$1,000,000 in security audit grants are live now, Apply here →

← Resource Hub

Omnibus vs Segregated Wallets: How Exchanges Hold Crypto

By the Guardian team Updated 5 min read

Omnibus vs Segregated Wallets: How Exchanges Hold Crypto

Quick answer. An omnibus wallet pools many customers' crypto and tracks each share on the firm's ledger; a segregated wallet holds one customer's assets alone. If it fails, custody terms and the law matter more than the layout.

Watch: Omnibus vs Segregated Wallets: How Exchanges Hold Crypto 1:43
Video transcript

An omnibus wallet pools many customers' crypto. A segregated wallet holds one customer's assets alone. If the firm fails, terms and the law matter more than layout.

Omnibus wallets are shared, and the firm's ledger records each customer's share. Segregated wallets give each customer its own addresses, visible onchain.

Every major rule requires client assets kept apart from the firm's own. So an omnibus wallet can be separate from the firm and still pool clients.

Omnibus means fewer keys, but one breach can hit every client. Segregated spreads that risk, but multiplies wallets to run and monitor.

Bybit lost about 1.5 billion dollars from one Ethereum multisig cold wallet in February 2025.

Collapses showed that terms beat wallets. Celsius Earn crypto became estate property because the terms transferred title. At FTX, the CFTC alleged customer assets were commingled with Alameda's funds.

The rules require separation from the firm, not per-client wallets. MiCA's text does not require them, New York allows omnibus, and the UK lets firms choose. Only Dubai's VARA requires them for custody services.

Read the terms. Ask which legal entity holds your assets, whether they are pooled, whether they can be rehypothecated, and how often the ledger is reconciled.

Guardian's regulatory assessments review segregation, keys and signing against your license's custody rules. Read the full article, or talk to Guardian about how your assets are held.

Most customers never see how an exchange holds their crypto. They find out when it fails.

Two questions decide what happens then: how the wallets are laid out, and who legally owns what sits in them.

This guide covers both. For what customers got back in past collapses, see what happens if an exchange goes bust.

This article explains the technical and security side of MiCA, CASS 17, the NYDFS custody guidance and VARA's rulebooks. It is not legal advice; confirm how they apply to you with counsel.

Omnibus vs Segregated Defined

  • Omnibus: shared wallets hold many customers' crypto. The firm's ledger records each customer's share.
  • Segregated: each customer has its own wallet or addresses. Each balance is visible onchain.

"Segregated" has a second meaning, and the two get confused:

  • From the firm: client assets kept apart from the firm's own. Every rule below requires this.
  • Per client: each client in its own wallet. Of the rules below, only VARA's custody rules require it.

So an omnibus wallet can be fully separate from the firm's assets and still pool clients together.

How Exchanges and Custodians Hold Assets

Omnibus at exchanges

At Coinbase's trading entities, crypto is "held in an omnibus manner on the blockchain and separately recorded using a ledger system," its 10-K for 2025 says.

Pooling suits trading. Balances change on the ledger, and coins move onchain mainly for deposits and withdrawals.

It also suits tiered storage: one hot float serves every customer, and the rest stays cold.

New York allows it. NYDFS guidance permits omnibus wallets holding only customer crypto, "as agent or trustee," with a clear internal audit trail.

Segregated models

Dubai's VARA draws the line by service. Every VASP must hold client assets in wallets separate from its own, labeled "Client VA Wallet" (Compliance and Risk Management Rulebook V.B.3).

Custodians go further. Each client's assets must sit "in separate VA Wallets containing the Virtual Assets of that client only" (Custody Services Rulebook III.B.3).

VARA also bars custodians from rehypothecating custody assets, even with client consent (III.B.2).

Check any custodian's segregation claim against its agreement. Our BitGo vs Anchorage comparison shows how two describe theirs.

Security and Insolvency Tradeoffs

FactorOmnibusSegregated
Keys to protectFew walletsMany wallets and ceremonies
Value per walletConcentrated: one breach hits every clientSpread: one breach hits one client
Proving holdingsProof of reserves, with liabilitiesEach balance visible onchain
Operations and feesFewer onchain movesMore addresses to fund and watch
ReconciliationLedger against a pooled balanceWallet by wallet
In a shortfallClients may share the lossEach client's assets easier to trace

Security

Pooling concentrates value. Bybit lost about $1.5 billion from one Ethereum multisig cold wallet in February 2025.

