The U.S. Securities and Exchange Commission (SEC) has unveiled a comprehensive set of proposed regulations that would reshape how investment advisers, broker‑dealers, and registered investment funds handle the custody of cryptocurrencies and other digital assets.
The draft rule, issued as part of the agency’s broader effort to bring clarity to the rapidly evolving crypto market, outlines specific requirements for safeguarding client holdings, maintaining accurate records, and ensuring that custodial practices meet the same standards applied to traditional securities. At its core, the proposal seeks to close a regulatory gap that has existed since the SEC first began addressing digital assets more than a decade ago. While existing securities laws already impose fiduciary duties on advisers and custodians, the unique technical characteristics of blockchain‑based tokens—such as private key management, multi‑signature wallets, and the potential for irreversible transfers—have left many market participants uncertain about how to comply.
The new rule attempts to translate those abstract fiduciary responsibilities into concrete operational steps, thereby reducing the risk of client loss, fraud, or mismanagement. Key provisions of the draft include: 1. **Eligibility and Registration**: Any entity that holds, safeguards, or controls crypto assets on behalf of clients must be registered with the SEC as a qualified custodian. The rule clarifies that traditional custodians can qualify if they demonstrate adequate technological controls, while pure‑play crypto custodians must meet heightened capital, insurance, and governance standards.
2. **Segregation and Accounting**: Custodians must keep client holdings separate from their own proprietary assets, using either separate wallets or robust internal accounting systems that can reliably trace each token to its rightful owner.
The proposal mandates periodic reconciliation reports, independent audits, and real‑time transparency tools that allow clients to verify balances directly on the blockchain. 3.
**Security Controls**: The SEC outlines a minimum security framework, including multi‑factor authentication, hardware security modules, cold‑storage solutions, and incident‑response plans. Custodians are required to document their key‑management policies, conduct regular penetration testing, and maintain insurance coverage sufficient to cover potential losses from cyber‑theft or operational failures.
4. **Record‑Keeping and Reporting**: Detailed transaction logs must be retained for a minimum of five years, capturing every inbound and outbound movement of digital assets, the associated wallet addresses, timestamps, and the purpose of each transfer. Custodians must also file periodic reports with the SEC, disclosing aggregate holdings, risk exposures, and any material incidents that could affect client assets. 5.
**Client Disclosure and Consent**: Before accepting custody of a client’s crypto holdings, custodians must provide clear, plain‑language disclosures that explain the risks inherent to digital assets, the specific safeguards in place, and the client’s rights to withdraw or transfer assets. The rule emphasizes that clients must give informed consent, mirroring the standards applied to traditional securities custody. 6. **Audit and Examination Authority**: The SEC retains the power to conduct on‑site examinations of custodial firms, review their internal controls, and assess compliance with the rule’s requirements.
Non‑compliant entities could face civil penalties, injunctions, or revocation of their registration. The timing of this proposal carries symbolic weight. It arrives as Commissioner Hester Peirce, the inaugural head of the SEC’s Crypto Task Force, prepares to leave the commission after a tenure marked by vigorous advocacy for clearer, more balanced crypto regulation. Peirce, often dubbed “Crypto Mom” by industry observers, has championed a pragmatic approach that balances investor protection with innovation.
Her departure this week signals the end of an era for the task force, and the proposed rule can be seen as a culminating effort to embed the task force’s priorities into the agency’s formal rulebook. Industry reaction has been mixed. Established custodians and large financial institutions have generally welcomed the move, viewing the rule as a pathway to greater legitimacy and a level playing field.
They argue that clear standards will reduce compliance uncertainty, lower legal risk, and encourage more institutional capital to flow into the crypto space. Conversely, some pure‑play crypto firms have expressed concern that the capital and insurance thresholds may be prohibitive for smaller players, potentially consolidating custody services among a handful of well‑capitalized firms and stifling competition. Consumer advocates, meanwhile, have praised the emphasis on transparency, segregation, and robust security controls.
They note that past incidents—such as high‑profile exchange hacks and the loss of billions in digital assets—underscore the need for stringent custodial safeguards. By mandating independent audits and real‑time verification tools, the SEC aims to give investors a clearer view of where their tokens reside and how they are protected.
The proposed rule is not yet final. The SEC has opened a 60‑day public comment period during which market participants, legal scholars, and the general public can submit feedback, suggest modifications, or raise concerns about specific provisions. Historically, the agency has incorporated substantive changes based on stakeholder input, so the final version may look different from the initial draft.
Beyond the immediate practical implications, the rule reflects a broader shift in how regulators view digital assets. Rather than treating them as an entirely new class of property, the SEC is increasingly integrating them into the existing securities framework, applying familiar concepts of fiduciary duty, custody, and investor protection. This approach may pave the way for further regulatory alignment across other agencies, such as the Commodity Futures Trading Commission (CFTC) and the Financial Crimes Enforcement Network (FinCEN), which have also been developing complementary guidance.
In summary, the SEC’s proposed crypto custody rule represents a significant step toward establishing a coherent regulatory environment for digital assets. By setting clear standards for registration, segregation, security, record‑keeping, and client disclosure, the agency hopes to mitigate the risks that have plagued the industry while fostering greater confidence among institutional investors. As the comment period unfolds and Commissioner Peirce departs, the crypto community will be watching closely to see how the final rule balances the twin goals of protection and innovation, and whether it ultimately broadens access to safe, regulated custodial services for a wider range of market participants.