Cactus Custody

BIT's institutional custody arm, with full custody and MPC self-custody options

Custodian
Visit mycactus.com
Our score
Good
Regulated Yes
SOC 2 report Yes
Insurance OneDegree policy covering the Hong Kong and Bhutan custody entities; Swiss entity cover planned (Sep 2026)

What is Cactus Custody?

Company and ownership

Cactus Custody is the institutional digital asset custody business of BIT, the Singapore-headquartered group that traded as Matrixport until March 20, 2026. BIT calls the change a brand update, with legal entities and client contracts left as they were. The group was founded in 2019 and has offices in seven countries and regions. Jihan Wu is co-founder and chairman, and John Ge is co-founder and CEO. BIT reports more than $6 billion in assets under custody and management, and a July 2025 release said Cactus serves more than 3,000 institutions. Hedgeweek named Cactus its Custodian of the Year: APAC for a third straight year in June 2026.

Custody model and security

Cactus sells two separate products. In Full Custody, Cactus holds and manages the whole private key. In MPC Self-Custody, the client keeps its own master key share while Cactus holds its share inside an SGX trusted execution environment, and the two products run on independent infrastructure with separate accounts. BIT says 98% of assets sit in air-gapped cold vaults, with sites in Switzerland and Asia. Keys are protected with MPC/TSS and multisig, on HSMs that BIT describes as FIPS 140-3 Level 3 or higher. Client wallets are segregated, with approval workflows and address whitelisting on top.

BIT says Cactus holds SOC 1 Type II and SOC 2 Type II reports. The September 2026 Swiss launch notice adds that the SOC reports and Cactus's ISO 27001 and 27701 certifications apply to the Hong Kong and Bhutan entities. The new Swiss service, run by ChainTech AG, generates and holds keys on FIPS 140-2 and 140-3 HSMs in Swiss data centers and keeps no key copies or backups outside Switzerland.

Regulation and insurance

BIT states that Cactus is licensed in Hong Kong and Bhutan. On BIT's license list, Matrix Trust Company Limited holds a Trust or Company Service Provider license from Hong Kong's Companies Registry, a license BIT dates to September 2019. Two Bhutan entities, Matrix Bhutan Pte Ltd and Matrix Gelephu Pte Ltd, hold financial services licenses from the Gelephu Financial Services Office. Matrix Bhutan's in-principle approval in January 2026 listed providing custody among its activities, and the full license followed in February 2026. In Switzerland, ChainTech AG is a member of VQF, a self-regulatory organization recognized by FINMA. Elsewhere in the group, Fly Wing Technologies holds a MAS major payment institution license for digital payment token services.

OneDegree insures the Hong Kong and Bhutan custody entities. BIT said in September 2026 that it plans to extend that cover to the Swiss entity and will confirm the extension separately.

Products and integrations

Oasis is Cactus's off-exchange settlement service and currently connects to Bitget, Bybit and KuCoin. Through the custody API, clients can request OTC quotes and place orders from $50,000, and sign DeFi contract calls on EVM chains plus Bitcoin, Solana, Stellar, Sui and Cosmos-based networks. Cactus Link connects custody accounts to DeFi protocols. The Swiss entity opened with 132 assets on 18 networks, along with ETH staking accounts. For miners, newly mined BTC can flow straight into custody accounts, and BIT's institutional desk adds OTC trading and lending around the custody relationship.

Founders

John GeCo-Founder & CEO (BIT group)
Jihan WuCo-Founder & Chairman (BIT group)
Best for:Asia-based funds and family offices that want custody linked to OTC and lendingBitcoin miners sending mined BTC straight into custodyTrading firms settling off-exchange with Bitget, Bybit or KuCoinClients that need keys and data held in Switzerland

Pros and cons

Pros

  • SOC 1 Type II and SOC 2 Type II reports, per BIT
  • Choice of full custody or MPC self-custody with Cactus's key share in an SGX enclave
  • Oasis off-exchange settlement with Bitget, Bybit and KuCoin
  • 98% of assets in air-gapped cold vaults in Switzerland, Hong Kong and Singapore, per BIT
  • DeFi contract signing on EVM chains, Bitcoin, Solana, Stellar, Sui and Cosmos networks
  • Swiss entity keeps keys and client data inside Switzerland

Cons

  • Licenses come from Hong Kong's TCSP regime, Bhutan's GFSO and Swiss self-regulation, with no SFC license or US trust charter
  • OneDegree insurance had not yet been extended to the Swiss entity at its September 2026 launch
  • Custody sits in the same group as BIT's OTC trading, lending and asset management businesses

Our review

3.5/5
Good

Cactus pairs full and MPC self-custody with off-exchange settlement and SOC 1 and SOC 2 Type II reports. Its licenses rest on Hong Kong's TCSP regime and Bhutan's GFSO, which suits Asia-focused funds and miners better than mandates that call for an SFC-licensed or US trust-chartered custodian.

