The custody layer is the part of a crypto platform that holds, signs, and moves user assets. It includes wallet infrastructure, private key management, transaction approval workflows, and the controls that decide when funds can be withdrawn. In a centralized exchange, this layer sits between user balances and on-chain transfers.
It matters because a compromise here can turn into direct asset loss. Attackers often target hot wallets, steal keys, abuse signing permissions, or tamper with approval processes to authorize withdrawals they should not be able to make. Defenders harden the custody layer with key segregation, hardware security modules, multi-signature approvals, least-privilege access, withdrawal limits, and continuous monitoring. If withdrawals are paused during an incident, that is often a sign that the platform is treating the custody layer as potentially unsafe until it can validate integrity and restore controlled operations.