Underwriters in this class do not price a brand; they price a control environment. The application process is closer to due diligence than form-filling, and the same items surface at every serious desk.
The recurring list
Multi-signature, M-of-N. No single person can move assets. Underwriters look for genuine separation — different people, different devices, different locations — not three keys in one drawer.
MPC key-sharding. Where multi-party computation replaces or supplements multi-sig, the questions move to share distribution, refresh procedures and vendor risk.
Withdrawal whitelisting and time-locks. Destination addresses pre-approved out-of-band, with delay windows long enough for a compromised instruction to be caught.
Segregated custody. Client assets separated from operational funds, cold reserves separated from the hot float — with the split evidenced on-chain, not asserted in a deck.
Physical hardening. For cold storage: access-controlled facilities, monitored entry, dual-control safes, tamper-evident storage of key material.
Governance and people. Background-checked signers, initiation separated from approval, documented joiner–mover–leaver processes. A meaningful share of crypto losses is internal; fidelity underwriters in particular price the people.
Tested response. An incident-response plan that has been exercised, and key-recovery procedures that have actually been rehearsed.
Why the ceremony now gets walked
The February 2025 Bybit theft — roughly $1.5 billion, attributed by the FBI to North Korean actors — was executed by deceiving signers during a routine cold-wallet transfer. Since then, expect any competent underwriter to walk your signing ceremony end to end: who can initiate, what each approver independently verifies, on which device, and how the true destination and payload of a transaction are confirmed. "Hardware wallet plus multi-sig" is no longer an answer; it is the start of the questions.
What it means for your rate
Pricing here is underwriter-led — indicative rates quoted in the abstract are guesses. But the direction of travel is consistent: on asset value, limit, custody model, jurisdiction and loss history, the controls above are the largest lever a buyer actually holds. Strong, documented, rehearsed controls widen the set of carriers willing to quote and narrow the price they quote at. Weak ones do the opposite, or end the conversation.
Arrive documented. A firm that can hand over its custody architecture, ceremony description and pen-test results in the first meeting is telling the market it manages risk the way the market prices it.
Sources
- Control expectations summarised from published market guidance for digital-asset custody insurance (Marsh custody facility materials; Lloyd's Blue Vault consortium documentation).
- FBI PSA I-022625-PSA (February 2025) on the Bybit signing-path compromise.
Where znobia sits in this. znobia is a specialist introducer — a trading name of BLD PROTECTION LTD (England & Wales, no. 13422142). We are not authorised by the FCA, and we do not arrange, advise on or underwrite insurance. What we do is connect digital-asset firms with the FCA-authorised brokers and the regulated insurers and Lloyd's syndicates who actually write this class — prepared, and in front of the right desk. Nothing in this primer is advice. Terms are set by underwriters, and the policy wording governs.