Six of the world's 25 largest banks by assets have committed to launching in-house crypto custody or trading services during 2026-2027, according to public filings and partnership announcements tracked over the past 12 months. The latest entrant — Bank Leumi, Israel's largest commercial bank with...
"We are building this as a permanent part of our infrastructure, not a side project." — Mike Novogratz, CEO, Galaxy Digital, Q2 2026 Earnings Call (August 12, 2026)
Six of the world's 25 largest banks by assets have committed to launching in-house crypto custody or trading services during 2026-2027, according to public filings and partnership announcements tracked over the past 12 months. The latest entrant — Bank Leumi, Israel's largest commercial bank with NIS 903.9 billion ($248 billion) in total assets — announced on August 14, 2026, that it will offer Bitcoin, Ethereum, and Solana trading directly inside its Leumi Trade app, with Galaxy Digital providing execution and custody infrastructure through its GK8 platform.
The pattern is consistent across jurisdictions. Morgan Stanley filed for a national trust bank charter with the OCC in February 2026 to custody and stake crypto. Citi has spent three years building custody infrastructure targeting a 2026 launch. Deutsche Bank partnered with Taurus and Bitpanda for European custody. Standard Chartered absorbed Zodia Custody into its investment bank. BNY Mellon, the world's largest custodian overseeing $60 trillion in assets, signed a multi-year agreement with Galaxy to advance digital asset infrastructure. These are not pilot programs. They are permanent infrastructure commitments embedded in core banking operations.
The economic logic is straightforward: global crypto adoption reached 559 million users in 2026, representing 9.9% penetration. Banks that do not offer custody and trading risk losing clients — particularly ultra-high-net-worth individuals — to crypto-native platforms. The shift from experimental venture arms to regulated core operations marks a structural transition in how traditional finance interfaces with digital assets.
Bank Leumi reported Q2 2026 net income of NIS 2.83 billion ($950 million) on August 12 — a record quarter. Revenue reached NIS 6.59 billion, up 10.1% year-over-year. The cost-income ratio hit 24.7%, which the bank called the best ever recorded in the Israeli banking system. Two days later, it announced crypto trading.
The structure of the deal:
The white-label custody model is notable. Bank Leumi will operate GK8's technology under its own brand rather than routing customers to a third-party exchange. This keeps the bank in control of the custody stack — a requirement that Israeli regulators are likely to demand and that aligns with how traditional asset custody functions within banks.
The limitation is also worth noting: three assets at launch. Israel's Capital Market Authority expanded the tradable list for licensed crypto firms to the top 50 tokens by market capitalization as of August 1, 2026. Bank Leumi's initial scope is far narrower, suggesting regulatory caution or a deliberate phased approach.
Galaxy Digital reported $8.6 billion in Q2 2026 revenue with total assets of $10.8 billion as of June 30. The company posted a net loss of $85.3 million (diluted EPS of -$0.09), driven by impairments on digital asset holdings ($181.3 million) that partially offset gains ($237.3 million). Cash and stablecoins on hand: $2.5 billion. Platform assets: approximately $7.6 billion.
Galaxy's custody and institutional infrastructure business has been its most strategically significant line. The Bank Leumi deal is the latest in a sequence:
Galaxy acquired GK8, an institutional custody platform originally developed in Israel, from Celsius Network's bankruptcy estate in 2023 for approximately $45 million. The Bank Leumi deal represents a homecoming for the technology — Israeli-built custody infrastructure returning to power the first Israeli bank crypto offering.
The GK8 architecture uses a "true air-gapped" cold vault, meaning the signing mechanism never connects to the internet. For a bank integrating crypto into a regulated capital markets platform, the security architecture matters as much as the regulatory wrapper.
Israel's crypto regulatory environment underwent significant changes in the months leading up to the Bank Leumi announcement:
July 2026 — Capital Market Authority guidelines: New binding rules tightened regulation of VASPs (Virtual Asset Service Providers), set mandatory security standards for digital wallets, and established capital requirements: NIS 2 million ($549,000) in equity for non-custodial firms and NIS 2.5 million ($687,000) for custodial firms.
July 2026 — Bank of Israel directive: Removed automatic delays on crypto-linked deposits exceeding NIS 100,000 ($27,500) and drafted rules barring blanket refusals of fiat deposits sourced from licensed crypto providers. This addressed a longstanding bottleneck where Israeli banks routinely rejected or delayed transfers originating from crypto platforms.
August 1, 2026 — Expanded asset list: A new circular from the Capital Market Authority expanded the digital assets licensed firms can trade from approximately eight or nine currencies to the top 50 by market capitalization.
National Crypto Strategy Committee: An interim report released between mid-2025 and early 2026 recommended a unified regulator and improved banking integration for digital asset firms.
The regulatory direction is clear: Israel is building a framework that invites banks into crypto rather than forcing crypto to exist outside the banking system. The Bank Leumi deal is a direct product of this framework. However, the service still requires formal Bank of Israel approval before any trades execute — a step that is not guaranteed.
Israel's crypto market has approximately 3.65 million projected users as of 2025, according to Statista, though the Bank of Israel's own data suggests only around 3,000 private wallets with an Israeli connection hold Bitcoin, with most containing under $10,000 in assets. This gap between exchange-level user accounts and self-custody wallet data underscores how much of Israeli crypto activity runs through centralized platforms — the exact channel a bank would capture.
