Crypto-Custody Bridge Provider Failure — severe-but-plausible scenario — ITOL

Vector: Third-Party & Concentration · Severity: severe

A third-party sub-custodian/bridge provider supporting the bank's crypto-asset custody line suffers a key-management error or cross-chain bridge exploit. Customer crypto-asset movements freeze for days, forcing urgent questions about segregation, safekeeping, and reimbursement. (Optional module — applies only if the archetype offers digital-asset custody; see the trust-custody scope note.)