The standard problem with cryptocurrency custody is a structural tradeoff: private keys stored offline (in "cold storage") are secure against remote hacking because there is no network path in, but verifying and broadcasting a transaction to the blockchain requires connecting to the internet at some point — creating a window of exposure. This is why even the best consumer hardware wallets (Ledger, Trezor) create brief online contact when a user wants to actually move assets.
GK8, founded in Israel in 2018 and acquired by Galaxy for $44 million in February 2023 out of Celsius Network's bankruptcy, solved this with a proprietary approach it calls the Impenetrable Vault. Using patented one-way communication technology, the Impenetrable Vault creates and broadcasts transactions without any digital input connection — the vault never needs to "go online" even momentarily. Transactions are transmitted via an air-gap mechanism (a QR-code-like approach), making remote intrusion physically impossible rather than merely difficult. GK8 markets this as the only custody solution on the market with zero digital input at any point in the transaction lifecycle.
Alongside the cold vault, GK8 also provides an unlimited multi-party computation vault for automated, policy-governed transactions. In MPC custody, the private key is mathematically split among multiple parties so no single entity ever holds the complete key — even a full compromise of one party yields nothing usable. GK8's uMPC adds institutional-grade controls including multi-person transaction approvals, transaction-value limits, and jurisdiction-based permission rules. The system is capable of processing up to 7,500 signatures per second.
For Bank Leumi specifically, this architecture matters for two reasons. First, it is a white-label arrangement: the bank itself operates the custody infrastructure through GK8's technology, rather than delegating custody to a third-party exchange or custodian. That distinction carries regulatory weight — Israeli banking regulators are more comfortable with a licensed bank controlling its own custody platform than with a bank pointing its customers to an external exchange. Second, GK8 has an Israeli identity: the company was founded in Tel Aviv and joined Galaxy in the acquisition along with its technical leadership, including co-founders Lior Lamesh and Shahar Shamai, and Galaxy subsequently opened a Tel Aviv office from that deal. The Leumi partnership is, in a meaningful sense, two Israeli-rooted organizations building infrastructure together.
What This Means — and What It Does Not
Leumi customers who use this service will not hold their own private keys. The bank will hold custody of their crypto, via GK8's technology, exactly as it holds custody of their stocks and bonds in Leumi Trade. This is not a criticism of the design — it is the design. Bank custody of digital assets is how crypto integrates into regulated banking. But it carries a consequence that retail crypto marketing often elides: users bear counterparty risk on their crypto holdings. If Bank Leumi were to fail — an extreme scenario for Israel's oldest bank — customers' crypto positions would be subject to the same insolvency proceedings as their other assets. Unlike bank deposits, cryptocurrency holdings in a custodial banking account do not carry deposit insurance protection equivalent to the protections governing shekel deposits.
This risk is present in every custodial crypto service — Coinbase, Robinhood, any exchange. Leumi's arrangement is not unique in this respect. But it is worth stating plainly, because the service's primary pitch is convenience: the ability to hold crypto inside the same app as one's bank account, without a crypto wallet. The tradeoff is that the crypto is held by the same institution as the rest of one's assets, under the same regulatory umbrella, but without the same insurance backstop.
Separately, a number of operational details remain undisclosed as of launch: Leumi has not published fee structures, bid-ask spread policies, tax reporting mechanics for non-shekel conversions, or whether customers will be permitted to withdraw their crypto to an external personal wallet. These details will substantially shape how competitive the offering is compared to existing Israeli crypto exchanges (Bits of Gold, eToro's Israeli operations, and others). The Capital Market Authority's new VASP capital requirements — a minimum of NIS 2 million (approximately $676,000 USD) in equity capital for service providers without custody, NIS 2.5 million (approximately $845,000 USD) with custody — apply to licensed exchanges but not to banks operating under Bank of Israel supervision, which face a different and in some respects stricter regulatory regime.
