SEC Introduces Draft Regulations on Crypto Custody for Investment Advisers and Funds

The U.S. Securities and Exchange Commission has unveiled a draft rule that would reshape how investment advisers and pooled investment vehicles handle the custody of digital assets.

This proposal arrives at a pivotal moment for the SEC’s newly formed Crypto Task Force, marking the last major policy initiative under the stewardship of its inaugural chair, Commissioner Hester Peirce, who is set to leave the commission later this week. **Background and Context** The rapid growth of the cryptocurrency market over the past decade has presented regulators with a host of novel challenges, not least of which is the question of how to safeguard investors’ digital holdings. Traditional securities custodial standards, codified in Rule 206(4)-2 under the Investment Advisers Act of 1940, were designed for physical certificates and electronic book‑entry securities, not for decentralized tokens that reside on blockchains. As a result, many advisers and fund managers have struggled to reconcile existing compliance obligations with the technical realities of crypto custody.

Commissioner Peirce, a vocal advocate for clearer, technology‑friendly regulation, has long argued that the SEC must provide a clear framework that balances investor protection with the innovative potential of digital assets. The new proposal is intended to fill that regulatory gap by extending the definition of “custody” to include the unique characteristics of crypto‑based holdings, such as private‑key control, multi‑signature wallets, and third‑party custodial services. **Key Provisions of the Proposed Rule** 1.

**Expanded Definition of Custody** The draft rule broadens the term “custody” to encompass any situation where an adviser or fund has the ability to direct the purchase, sale, or transfer of a digital asset, or where it holds the private keys that grant access to those assets. This includes both direct control (e.g., an adviser’s own wallet) and indirect control through third‑party custodians, provided the adviser retains the authority to move the assets without client consent.

2. **Enhanced Safeguard Requirements** Advisers and funds would be required to implement robust risk‑management controls, including: - Multi‑factor authentication and hardware security modules for key storage; - Regular independent audits of custodial arrangements; - Detailed incident‑response plans for cyber‑theft or loss of private keys.

The rule also calls for periodic penetration testing and the use of cold‑storage solutions where feasible. 3. **Third‑Party Custodian Oversight** When an adviser outsources custody to a qualified third‑party, the adviser must conduct thorough due‑diligence, document the selection process, and retain the right to terminate the relationship if the custodian fails to meet the SEC’s standards.

The custodian must be registered with the SEC as a qualified custodian, a status that will now require demonstrable expertise in blockchain security. 4. **Client Disclosure and Consent** The proposal mandates clear, concise disclosures to clients regarding how their digital assets will be held, the risks associated with each custodial arrangement, and the procedures for retrieving assets in the event of a custodian failure. Clients must provide informed consent before an adviser can assume custodial responsibilities.

5. **Record‑Keeping and Reporting** Advisers will need to maintain detailed records of all crypto‑related transactions, including timestamps, wallet addresses, and the method of execution (on‑chain vs. off‑chain).

The SEC also proposes a periodic reporting requirement, where advisers submit summaries of their custodial practices and any material incidents to the commission. **Implications for the Industry** The proposed rule is likely to have a sweeping impact on the burgeoning crypto advisory sector. Firms that have previously relied on loosely regulated self‑custody models may need to overhaul their technology stacks, invest in specialized security infrastructure, or partner with newly qualified custodians. While the compliance costs could be significant, the rule also promises greater investor confidence, potentially unlocking new capital inflows from institutional investors who have been hesitant to engage with crypto due to custodial uncertainty.

For fund managers, the rule clarifies the path to launching crypto‑focused pooled investment vehicles, such as hedge funds or registered investment companies, by providing a clear set of custodial standards. This could accelerate the development of regulated crypto funds and foster a more mature market ecosystem. **Potential Challenges and Criticisms** Some market participants have expressed concern that the rule may be overly prescriptive, stifling innovation in an area that thrives on rapid iteration.

Critics argue that the requirement for a qualified custodian could create a bottleneck, given the limited number of custodians that currently meet the SEC’s stringent security criteria. Others worry that the reporting burden could disproportionately affect smaller advisers, potentially driving them out of the crypto space. Commissioner Peirce’s departure adds an element of uncertainty to the rule’s final shape.

While the draft reflects her philosophy of balanced, technology‑aware regulation, the remaining commissioners may adjust the language to address industry feedback or to align more closely with traditional securities frameworks. **Next Steps** The SEC has opened a 60‑day public comment period, inviting feedback from advisers, custodians, investors, and other stakeholders.

The agency has also scheduled a series of round‑table discussions to gather additional input on technical implementation issues, such as the treatment of decentralized finance (DeFi) protocols and non‑custodial wallet solutions. After the comment period closes, the commission will review the responses, potentially revise the language, and eventually vote on a final rule.

If adopted, the new custody standards could become effective within 12 to 18 months, giving firms a transition window to adapt their operations. **Conclusion** The SEC’s proposed custody rule represents a landmark effort to bring clarity and investor protection to the fast‑evolving world of digital assets. By expanding the definition of custody, imposing stringent security and disclosure requirements, and establishing oversight for third‑party custodians, the commission aims to create a more secure environment for both advisers and their clients.

While the rule may pose challenges for smaller firms and could spark debate over the appropriate level of regulatory oversight, it also offers a pathway for greater institutional participation and long‑term stability in the crypto market. As the public comment period unfolds, industry participants will have a crucial opportunity to shape the final regulations that could define the future of crypto custody in the United States.