At the heart of the custody debate is a question that few technical papers answer cleanly: do we trust the law more than the key? On September 9, a quiet corporate act made that question concrete. Block, Inc. — the parent of Cash App and Square — reportedly submitted an application to the U.S. Office of the Comptroller of the Currency (OCC) for a national trust bank charter, an entity to be named Builders Bank & Trust. It will not accept deposits. It will not provide loans. It will not mint stablecoins or run a decentralized exchange. By every available signal, its only stated purpose is to safeguard customer digital assets inside a regulated trust structure.
That should feel reassuring. It does not, quite. Having spent hundreds of hours auditing DeFi protocols during the 2020 summer, I learned that the most damaging failures rarely live inside an exotic function. They live inside unexamined assumptions about who holds power, and how that power is constrained. A bid to build a Bitcoin-focused trust bank is precisely such an assumption — disguised as a routine expansion of corporate services.
A Vault, Not a Balance Sheet
To appreciate what Block is proposing, it helps to recall what a national trust bank charter actually permits. Unlike a commercial bank, a trust bank does not take everyday deposits and does not create credit. It exercises fiduciary powers: acting as a trustee, a custodian, or an administrator of assets owned by someone else. In January 2021, Anchorage Digital proved that the model could be applied to crypto assets when it became the first digital asset firm to secure an OCC national trust charter. Since then, the federal trust structure has become the quiet gold standard for regulated custody — even as Coinbase Custody and BitGo continue operating mainly through state-level trust frameworks.
Block's legal choice says a lot about its strategic intent. An OCC national charter operates at the federal level, which means it can invoke the doctrine of national bank preemption to avoid assembling a patchwork of state money transmitter licenses. It is also a far more efficient route than a New York BitLicense, which binds custodians to a single state's regulatory orbit. The more revealing detail, however, is what Builders Bank & Trust excludes. By declining to accept deposits, it likely avoids classification as a bank holding company under Federal Reserve supervision. By declining to lend, it eliminates liquidity mismatch risks that cause classic bank runs. No checking accounts, no FDIC insurance, no fractional reserve. This is a vault with a charter, not a balance sheet with a brand.
Some observers will dismiss this as a compliance technicality. But in my years studying open-source governance, I have learned that the subtlest architecture decisions are usually the most consequential. The technical design of Builders Bank & Trust is not a consensus mechanism or a zero-knowledge circuit. It is an institution designed to hold Bitcoin under fiduciary law — where the guarantee layer is not code but legal accountability. That distinction, I suspect, will define the project's fate more than any security audit will.
The Security Hypothesis Still Missing an Auditor
The public statement from Block says the proposed bank is "focused on protecting customer assets." That phrase conceals an entire security framework that has not yet been disclosed. No independent audit report has been released. No details about insurance coverage, key management, or custody architecture have been made public. Based on my audit work, that silence is not automatically a red flag — OCC applications are confidential at the filing stage — but it should temper the market's assumption that a reputable fintech firm can simply switch on institutional-grade custody.
The architecture of successful digital asset custodians tends to converge on a hybrid model. Cold vaults are distributed across geographies; private keys are fragmented behind hardware security modules; multisignature controls require separate authorization layers; and external cyber insurance policies cover tail risks that no internal security team can fully self-insure. The conventional wisdom is that any new entrant aiming at institutional clients must match that baseline. For Block, the more interesting question is whether it will even try to chase institutional clients — or instead design Builders Bank & Trust as a service layer for its own retail ecosystem.
That is the angle I find most compelling. Cash App has tens of millions of monthly active users, and a significant number of them already buy small amounts of Bitcoin through the app. For those users, the technical barrier of self-custody — managing seed phrases, hardware devices, and wallet compatibility — remains the largest obstacle to true ownership. A federally chartered custodian integrated into a user-friendly app could lower that barrier substantially. It would allow a Cash App user to acquire Bitcoin with the same ease as buying a coffee, while the trust bank handles the keys in cold storage.