Security3.5
Compliance3.0
Asset support3.0
Features4.0
Support4.0

The case for Cactus rests on audit evidence and flexible key control. Its SOC 1 Type II and SOC 2 Type II reports give fund administrators and auditors tested controls to review, which ISO certificates alone do not. A client can hand Cactus the whole key or keep its own MPC share without changing vendor. MPC Self-Custody runs on separate infrastructure with its own accounts, so moving from one model to the other means opening new accounts. Off-exchange settlement through Oasis cuts the need to leave balances on exchanges, though only three venues are connected so far. OTC orders through the API start at $50,000, a threshold within reach of mid-sized funds. In July 2025 NYSE-listed DDC Enterprise added Cactus to the custodian network for its bitcoin holdings.

The regulatory base is thinner than the product set. Hong Kong's TCSP regime is an anti-money-laundering license issued by the Companies Registry, and BIT's license list contains no SFC license or US trust charter. Bhutan's GFSO licenses cover services provided within or from Gelephu Mindfulness City, and the Swiss operator works under VQF self-regulation without a FINMA banking license. Funds whose mandates name a custodian licensed by a major securities or banking regulator may not be able to use Cactus as custodian of record.

The Swiss entity opened on September 30, 2026 before OneDegree's insurance cover had been extended to it, a gap for clients who pick that entity. Group structure is the other trade-off: custody, OTC trading, lending and asset management all sit inside BIT. That makes it easy to move from custody into a trade or a loan, and it also places the custodian and its trading affiliates in one corporate group.

Cactus fits Asia-based funds, family offices, miners and corporates that want custody tied to BIT's trading and lending desks. The Swiss entity adds an option for clients that need keys and client data kept inside Switzerland, with 132 assets available at launch.

Listings are researched and drafted with AI assistance from public sources, then checked for accuracy and readability. Spot an error? Tell us. Editorial policy. Facts last checked Oct 28, 2026.
Sources (19)

Specs

Clients Institutions, Funds, Corporates, High-net-worth · unverified
Regulated Yes · unverified
SOC 2 report Yes · unverified
Insurance OneDegree policy covering the Hong Kong and Bhutan custody entities; Swiss entity cover planned (Sep 2026) · unverified
API access Yes · unverified
MPC Yes · unverified
Cold storage Yes · unverified

Not disclosed by the provider: KYC required, Custody model, Assets supported, Staking, Licenses & charters, Qualified custodian.

Data from the provider's website and public sources, checked Oct 28, 2026. Fees and availability change; confirm on the official site before you sign up.

Key features

Full Custody

Cactus holds and manages the complete private key for segregated warm and cold wallets.

MPC Self-Custody

The client keeps its own master key share while Cactus holds its share inside an SGX trusted execution environment.

Oasis off-exchange settlement

Custody accounts link to balance accounts at Bitget, Bybit and KuCoin for off-exchange settlement.

OTC through the API

Clients can request quotes and place OTC orders through the custody API, with a $50,000 minimum.

DeFi signing and Cactus Link

Contract signing covers EVM chains plus Bitcoin, Solana, Stellar, Sui and Cosmos-based networks, and Cactus Link connects accounts to DeFi protocols.

Swiss key storage

ChainTech AG generates and holds keys on FIPS 140-2 and 140-3 HSMs in Swiss data centers.

Mining output custody

Mined BTC flows directly from mining operations into institutional custody accounts.

Inside Cactus Custody

Cactus Custody Hong Kong and Bhutan

The main custody entities, covered by the SOC 1 and SOC 2 reports, ISO certifications and OneDegree insurance.

Cactus Custody Switzerland

A ChainTech AG service launched on September 30, 2026 with 132 assets on 18 networks, ETH staking accounts and Swiss-only key storage.

Oasis

Off-exchange settlement for trading on Bitget, Bybit and KuCoin while assets stay in custody.

Cactus API

Separate API stacks for Full Custody and MPC Self-Custody, each with its own test and production environment.

User reviews

No user reviews yet. Have you used Cactus Custody? Share your experience below.

