Cold storage, explained: what "offline keys" actually means
Air gaps, signing ceremonies and the trade-offs every custodian makes.
Virtual Asset Custody · Hong Kong
TRUSTLINE provides trading and custodial services for virtual assets with a single organising principle: every decision must survive a compliance officer, an auditor and a regulator.
01 · Services
Every service sits behind the same custody architecture and the same compliance framework. There is no "lite" tier of security.
Spot execution across major pairs with assets held in segregated wallets and moved only through controlled, multi-party authorisation.
Negotiated block pricing with tailored execution, dual-quote benchmarking and settlement flexibility across fiat and digital assets.
REST connectivity, sub-account management, granular permissions and automated reporting built for fund operations.
Settlement workflows and reconciliation tooling designed for administrators, with confirmation trails an auditor can follow.
01.5 · Ecosystem
An illustrative view of asset categories a platform of this type would serve. Inclusion here is not an endorsement of any asset — every asset carries its own risks.
Illustrative listing only — this template makes no claim about the availability, safety or prospects of any asset. Stablecoins can de-peg from their reference asset; holding them is not the same as holding fiat currency.
02 · Custody Architecture
Custody is a chain of deliberate steps. Each link is designed so that no single person, machine or vendor can move client assets alone.
Assets arrive into segregated client wallets — never into corporate accounts, never commingled with house funds.
SegregatedThe majority of balances sweep to offline, geographically distributed wallets, air-gapped from the internet.
Air-gappedEvery movement requires multiple independent authorisations from distributed key holders and devices.
DistributedLiabilities are attested against on-chain holdings on a recurring schedule, with methodology published.
AttestedThird parties review the controls, the reports and the key ceremonies — reviewed, not self-certified.
AuditedWithdrawal requests pass the same chain in reverse: authorisation, allow-list verification, time-delayed release.
Trust in digital assets will not be won with louder promises. It will be won with segregation, verification — and the humility to publish your methodology.
— TRUSTLINE Operating Principles03 · Compliance & Licensing
Hong Kong's licensing regime for virtual asset trading platforms (VATPs) took effect on 1 June 2023 under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance. The Securities and Futures Commission administers the regime, covering safe custody of client assets, AML/CFT controls, market conduct and financial soundness. A licensing regime for fiat-referenced stablecoin issuers followed, taking effect on 1 August 2025.
Licensing noteThis template describes the regulatory landscape for reference only. It does not state — and must not be read to imply — that TRUSTLINE holds any licence or regulatory approval. Verify the licensing status of any platform directly with the SFC before onboarding.
Licensing for virtual asset service providers operating trading platforms begins under the AMLO, administered by the SFC.
Pre-existing platforms must be licensed or cease operating in Hong Kong — unlicensed VATP operation is an offence.
Issuers of fiat-referenced stablecoins come under licensing requirements for reserves, redemption and disclosure.
Licensed platforms face ongoing inspection and conduct obligations — custody, disclosure and AML/CFT among them.
04 · Security
Security is a system, not a slogan. It runs from key generation ceremonies to the moment a withdrawal is released.
The overwhelming majority of client assets rest offline in geographically distributed cold wallets — unreachable from the internet.
Keys distributed across roles, devices and locations. No single point of failure — and no single point of trust.
Balances attested against on-chain holdings on a published schedule — evidence over assurance, every time.
Crime and custody insurance arrangements, recurring penetration tests and independent reviews of key ceremonies.
Virtual assets are highly volatile. Prices can move sharply in either direction and may fall to zero. Investors may lose their entire invested capital. Trading virtual assets involves significant risk and may not be suitable for all investors.
Nothing on this website constitutes investment advice, an offer to sell, or a solicitation of an offer to buy any virtual asset, security or financial product.
Seek independent professional advice before making any investment decision. Digital assets held on trading platforms may not be covered by investor compensation schemes. Past performance is not indicative of future results.
05 · Institutional Services
Institutions don't need another app. They need accountable coverage, auditable reporting and pricing they can explain to a committee.
Negotiated pricing and tailored execution with settlement flexibility across fiat and digital assets.
REST connectivity, sub-accounts, granular permissions and automated statement generation.
A named contact who understands your mandate — not a rotating support queue.
Reconciliation tooling and reporting formats built for fund administrators and auditors.
06 · Market Insights
We publish guides to custody, verification and regulation. We do not publish price predictions — and we never will.
Air gaps, signing ceremonies and the trade-offs every custodian makes.
The numbers that matter, what attestations cover — and what they don't.
Licensing scope, custody requirements and conduct standards in plain language.
What backing really means, and why a peg is a promise — not a guarantee.
07 · Onboarding
We would rather onboard slowly and correctly than quickly and carelessly. Identity, source of funds and suitability come before any capital moves.
Tell us about your entity, trading profile and intended activity.
Day 0Identity verification, source-of-funds review and risk assessment.
ReviewDeposit into segregated client accounts — never corporate accounts.
SegregatedExecute with assets remaining under controlled, cold-storage custody.
Active08 · Questions
TRUSTLINE is a design template, not a live platform, and makes no claim to hold any licence or regulatory approval. If you are evaluating a real platform, verify its licensing status directly on the SFC's public registers before onboarding — and be wary of anyone who won't let you check.
In this design concept: client assets sit in segregated wallets, with the majority held in offline cold storage controlled by multiple independent signatories. Corporate funds are never commingled with client assets, and withdrawals pass allow-list, authorisation and time-delay controls.
It is a report that compares the platform's stated client liabilities with its on-chain holdings, published on a schedule and verifiable by third parties. It shows that assets are present — it is not a guarantee of solvency, insurance cover or future conduct. Read the methodology before you read the headline.
No. Stablecoins aim to track a reference asset, but they can — and have — lost that peg. Reserve quality, redemption terms and issuer regulation all vary. Holding a stablecoin is not the same as holding fiat currency, and redemption may not always be available at par.
Yes — potentially all of it. Virtual asset prices are highly volatile and may fall to zero. Trading involves significant risk and may not be suitable for you. Nothing on this site is investment advice, and assets on trading platforms may not be covered by investor compensation schemes.
Application, identity verification, a source-of-funds review and a suitability assessment — before any funds move. Thorough onboarding is a feature, not friction: it protects you as much as it protects the platform.
08 · Contact
Speak with our coverage team about platform access, custody arrangements or an OTC quote. Illustrative template — no live service is connected.