Seen from this perspective, Block is not entering the custody market to compete with hedge fund custodians. It is attempting to build a vertical pipeline: the same company that provides the consumer payment rail, the merchant point-of-sale software, and the Bitcoin execution engine would now hold the underlying assets. The bank looks less like a bid to beat Coinbase Custody at its own game and more like an attempt to turn every Cash App Bitcoin buyer into a custody client by default.
The Stablecoin Bridge Nobody Is Discussing
There is, however, a second and potentially larger strategic play buried in the application's detail. The source documents mention stablecoin custody only once, but that mention deserves far more attention than it has received. If Block were to hold dollar-pegged stablecoins for the merchants that already use its Square point-of-sale systems, it could create a settlement rail that bypasses the traditional banking clearing system for certain transactions. Restaurants and retail shops could theoretically accept USDC payments and hold those digital dollars in a federally regulated trust bank — all without agonizing over whether their money sits at a non-bank intermediary.
The commercial logic is powerful, but the regulatory friction is not trivial. Bitcoin custody enjoys relative clarity because regulators have largely treated Bitcoin as a commodity. Stablecoins, particularly yield-bearing ones, remain trapped in a jurisdictional gray zone that implicates the SEC, the CFTC, and the OCC all at once. A chartered bank seeking to custody stablecoins must navigate overlapping mandates that are still being litigated. That may explain why Block's earliest public messaging emphasizes Bitcoin rather than stablecoins. It is a deliberate attempt to enter through the clearest door.
The Contrarian Read: Self-Custody vs. the Self-Descriptive Bank
The uncomfortable interpretation of this event is that it signals a subtle but significant migration away from Bitcoin's original counter-economic ethos. Jack Dorsey has spent years championing Bitcoin as a tool for financial sovereignty, even publicly endorsing the idea that users should run their own nodes and control their own keys. Now his company wants to become the custodial intermediary for those same users. This is not hypocrisy; the world is complex, and custody is a real need for users who cannot secure their own keys. But it is a tension that should not be papered over. If Builders Bank & Trust makes self-custody harder — by injecting friction into withdrawals, or by nudging users toward a default "managed" balance — it will have quietly reversed the very educational mission that made Block popular in the crypto community.
There is also a more mundane risk. The custody market is a trust-intensive business with strong winner-take-most dynamics, and Coinbase Custody and BitGo have spent years securing institutional relationships. Even if the OCC grants the charter, regulatory capital requirements could make the bank's return on equity less attractive than investors expect. Meanwhile, the reputational tail risk is enormous: a single loss of customer assets at a company as visible as Block would not be contained within the bank's capital, because the world would judge the parent company, not the subsidiary.
What makes a federal charter valuable, then, is not that it eliminates risk. It concentrates risk in a transparent, accountable institution. That should lower the temperature of crypto's battle with regulators, but it should also make us more demanding.
Guardianship Over Paternalism
The most prophetic question for Builders Bank & Trust is not whether it will be approved. It is what kind of guardian it will choose to become. True guardianship in the digital asset space preserves the user's right to exit. It allows withdrawal to a self-custody wallet without friction, because it understands that custody is a service, not a cage. Paternalism, by contrast, optimizes for retention, hiding keys and control behind compliance language until the user forgets they ever had a choice.
Transparency isn't the oxygen of trust. Accountability is. A code audit exposes vulnerabilities in algorithms, but it cannot audit the soul of an institution. Only consistent behavior over time can do that, and that consistency is precisely what distinguishes an ethical infrastructure from a merely legal one.
For the open-source movement that gave birth to Bitcoin, the test is whether a regulator-approved custodian can coexist with self-custody — whether an entry point for the unskilled does not become the gateway for the captured. Code is law, but ethics is soul. I look at Block's application and do not see a surrender to the old system. I see an experiment that will succeed only if it remains honest about its own gravity. The key question, as always, is not whether the bank can hold the coins. It is whether the bank can hold its principles.