The Infrastructure Layers and Their Stablecoin Insurance Risk

Stablecoin infrastructure is distributed across multiple layers, and each layer faces different exposures.

Custody platforms hold customer cryptocurrency and the private keys that unlock it. Risk concentrates in three areas: breach (hackers stealing keys), internal threat (employee theft), and operational failure (keys lost or destroyed). These are security and asset risks—largely insurable through cyber and crime insurance.

On and off-ramps (exchanges and payment processors) are where fiat currency converts to stablecoins and back. Risk concentrates in compliance: AML screening, sanctions verification, KYC procedures. Every transaction is a potential regulatory exposure. These are compliance risks—partially insurable, with significant gaps.

Wallet providers offer software or hardware solutions for holding stablecoins. Risk concentrates in product failure: bugs or exploits that cause customer fund loss. These are product liability risks—insurable but with variable coverage depending on policy terms.

What Stablecoin Infrastructure Insurance Can Cover

Standard insurance products exist for many infrastructure risks. The question is whether they work for crypto infrastructure without modification.

Cyber insurance covers data breaches, ransomware, hacking incidents, and their aftermath (notification costs, forensic investigation, liability claims). For custody platforms, this covers the breach scenario. For exchanges and processors, this covers system compromise. Coverage is broad and widely available, though policy terms vary by underwriter.

Crime insurance covers employee theft, fraud, embezzlement, forgery. For custody platforms with employees accessing private keys, this covers internal threat scenarios. Coverage is standard but may exclude certain digital asset scenarios depending on policy language.

Specie insurance covers loss of high-value items, including cryptocurrencies and NFTs. For custody platforms and wallets holding customer assets, this covers asset loss from theft, hacking, or operational failure. This is the right product for the asset itself, though underwriters vary in how they treat digital assets.

Tech PI (Professional Indemnity) covers professional errors and negligence in service delivery. For custody platforms, this covers scenarios where negligent key management procedures, failures to follow security protocols, or errors in asset handling cause customer losses. For wallet providers and payment processors, this covers errors in transaction facilitation or service delivery that result in customer fund loss. Coverage availability depends on whether the underwriter considers crypto infrastructure a covered profession.

All of these products exist. The question is whether they work out of the box for stablecoin infrastructure, or whether they require customization.

Coverage Gaps in Stablecoin Infrastructure Insurance

Standard policies often have exclusions that matter for crypto infrastructure.

Regulatory fines and penalties are the biggest gap. When a compliance officer misses an AML flag and the regulator imposes a fine, that fine is almost never covered by standard cyber or liability policies. Public policy doctrine—the principle that insuring fines would undermine regulatory deterrence—prevents most underwriters from covering them. Some specialized riders exist, but they’re rare and heavily conditioned.

Digital asset specificity is another gap. Standard crime and specie policies were written for traditional assets (cash, jewelry, art). Coverage of cryptocurrencies, stablecoins, and NFTs is newer and less standardized. Some underwriters have adapted; others haven’t. Policy language matters enormously.

Operational risk at scale is a third gap. Wallet providers and payment processors operating at scale face operational failures that standard product liability policies may not contemplate. A bug affecting millions of users or a payment processor’s failure to block sanctioned transactions during a market spike creates loss scenarios outside traditional coverage frameworks.

Cross-border regulatory risk is perhaps the hardest to insure. A payment processor handling stablecoins across jurisdictions faces conflicting rules: what’s allowed in Singapore may violate OFAC rules in the US. Insurance doesn’t easily cover regulatory exposure that spans jurisdictions with conflicting requirements.

These gaps don’t mean insurance is useless. They mean that standard insurance requires careful structuring, and some risks may remain uninsurable.

Who is holding stablecoins, and why

Stablecoins have moved beyond crypto trading. Treasuries, B2B payment platforms and fintechs now route real money through them. The reasons are practical, not speculative. Stablecoins settle across borders faster and more cheaply than bank rails. They move around the clock, not just in banking hours. Companies also hold a growing share of value in stablecoins on the balance sheet. As adoption grows, so does the value at risk.

Not Quite Cash

A stablecoin can be spent like a dollar, but it does not fail like one. It can be hacked or stolen outright. A payment can be tricked or pushed to the wrong address and, once settled on a blockchain, is almost impossible to claw back. And unlike a bank balance, stablecoins sit in wallets and with custodians, which introduces a custody risk that cash in a current account simply does not have.

This is where the insurance problem starts. The standard commercial crime policy most businesses hold contains a broad exclusion for virtual currency of any kind. In other words, the policy a company relies on to cover theft and fraud is written to decline a stablecoin claim. The losses are real, but the cover behind them is silent unless it has been written for digital assets.

What Stablecoin Insurance Actually Covers

The reassuring part is that these exposures can be insured. They are not covered by an off-the-shelf programme, but by specialist versions of cover designed for digital assets.

Theft and fraud.
The most common loss is the simplest: someone takes what is not theirs, whether through a hack, a fraudulent transfer, a social engineering scam, or a dishonest insider. Crime insurance, written to include digital assets, is built to respond to exactly this.

Storing the coins.
Holding stablecoins means keeping them somewhere, and that store is itself a risk. Specie insurance covers the physical and in-custody loss of high-value assets, and the market has expanded to cover cryptocurrency held in cold storage, including theft, loss or damage of the storage media and the loss of keys held by a custodian.

Systems and hacks.
The technology around the coins is a target in its own right. Cyber insurance responds to the hacks, ransomware, data breaches and system outages that often sit behind a digital asset loss.

Together these three answer most of what a business holding stablecoins is actually exposed to. The protection exists. It simply has to be written for the asset, not assumed from a cash-era policy.

Getting The Cover right

There is a sensible order to this. Map where stablecoins actually sit across the business, hold those positions up against the insurance already in place, and find where the standard wordings fall silent. From there, the insurable gaps, theft, fraud, custody loss and cyber, can be filled with specialist cover and coordinated so the policies work together rather than leaving seams between them.

A couple of honest caveats keep this credible. Some risks are not insurance problems at all. A depeg is a fall in market value, which insurers exclude in the same way they exclude volatility, and there is little on the market to cover a stablecoin issuer failing. Those are exposures to manage through treasury policy and counterparty diligence, not to transfer to a policy. This is also a general recommendation rather than a regulatory checklist, and the right structure depends on the jurisdiction, the custodians used and how the stablecoins are held.

Continuum advises on and arranges these covers for treasuries, payment firms and fintechs across Asia, helping finance teams see where their existing protection ends and what can be put in place for the way they actually hold and move stablecoins. For a clear view of your exposure, contact us today.