Most likely some sort of cold wallet. With some in hot wallets for liquidity. There are many crypto custodians who do this.
Now they do have to design redundancies for the keys. eg. they should not lose access to the assets because say they made it too safe and cant find the keys anymore :p
It's funny because it happened with Prime Trust a crypto custodian. But I'm sure a company like BlackRock can and will do better.