A Bitcoin custody exit plan is a written procedure for moving a company's Bitcoin away from its current custodian, in an orderly way, whether by choice or under stress. It sets out what triggers an exit, who decides, where the assets go, and how the company confirms that everything arrived. The time to write it is before signing the custody agreement, not when a provider is in difficulty.
Why every company needs an exit plan
Custody relationships end for ordinary reasons: better terms elsewhere, changes in regulation, a merger, a new treasury design. They can also end abruptly: a provider incident, a lost licence, an ownership change or signs of financial stress.
In a stressed exit, many clients may try to withdraw at once. The companies that move first, cleanly and with complete paperwork, are usually those that planned ahead. A good exit plan also strengthens negotiating position and gives the board comfort that the company is not locked in.
Planned vs stressed exits
| Planned exit | Stressed exit | |
|---|---|---|
| Trigger | Commercial or strategic decision | Incident, warning sign or regulatory event |
| Timeline | Weeks to months | Hours to days |
| Main risk | Operational error during migration | Delay, frozen withdrawals, legal uncertainty |
| Priority | Accuracy and cost | Speed and evidence |
The plan should work for both, with a faster path for the second.
What a Bitcoin custody exit plan should contain
1. Triggers
Define events that start a review or an immediate exit. Examples:
- Withdrawal delays beyond agreed service levels.
- Adverse regulatory action or loss of a licence.
- A qualified opinion or significant exceptions in SOC 1 Type II or SOC 2 Type II reports.
- Material change of control or a major security incident.
- Changes to terms that weaken segregation or allow use of client assets.
2. Decision rights
Name who can call an exit and who must be told. A stressed exit cannot wait for the next board meeting, so the board should delegate authority in advance, usually to the CFO with one other director, and require a report afterwards.
3. A ready destination
The plan fails if there is nowhere to send the Bitcoin. Options include:
- A second custodian already onboarded, with whitelisted receiving addresses.
- A company-controlled cold storage or multisig wallet, set up and tested.
Onboarding a new custodian can take weeks. In a stressed exit, that is too long. Many companies keep a secondary arrangement active, with a small balance, for exactly this reason.
4. Contract terms
Before signing any custody agreement, confirm:
- Notice periods and withdrawal timelines.
- Fees for full withdrawal or account closure.
- Whether the custodian can delay or suspend withdrawals, and when.
- What happens to assets on insolvency, wind-down or loss of licence. See bankruptcy remoteness.
5. Execution steps
Write the mechanics in order:
- Confirm the destination addresses through an independent channel.
- Send a small test transfer and verify receipt on the blockchain.
- Move the balance in tranches sized to the company's risk appetite.
- Verify each tranche before releasing the next.
- Close or reduce the old account once all balances are confirmed.
Each step needs the same dual control and signing rules set out in the key management policy.
6. Reconciliation and audit trail
Keep the custodian's final statement, transaction identifiers for every transfer and the company's own reconciliation of book balances to blockchain balances. Auditors will ask for them, and accurate records support disclosures under fair value accounting.
7. Communications
Decide in advance who tells the board, auditors, lenders and, if listed, investors. A short holding statement prepared ahead of time avoids rushed wording.
Practical tip: once a year, withdraw a meaningful but modest amount from your custodian to your fallback destination, time it end to end, and minute the result. You will learn more about your exit risk from that one test than from any brochure.
Special cases
Omnibus accounts
If the company's Bitcoin is held in a pooled account, withdrawal depends on the custodian processing the company's entitlement. That can be slower under stress. Our guide to segregated vs omnibus custody explains why.
MPC and proprietary signing
Where custody uses a provider's own signing technology, key shares may not work outside that platform. The exit plan should state exactly how funds would be moved if the platform stopped working.
Shared control
If the company holds some keys and a provider holds others, check that the company's keys alone, or with an independent backup key, can meet the quorum without the provider.
Common weaknesses in exit plans
- No fallback destination has actually been set up, so the plan depends on onboarding a new provider under pressure.
- Receiving addresses were never whitelisted with the current custodian, adding a delay just when speed matters.
- Delegated authority to call an exit was never formally approved, so decisions wait for a full board.
- The plan assumes withdrawals will be processed normally, with no allowance for queues or suspensions.
- Nobody has checked whether the company's own signers are still current on the custodian's platform.
Keeping the plan current
- Review it annually and after any change in custodian, quorum or key holders.
- Re-test the fallback destination after any software or device change.
- Link the plan to succession and continuity planning, so both work together.
- Record the review in board or committee minutes.
Companies should take their own legal advice on contract terms and insolvency treatment.
How The Bitcoin World helps
We help companies write and test custody exit plans, line up fallback arrangements and present the plan to the board as part of our custody architecture work. We do not hold client assets. Custody and execution are carried out by licensed third-party institutions.