XRPL Custody Explained
Custody is the question of who controls the keys to your XRP. The XRP Ledger supports several models — self-custody wallets, exchange omnibus, custodial neobanks with destination-tag routing, and multisig treasuries. The custody model determines what can go wrong and what you can verify on-chain.
XORA uses a shared XRPL treasury wallet plus a unique destination tag per user. Treasury balance and settled inflows are visible on the XRP Ledger; individual user balances are internal ledger records reconciled daily against treasury backing. This is closer to a transparent omnibus model than to self-custody, and significantly more verifiable than off-chain exchange custody.
The four common XRPL custody models
Self-custody (Xumm, hardware wallets, Crossmark): user holds the seed phrase, signs every transaction. Maximum control, maximum operational burden, no yield. Exchange omnibus (Binance, Coinbase, Kraken): exchange holds keys, user balance is an entry in the exchange's internal database, on-chain only visible at deposit/withdrawal. Off-chain custody — minimal verifiability. Custodial neobank with destination tags (XORA): shared treasury wallet on XRPL, each user has a unique destination tag, treasury holdings are publicly visible on-chain, individual balances are internal ledger records reconciled daily. Multisig treasury: keys split across signers, reduces single-point-of-failure risk — common for institutional treasuries and on the XORA roadmap.
What you can verify on-chain with the XORA model
Anyone can fetch the XORA treasury wallet's XRP balance at https://livenet.xrpl.org or via the XRPL API. Anyone can fetch every settled deposit or withdrawal tagged with a destination-tag inflow to that treasury. Anyone can compare the treasury XRP holdings against published total user deposits and check the ratio. What you cannot directly verify on-chain is each individual user's internal account balance — those are XORA-side records reconciled daily against treasury backing.
Why destination tags matter
Destination tags are how a single XRPL wallet can route incoming payments to many internal users. Without the tag, the XRP arrives but the platform cannot automatically credit the correct internal account. Forgetting the tag is the most common XRP deposit failure across every custodial XRPL product. XORA shows the tag prominently and refuses crediting on tagless inflows pending manual reconciliation.
What can still go wrong in any custody model
Operational compromise: keys leaked, social engineering, insider threat. Smart-contract risk: only applies if assets are bridged off XRPL into DeFi positions. Liquidity risk: a custodian could be solvent on paper but unable to meet withdrawals during a stress event. Regulatory risk: jurisdiction-specific freezes or restrictions. XORA reduces some risks with on-chain treasury visibility, daily reconciliation, panic-mode gates, and a public bug bounty — but custody risk never goes to zero for custodial products.
Read more on this topic
Side-by-side comparisons
Frequently asked questions
Is XORA self-custody?
No. XORA is custodial — the XRP treasury is operated by XORA. The difference from off-chain exchange custody is that XORA's treasury holdings are publicly visible on the XRP Ledger.
Where is the XORA treasury address?
The active treasury wallet address is rhbErkS2d4H82tRbdGyFkhhc4LNtjKaC3o. View it on any XRPL explorer such as livenet.xrpl.org or xrpscan.com.
What if XORA fails?
Treasury backing is publicly visible, so depositors can verify holdings independently. A finite depositor reserve buffer funded from protocol revenue helps absorb operational losses up to its balance. This is not insurance — recovery in a failure scenario depends on the treasury solvency at the time.
Can someone steal my XRP from the XORA treasury?
Treasury access is gated by operational keys and signature procedures, with planned migration to multisig. No custodial system is theft-proof; XORA reduces residual risk with daily reconciliations and panic-mode operational gates.
Why does XORA need a destination tag?
The XORA treasury is a single shared XRPL wallet that routes deposits via destination tag to individual user accounts. Without the tag, an inflow arrives at the treasury without an automatic mapping to your account.
Sources
Try Xora
Open an account to start earning XRP yield daily. The XRP Ledger settles withdrawals in under 5 seconds and there is no lock-up.
Open Xora →