The Bank Leumi deal is one data point in a broader pattern. Here is the current status of major bank crypto custody and trading initiatives as of mid-August 2026:
| Bank | Jurisdiction | Status | Partner/Model | Scope | |------|-------------|--------|---------------|-------| | BNY Mellon | US | Live | In-house + Galaxy | Custody, staking infrastructure | | Morgan Stanley | US | OCC charter filed (Feb 2026) | Galaxy, BNY (sub-custody) | Custody, staking, trading | | Citi | US | In development (3+ years) | Hybrid in-house/partner | Custody, stablecoin exploration | | Deutsche Bank | Germany | Planned 2026 launch | Taurus, Bitpanda | Custody, tokenization | | Standard Chartered | UK/HK | Absorbing Zodia (target: Aug 2026) | Zodia Custody (acquired) | Custody, trading, prime brokerage | | Bank Leumi | Israel | Announced (Aug 14, 2026) | Galaxy (GK8 + GalaxyOne) | Trading (BTC/ETH/SOL), custody |
JPMorgan remains a notable holdout. CEO Jamie Dimon has stated the bank will let clients purchase crypto but will not custody the asset — a position that separates JPMorgan from the custody convergence trend.
The infrastructure model splits into two approaches:
Both models pull crypto into the regulatory perimeter of banking supervision, which is the structural shift. Crypto custody handled by a bank is subject to bank capital requirements, audit standards, and deposit insurance frameworks — a fundamentally different risk profile than custody at a crypto-native firm.
Three factors explain the timing:
1. Regulatory clarity reached a tipping point. In the US, the OCC, SEC, and CFTC collectively removed barriers to bank crypto custody starting in early 2025. The SEC-CFTC joint interpretive release in March 2026 classified staking rewards as non-securities. In Europe, MiCA went live. In Israel, the Capital Market Authority issued binding VASP guidelines. Banks no longer face existential regulatory risk from offering crypto services.
2. Client demand from wealth management. Ultra-high-net-worth (UHNW) clients increasingly want crypto custody and management services integrated with their existing banking relationships, according to Elliptic's 2026 regulatory outlook. Banks that cannot offer this risk losing advisory mandates. Morgan Stanley's February 2026 OCC filing explicitly referenced wealth management clients.
3. Revenue diversification at marginal cost. Banks already operate custody infrastructure for securities, cash, and derivatives. Adding crypto custody is an incremental build on existing technology stacks, compliance frameworks, and client relationships. The marginal cost of serving crypto through a white-label model like Galaxy's GK8 is substantially lower than building from scratch. Bank Leumi's deal structure — Galaxy handles the technology, the bank handles the client relationship — demonstrates this math.
Galaxy's $10.8 billion in total assets and $7.6 billion in platform assets position it as the primary institutional infrastructure provider. The BNY, Morgan Stanley, and Bank Leumi deals collectively represent a pipeline that could channel hundreds of billions in bank-held client assets into crypto exposure.
Custody concentration risk. Galaxy's GK8 platform is now the custody backbone for multiple major bank crypto offerings. A security breach at the GK8 layer would have systemic implications across multiple banking partners. The "true air-gapped" architecture mitigates but does not eliminate this risk.
Regulatory divergence. Banks operating across jurisdictions face a patchwork of crypto custody rules. What qualifies as compliant custody in Israel may not satisfy OCC requirements in the US or BaFin standards in Germany. Cross-border banks face the most complex compliance burden.
Asset scope limitations. Bank Leumi launches with three assets. Most bank custody offerings start narrow. The question is whether banks will remain restricted to a handful of large-cap tokens or eventually offer the breadth of a crypto-native platform. Regulatory lists (Israel's top-50 expansion) will determine the pace.
Fee compression. Crypto-native custodians like Coinbase Custody and Fireblocks compete on price. Banks entering the market will face pressure to match or undercut existing custody fees while bearing higher compliance costs. Whether bank-grade crypto custody can be a profitable standalone product or merely a client retention tool is unresolved.
Bank of Israel approval. Bank Leumi's service remains contingent on formal regulatory approval. The regulatory framework exists, but the specific approval for a bank to offer crypto trading to retail customers is unprecedented in Israel. Timeline risk is real.
The Bank Leumi-Galaxy deal is not a story about one Israeli bank adding crypto to its app. It is the latest confirmation of a pattern: traditional banks are embedding digital asset custody and trading into their core regulated operations, not their venture arms. BNY, Morgan Stanley, Citi, Deutsche Bank, Standard Chartered, and now Bank Leumi have each committed capital and infrastructure to this shift within a 12-month window.
The economic value chain is being reorganized. Crypto custody — a function that until recently existed almost entirely outside the banking system — is being pulled inside it. This subjects crypto holdings to bank-grade capital requirements, audit standards, and regulatory oversight, but it also gives banks a new revenue vector and client retention mechanism.
Galaxy Digital sits at the center of this reorganization as the institutional infrastructure provider of choice. Its $10.8 billion balance sheet and GK8 custody platform underpin multiple major bank partnerships. Whether this concentration is a strength (operational efficiency) or a vulnerability (single-point-of-failure risk) will become clear as these services go live and process real client assets.
The question is no longer whether banks will offer crypto. It is whether they can do so profitably while meeting regulatory requirements that are still being written.