characterization would be subject to current agreements, account structure, and compliance and legal review.
Section 3
Turnkey — client-controlled wallet infrastructure
Turnkey can support client-controlled wallet workflows where the client controls permissions, recovery, deposits, and withdrawals. Protocol Wealth may surface research, monitoring, and curated options, but the client remains responsible for approving wallet-level activity where the workflow is client-directed.
In the current shipped model, Protocol Wealth does not sign client transactions and does not hold client private keys. The client is the sole controlling user. Where Protocol Wealth holds a helper role, it is limited to assisting with recovery within a controlled process that requires the client’s own backup factor — it has no signing capability, no export capability, and no ability to change wallet policy on its own. Protocol Wealth cannot reconstruct client access alone.
Section 4
Backup and recovery
Clients may use an independent backup or recovery process. The client chooses the approach — for example, an independent recovery provider such as Coincover, or the client’s own backup and disaster-recovery process.
Where a third-party recovery provider is used, the recovery relationship is in the client’s name, and the arrangement is designed so that Protocol Wealth does not receive the client’s private keys. Recovery material needed to access the wallet is delivered to the client, not to the firm.
Section 5
Curated information is not a recommendation
Protocol Wealth may surface curated information about vaults, protocols, or opportunities for client review — including information drawn from public sources and surfaced through tools such as vaults.fyi. Surfacing information is not the same as a recommendation to enter any vault or protocol.
A client’s decision to deposit or withdraw through a self-custody workflow remains subject to the client’s own approval and the applicable advisory documentation. Self-custody does not eliminate risk: smart-contract, protocol, bridge, stablecoin, oracle, liquidity, governance, and operational risks all remain, and a client-controlled wallet places real responsibility on the client for the controls they hold.
Read next
Related pages
Custody and Control
The plain-English hub: how assets are held, who controls them, and what the firm can and cannot do.
Qualified Custody
Independent qualified digital asset custody options, where appropriate — and how custody is separated from execution.
Bailment Framework
The deeper, source-tracked technical and tax-analysis reference — education, not advice.
Industry Watch
The public regulatory and industry materials we monitor as custody and self-custody guidance evolves.
Change log
Versions
Initial publication. How the controls work, Fordefi MPC wallet infrastructure, Turnkey client-controlled wallets, backup and recovery, and the distinction between curated information and a recommendation.
Last updated: June 17, 2026. Protocol Wealth, LLC is an SEC-registered investment adviser (CRD #335298). See our Form ADV for authoritative regulatory disclosures. Registration does not imply a particular level of skill or training; advisory services are provided only under a signed advisory agreement.
This page is general information about how client-controlled wallet workflows can be structured. It is not a personalized recommendation, an offer, or a representation that any arrangement is automatically non-custodial or appropriate for any specific client, and it is not tax or legal advice. Wallet configurations and the firm’s role depend on the client, the assets, and the account, and are subject to compliance, legal, and tax review.
All investments involve risk, including the potential loss of principal. Digital assets are highly speculative and volatile and carry additional risks, including smart-contract, protocol, bridge, stablecoin, oracle, liquidity, governance, cybersecurity, and wallet-policy risk. Past performance does not guarantee future results.