How Tri-Party Arrangements Work in Digital Assets

In traditional financial markets, tri-party arrangements have long served as a cornerstone of institutional lending and collateral management. From repo markets to securities lending desks, the model is well-established: a neutral third party sits between borrower and lender to hold collateral and reduce bilateral counterparty risk.

In digital assets, the same logic applies but the infrastructure is markedly different, and the stakes of getting it wrong are considerably higher. Private keys cannot be retrieved. Settlement is irreversible and custodians vary enormously in the quality of controls they apply.

This article explains how tri-party structures function in the digital asset context, why the custodian's role is more consequential than it may appear, and what institutions should evaluate when selecting a framework for collateral-backed financing.

The Basic Structure

A tri-party arrangement in digital assets involves three distinct principals, each with clearly defined responsibilities:

The custodian's independence is the defining feature of the arrangement. Unlike a bilateral structure, where the lender holds collateral directly and the borrower must trust that it will not be commingled or misused, a tri-party structure inserts an independent intermediary whose sole function is to safeguard the collateral and enforce the agreed parameters.

In digital assets, this independence also addresses a structural vulnerability that does not exist in traditional finance: the risk that a counterparty holding assets on an exchange could become insolvent, freeze withdrawals, or misappropriate funds. 

Why the Custodian's Role Is Different in Digital Assets

In traditional securities lending, a tri-party agent, typically a custodian bank, holds collateral in segregated accounts, runs margin calculations daily, and manages substitution requests. The legal and operational framework is mature. Regulators understand it. Counterparties have decades of precedent.

In digital assets, custodians must perform the same core functions but within a fundamentally different technical environment. Several distinctions are worth noting.

Settlement is final

Unlike traditional markets, on-chain transfers cannot be reversed. If collateral is moved incorrectly to the wrong address, at the wrong time, without proper authorisation there is no clearing house to unwind the error. The custodian's transaction governance controls must therefore be configured precisely, with appropriate approval thresholds before any asset movement occurs.

Key management is irreplaceable

In traditional custody, the custodian holds legal title documentation and maintains ledger entries at a central depository. In digital asset custody, possession of the private key is possession of the asset. A custodian that loses key material — through operational failure, breach, or inadequate backup infrastructure — cannot reconstruct it. The quality of key management architecture is therefore not a secondary consideration. It is the primary one.

Collateral eligibility requires active governance

In a securities lending programme, eligible collateral is typically defined by a schedule of securities types and credit ratings. In digital assets, collateral eligibility involves token-specific risk considerations — liquidity depth, network security, concentration limits, and price volatility — that may change materially between the time collateral is posted and the time it is returned. The custodian must be capable of enforcing eligibility parameters dynamically.

The Collateral Lifecycle

A tri-party arrangement in digital assets follows a defined sequence of events. 

1. Borrower and lender agree on terms: collateral type, haircut, margin thresholds, and duration. The custodian is designated as the collateral agent.

2. Borrower transfers digital assets to the custodian's segregated custody environment. Assets are held under an arrangement that reflects the lender's security interest without transferring legal title to the lender.

3. The custodian confirms receipt and notifies both parties. In arrangements involving exchange access, credit or loans may be activated at this stage.

4. The custodian monitors the value of posted collateral against the agreed margin threshold. Where automated margin calls are supported, the custodian notifies the borrower if collateral falls below the required level.

5. If the borrower defaults or fails to meet a margin call within the agreed cure period, the custodian enforces the lender's security interest, liquidating or transferring the collateral according to the terms of the arrangement.

6. On repayment or termination, the custodian releases collateral to the borrower. All parties receive a final reconciliation.

How Collateral-Backed Exchange Access Works in Digital Asset

One increasingly common application of the tri-party model in digital assets is collateral-backed exchange access where an institution posts assets with an independent custodian and receives trading capacity or margin on an exchange, without transferring assets to the exchange directly.

This structure addresses one of the most persistent concerns in institutional digital asset management: the counterparty risk associated with holding assets on a trading venue. In the bilateral model, the institution must transfer funds to the exchange to trade. Those assets are then subject to the exchange's solvency, withdrawal policies, and operational controls.

In a tri-party model, assets remain in independent custody. The borrower receives a credit, a representation of the collateral value in their exchange account. The institution retains custody of its assets and trades against that position. Settlement occurs at agreed intervals or on demand, with net positions transferred.

The practical implications for institutional treasury teams are significant. Capital is not immobilised on exchange. Yield-bearing or RWA-backed collateral can continue earning while simultaneously serving as margin. And the custodian's independent governance controls mean that no single party, neither borrower nor lender nor exchange can move assets unilaterally.

What Institutions Should Evaluate

Not all custodians are equally equipped to operate as tri-party collateral agents in digital assets. When evaluating a custodian for this function, institutions should consider the following dimensions.

Segregation and independence

Collateral should be held in a dedicated custody environment, clearly separated from the custodian's own assets and from assets held for other clients. The custodian should be legally and operationally independent of both the borrower and the lender.

Transaction governance

The custodian should operate a multi-layer approval framework for any asset movement. This typically includes rule-based controls at the policy level — restricting which addresses assets may be sent to, which transaction types are permitted, and what authorisation thresholds apply. The Policy Engine should be configurable to the institution's specific requirements..

Regulatory standing

The custodian should hold, or be in the process of obtaining, relevant regulatory authorisations in the jurisdictions where it operates. In the absence of formal licensing, institutions should assess whether the custodian applies equivalent standards, particularly with respect to AML/KYC obligations and Travel Rule compliance.

Margin and valuation infrastructure

For collateral arrangements where margin calls may be triggered by price movements, the custodian must have robust, real-time valuation capability. It should also have clearly documented procedures for margin calls — notice periods, cure windows, and enforcement steps — that are enforceable under the governing law of the arrangement.

The Evolution of Collateral Management in Digital Assets

Tri-party arrangements represent a foundational evolution in institutional digital asset lending. By introducing a neutral custodian into the borrower-lender relationship, these structures enhance security, improve operational efficiency, and enable scalable collateral management systems.

As digital asset markets become increasingly institutionalized, tri-party models will likely serve as the backbone for secured lending, especially when integrated with real-time collateral frameworks such as MirrorRSV.

Key Takeaways

• Tri-party arrangements involve a borrower, lender, and custodian working together in a structured collateral model.

• The custodian plays a critical role in safekeeping assets and managing real-time collateral monitoring and margin management.

• This structure reduces counterparty risk while improving operational efficiency.

• Collateral-backed exchange access enables institutions to trade without transferring assets directly to an exchange. Assets remain in independent custody while a representative asset from the collateral supports trading or margin requirements.

• Effective tri-party arrangements rely on robust operational controls, including asset segregation, configurable transaction policies, real-time valuation, and clearly defined margin and enforcement processes.

• Tri-party structures are becoming foundational infrastructure for secure, capital-efficient collateral management and institutional lending.

Learn more about tri-party arrangements in Ceffu: MirrorRSV