Why the Competitive Moment Matters
Over 25% of Israelis have reportedly held or used digital assets in the past five years, giving the country one of the highest per-capita crypto adoption rates among developed economies. A KPMG analysis projected that a more regulated and accessible crypto ecosystem could generate roughly 70,000 jobs by 2035 and economic benefits of NIS 120 billion (approximately $40.5 billion USD) for the Israeli economy. That adoption has, to date, happened largely outside the traditional banking system — through dedicated exchanges, peer-to-peer transactions, and overseas platforms.
Leumi's move creates direct competitive pressure on Israel's other major commercial banks — Hapoalim, Mizrahi Tefahot, and Discount — none of which has announced a comparable offering. First-mover dynamics in banking product rollouts are real: the bank that establishes the customer habit of buying Bitcoin from a banking app is also the bank keeping that customer's assets under one roof. The question is whether the Bank of Israel's approval timeline will hold for a 2027 launch, or whether the 2026 regulatory wave will need more time to fully institutionalize before the central bank extends its sign-off to a specific product.
Galaxy CEO Mike Novogratz has articulated a vision in which institutional crypto infrastructure eventually extends financial services broadly to populations currently underserved by traditional banking. The Leumi deal — an institutional custody technology company whose founders are Israeli, helping a 124-year-old Israeli bank offer its customers access to assets that a quarter of the country already uses — is a recognizably Israeli version of that vision.
Frequently Asked Questions
Will Bank Leumi customers be able to withdraw their crypto to a personal wallet?
Bank Leumi has not yet disclosed whether customers will have the option to transfer their Bitcoin, Ethereum, or Solana holdings from the Leumi Trade or Pepper app to a private, self-controlled wallet. Custodial bank services frequently restrict this withdrawal path to maintain their hold on the custody relationship, but the bank has not confirmed its policy. This is one of several operational details — alongside fee structures and bid-ask spreads — that Leumi says will be disclosed as the Bank of Israel approval process progresses toward a 2027 launch.
Why does GK8's "air-gapped" custody matter for a bank, and does it make my crypto safer than on an exchange?
GK8's Impenetrable Vault uses patented technology that creates, signs, and broadcasts crypto transactions without any digital network connection — meaning there is no remote attack surface for hackers to exploit at the moment of key use. This is technically stronger than standard cold wallets (which briefly connect to a computer when signing) and far stronger than exchange "hot wallets" (which are always online). For bank customers, the practical meaning is that even a sophisticated remote intrusion of GK8's systems could not steal private keys from the vault. What air-gapped custody does not eliminate is counterparty risk: your crypto is held by the bank via GK8, not in a wallet you control. If you want true self-custody, you need your own private keys — and a personal hardware wallet.
Will other Israeli banks follow Leumi into crypto trading?
Hapoalim, Mizrahi Tefahot, and Discount — Israel's other three major commercial banks — have not announced comparable offerings as of August 13, 2026. Leumi's announcement creates measurable first-mover pressure; in retail banking, the first institution to build a product habit with a customer tends to retain that customer for associated services. Whether competitors respond before or after Leumi's 2027 launch depends partly on how quickly the Bank of Israel signals general openness to bank-operated crypto trading, and partly on how much customer demand the Leumi announcement generates. The Capital Market Authority's concurrent tightening of VASP regulations may accelerate the case for banks — rather than independent exchanges — as the primary regulated crypto on-ramp in Israel.
What happens to my crypto if something goes wrong with Bank Leumi or Galaxy Digital?
Cryptocurrency holdings in a custodial bank account are not covered by the same deposit insurance protections that apply to shekel-denominated deposits. If Bank Leumi were to enter insolvency proceedings, customers' crypto positions would be treated as assets of the estate alongside other claims — not as separately protected funds. This is the same risk that applies to crypto held at any exchange or custodian. Israel's Capital Market Authority requires licensed VASPs to segregate customer assets from company assets, and GK8's white-label model is designed so the bank — not Galaxy — holds the custody relationship. But the absence of a formal deposit-insurance analog for crypto is a structural feature of all bank-held crypto services, not a Leumi-specific concern. Customers who want to eliminate counterparty risk entirely need to move crypto to a personally controlled wallet with their own private keys.