Per-client wallets spread that risk but multiply keys, addresses and approvals. Each is another ceremony to run and another wallet to monitor.

Omnibus pools need outside proof. Our guide to verifying proof of reserves covers what to check.

What Celsius and FTX showed

Celsius shows that terms beat wallets. On January 4, 2023, Judge Martin Glenn held that crypto in Earn accounts was estate property, because the Terms of Use transferred title to Celsius.

The ruling covered Earn only, and left Earn customers as general unsecured creditors.

FTX shows the cost of commingling. The CFTC alleged that FTX customer assets were "routinely accepted and held by Alameda and commingled with Alameda's funds."

FTX customers' crypto claims were valued in dollars as of the November 11, 2022 petition date, The Block reported.

Even a careful structure may be untested. Coinbase's 10-K flags that open question for custodied crypto; our exchange bankruptcy guide covers it.

What the Rules Require

RuleStatusPer-client walletsCore test
MiCA Art. 70 and 75 (EU)Applies since December 30, 2024Not in the textSeparate from own holdings, onchain and legally
CASS 17 (UK)Applies from October 25, 2027Trusts per client or omnibusTrust by default; assets separately identifiable
NYDFS guidance (New York)Guidance, September 30, 2025; replaced the 2023 letterNo; omnibus allowedCustomer-only wallets, held as agent or trustee
VARA rulebooks (Dubai)Custody rules effective June 19, 2025Yes, for custody servicesClient wallets separate from the firm's

MiCA

Article 70 requires CASPs holding client crypto to safeguard clients' ownership rights, "especially in the event of the crypto-asset service provider's insolvency." They must also prevent the use of clients' crypto for their own account.

Article 75(7) requires custodians to hold clients' crypto separately from their own on the distributed ledger. It must be legally segregated so creditors "have no recourse" in insolvency, and operationally segregated too.

Article 75(2) adds a register of positions in each client's name. The text asks for separation from the firm, not one wallet per client.

CASS 17

From October 25, 2027, UK firms that control client cryptoassets must generally hold them on trust, separately identifiable. One address cannot sit in two trusts.

Firms choose trusts per client or omnibus. Our CASS 17 guide covers the exceptions and daily reconciliation.

NYDFS

NYDFS's September 30, 2025 guidance replaced its January 23, 2023 letter. It expects customer crypto segregated from corporate assets, onchain and on the internal ledger.

Custodians should not use customer crypto for their own purposes.

Which to Choose

  • Trading accounts: omnibus is fine if the terms are right. Look for custody terms, a client register and daily reconciliation.
  • Institutional custody: ask for per-client wallets, so your holdings are provable onchain.
  • Either way: read the terms. Title should stay with you, with no lending or rehypothecation without consent.

Questions to ask any exchange or custodian:

  • Which legal entity holds our assets, and on what terms?
  • Are our assets pooled, or in our own wallets?
  • Can you lend, pledge or rehypothecate them?
  • How often do you reconcile the ledger with the chain?
  • Which sub-custodians hold our assets or keys?

Our crypto custody guide has a full custodian scorecard.

How Guardian Helps

Guardian's regulatory assessments cover segregation, key generation and storage, signing thresholds, cold storage ratios and recovery.

Each is assessed against the custody rules your license carries.

For institutions, Guardian reviews the custodians you would depend on "as concentrations of risk rather than as logos on a slide."

Its OpSec audit maps where keys live and who holds which share.

Frequently Asked Questions

What is an omnibus wallet in crypto?

A wallet that holds many customers' crypto together, while the firm's internal ledger records each customer's share. Coinbase's 2025 10-K says its trading entities hold crypto this way, recorded on a ledger.

Does MiCA allow omnibus wallets?

MiCA's text does not require one wallet per client. Article 75 requires custodians to hold client crypto separately from their own on the ledger, keep a register of each client's positions, and legally segregate client assets from the estate.

Does NYDFS allow omnibus wallets?

Yes. Its September 30, 2025 guidance, which replaced the January 2023 letter, allows omnibus wallets holding only customer crypto. They should be held in the custodian's name as agent or trustee, with a clear internal audit trail.

Does a segregated wallet protect me if a custodian goes bankrupt?

It helps, but it does not decide the outcome. A per-client wallet makes your assets easy to identify. Whether creditors can reach them depends on the custody terms and the law, such as a trust or UCC Article 8.

Sources

Get an independent read on how your assets are held

Guardian assesses segregation, key storage and recovery against the custody rules you answer to, and reviews the custodians you depend on.