Write a review of Cactus Custody

Your rating
At least 40 characters. Please write about your own experience.

Reviews are moderated before they appear.

FAQ

Who owns Cactus Custody?

Cactus Custody is the institutional custody business of BIT, the Singapore-headquartered group that dropped the Matrixport brand on March 20, 2026. BIT lists Jihan Wu as co-founder and chairman and John Ge as co-founder and CEO.

Is Cactus Custody regulated?

BIT says Cactus is licensed in Hong Kong and Bhutan. Group entity Matrix Trust Company Limited holds a TCSP license from Hong Kong's Companies Registry, Matrix Bhutan Pte Ltd holds a GFSO financial services license, and Swiss operator ChainTech AG is a member of VQF, a FINMA-recognized self-regulatory organization.

Is Cactus a qualified custodian?

In its Full Custody product, Cactus holds and manages clients' private keys through BIT entities licensed in Hong Kong and Bhutan. BIT's license list does not include a US trust or bank charter.

What insurance covers assets at Cactus Custody?

OneDegree provides insurance for the Hong Kong and Bhutan custody entities. BIT said in September 2026 that cover for the new Swiss entity would follow and be confirmed separately.

Does Cactus Custody have a SOC 2 report?

BIT says Cactus holds SOC 1 Type II and SOC 2 Type II reports. The Swiss launch notice states that these reports apply to the Hong Kong and Bhutan entities.

Does Cactus support staking?

Yes. The Swiss service launched in September 2026 with ETH staking accounts alongside DeFi accounts.

Does Cactus offer off-exchange settlement?

Yes. Oasis, the Cactus off-exchange settlement service, currently connects to Bitget, Bybit and KuCoin.

Latest from Cactus Custody on X

Cactus Custody
@CactusCustody · 2.3K followers
Follow
Hot wallet risk remains one of the biggest operational exposures for traders.

Proud to serve as independent third-party custodian for @FinChain_EN’s FUSD Mirror Trading. Principal stays with Cactus Custody, while users access KuCoin liquidity and continue earning native yield.
0 0 1 60 View on X
Crypto moves in seconds — legal frameworks and security must keep pace. ⚡️

Yesterday Cactus Custody was invited to join the panel "Decoding Digital Assets" by @gftn_official

Key takeaways on defending the ecosystem:
🔹 Extend compliance beyond centralized exchanges to DeFi & self-custody
🔹 Modernize legal processes to match on-chain speed
🔹 Build active trust with law enforcement & regulatory authorities
Image attached to the post
0 0 2 62 View on X
🇨🇭 Switzerland’s first spot Bitcoin ETF is now a reality.

Proud to see BIT Asset Management AG bring bitcoin:native to Swiss retail investors.

On the custody side, Cactus also offers Swiss custody via ChainTech AG, with private keys and client data held in Switzerland.
0 0 2 88 View on X
Proud to be part of @bitget’s Open Custody Network 🤝

Institutions can trade spot, margin and futures on Bitget while assets remain in Cactus Custody. Oasis settles off-chain every 8 hours with no gas fees — assets never sit on the exchange.

Your custody. Your assets. Bitget brings the market.
0 0 4 115 View on X
Secure Element intact. Recovery phrase still gone. 🔏
What the @Ledger implant reveals about institutional key isolation? https://t.co/CI4b6fx001
3 15 84 11.5K View on X

Recent public posts from @CactusCustody, shown as published. Not reviewed or endorsed by CryptoReview.

Alternatives to Cactus Custody

NYSE-listed crypto custodian with an OCC-chartered trust bank and up to $250M insurance

KYC requiredQualified custodian · Multi-sig +3Institutions · Funds +3Regulated
4.5

MPC custody software and NYDFS-chartered qualified custody for institutions

Qualified custodian · MPC +2Institutions · Funds +1Regulated
4.3

Crypto custody through Anchorage Digital Bank, an OCC-chartered national trust bank

Qualified custodian · HSM +1Institutions · Funds +2Regulated
4.1

Coinbase's institutional prime broker, with custody at its NYDFS-chartered trust company

RegulatedSOC 2 reportStaking
4.1

FINMA-licensed Swiss crypto bank offering custody for 32 assets plus trading and staking

KYC requiredQualified custodian · MPC +2Institutions · Funds +2Regulated
4.0

Deutsche Börse's crypto custodian, supervised by FINMA and BaFin with a MiCA license

Qualified custodian · HSM +1Institutions · FundsRegulated
4.0