The coins are yours. The yield lands in your account. But the validators Wall Street quietly contracts with — the firms no marketing deck bothers to name — are the ones holding the operational levers.
On Aug. 4, BNY and Galaxy announced that BNY’s Digital Asset Custody platform intends to offer institutional crypto staking built on Galaxy’s infrastructure. BNY sits close to roughly 20% of the world’s investable assets and reported $62.6 trillion in assets under custody and administration as of June 30.
Galaxy also happens to be one of the three validator firms cleared to stake Ethereum on behalf of BlackRock’s iShares Staked Ethereum Trust (ETHB).
Which means two of the biggest names in traditional finance are now pushing institutional crypto staking through a single infrastructure provider. Galaxy operates staking on Solana and other proof-of-stake chains as well, so the overlap doesn’t stop at Ethereum.
The keys aren’t going anywhere — that isn’t the issue
Work through the ETHB prospectus and the custody architecture is sound. The ETH belongs to the trust, and the trust collects the crypto staking rewards. Private keys and withdrawal control sit with its custodian. Galaxy and the other approved validators hold only the validator keys and perform the validation work; the prospectus states plainly that they never come into possession of the keys required to move the trust’s staked ETH.
That beats simply handing tokens over to a validator. Even so, the shareholder carrying the economic exposure gets no voice in how that validator conducts itself once it’s live.
Consider how the labor divides. Economic stake and yield belong to the investor. Staking allocation and disclosure are set by the product sponsor — an ETF issuer or a bank. Keys and withdrawal authority rest with the custodian. And the crypto staking provider operates the validator, which makes its picks in cloud infrastructure, client software and compliance policy part of the network’s exposure.
Under normal conditions, per the prospectus, the fund may stake between 70% and 95% of what it holds. That is a great deal of ETH funneling toward a very short roster of operators.
Validators get no vote — and don’t need one
This is where the common read on validator power goes astray. On Ethereum, validators are handed no token-weighted votes on improvement proposals. Their influence lives somewhere harder to see: block production, transaction inclusion and finality.
Per Ethereum’s documentation, validators commanding more than 33% of staked ETH can keep the chain from finalizing blocks by going offline or attesting incorrectly. Cross 66% and they can finalize whichever version of the chain they prefer. Finality is what exchanges, bridges and DeFi protocols rely on to judge when a transaction can be treated as settled.
On Solana, the term for the smallest cohort able to command roughly 33% of delegated stake is the superminority. Nakaflow reporting pegged the Nakamoto coefficient — the fewest validators required to hit that share — at 10 as of Aug. 5. Should a group that small fail in unison, the network can stop voting on new blocks in real time.
Measure active stake, not supply
What actually counts is how much of the active stake a provider commands. That is not the same as its slice of total token supply, and blurring the two makes concentration appear milder than it really is.
Roughly 33% of all ETH is staked at present. Push about 11% of the entire ETH supply through one provider and that provider is already brushing the one-third mark of currently staked ETH.
Solana stakes far more of its supply — somewhere near 68% — so reaching that same one-third share of active stake would require close to 22.7% of total SOL supply.
For scale on what one operator already shoulders: Figment’s second-quarter report shows its Ethereum validators at 6.26% of all staked ETH and its Solana validators at 6.96% of all staked SOL. And that’s a mid-size institutional shop.
Correlated failure is the risk the filing itself flags
Because private keys and the withdrawal route belong to the custodian, a failure or compromise there can lock up customer funds even while the validator does everything right.
ETHB’s prospectus cautions that slashing, inactivity penalties and correlated penalties hitting many validators at once could inflict losses the trust may never claw back — especially where those validators share a single staking provider. As an illustration of how quickly that unfolds, it points to Ethereum’s May 2023 finality disruption.
It’s plausible that a large share of institutional validators converge on the same client software, the same cloud region or the same key management vendor. Once they do, a single bug or outage propagates through every validator running that setup.
The same dynamic has a policy dimension. One staking provider operating validators for multiple banks and funds can push a single sanctions or transaction-filtering policy across the lot, generating a coordinated inclusion policy without anyone ever sitting down to collude.
Invesco’s filing: new operator, familiar shape
In the Invesco Galaxy Solana ETF filing, Coinbase Custody appears as the crypto staking provider and node operator for the fund’s SOL, with BNY Mellon serving as administrator. The names on the paperwork change. The same small set of institutions is doing the work below the surface.
Where the panic version overshoots
BNY’s institutional crypto staking service doesn’t exist yet — it still requires regulatory approval. Galaxy is one of three approved validators within ETHB, not the only one. And institutional staking really can raise operational discipline above what token holders achieve running validators on hardware at home.
The scenario worth worrying about requires no villain whatsoever. Routine institutional behavior does the job. Banks gravitate to approved vendors. Funds trim operational risk by settling on the same infrastructure. Custody products keep streamlining customer choice until validator selection and voting rights have quietly vanished.
Ethereum is already arguing over it
EIP-8361 proposes burning a bigger portion of validator rewards as the staking ratio climbs, the goal being to dampen the incentive to keep stacking ETH into staking. Custodial concentration is among the reasons its authors give for putting it forward.
It could also boomerang. A 2025 paper examining Ethereum’s staking market concluded that solo stakers are more sensitive to reward changes than centralized exchanges or liquid-staking providers. Trim issuance and the smaller independent validators may be the first to leave, concentrating what remains even more tightly among the very institutions the proposal targets.
Two directions from here
In the bull case, disclosure moves faster than concentration. Products begin naming the validators entrusted with customer stake, capping how much of any single provider’s book comes from one client, and spreading clients, clouds and compliance policies around. Wall Street contributes genuine stake to Ethereum and Solana without manufacturing one operational chokepoint, and staking products come out safer.
In the bear case, the hunt for yield outpaces disclosure entirely. Staking turns into a default checkbox buried in custody accounts and ETFs, and investors never learn which validator is holding their stake. A short list of approved providers ends up operating a large slice of the active validators on several major networks simultaneously. Product brands proliferate while the operators beneath them keep merging into fewer hands.
At which point investors who read five institutional brands as five independent risks discover they were riding on the same two or three operators all along. Own a staking ETF today? Pull up the prospectus and see whether it names its validators. What you find — or don’t — is a fair description of what you actually hold.