SEC Introduces Draft Regulations on Crypto Custody for Advisors and Funds

The U.S. Securities and Exchange Commission has unveiled a draft rule that would reshape how investment advisers and pooled investment vehicles handle the custody of digital assets. This proposal arrives at a pivotal moment for the agency’s newly formed Crypto Task Force, a group created to address the rapid evolution of cryptocurrency markets and the unique challenges they pose for regulators, investors, and market participants.

The timing is especially noteworthy because it coincides with the imminent departure of Commissioner Hester Peirce, the task force’s inaugural chair, who is set to leave the commission later this week. Peirce’s tenure has been marked by a strong advocacy for clearer, more flexible regulatory frameworks that encourage innovation while protecting investors, and this new rule can be seen as a culminating effort that reflects her philosophy. ### Background and Context The SEC’s authority over securities extends to many crypto‑related offerings, particularly those that qualify as investment contracts under the Howey test.

As digital assets have become more mainstream, a growing number of registered investment advisers and mutual funds have begun to incorporate cryptocurrencies into their portfolios. However, the existing custody rules—originally drafted for traditional securities—do not neatly apply to assets that exist on decentralized ledgers, can be stored in hardware wallets, and often require private keys for access. This regulatory gap has left many advisers uncertain about compliance obligations, and it has raised concerns among investors about the safety of their holdings. In response, the commission’s Crypto Task Force was launched in 2023 to develop a cohesive approach to digital‑asset oversight.

The task force’s work has included extensive outreach to industry participants, public comment periods, and internal research on the technical nuances of blockchain technology. The draft custody rule is the most concrete product of that effort to date.

### Key Provisions of the Proposed Rule 1. **Definition of Custody for Digital Assets** – The rule proposes a clear definition of what constitutes “custody” in the context of cryptocurrencies. It would consider an adviser to be a custodian if it holds, controls, or has the ability to direct the use of private keys, even if the actual tokens are stored off‑site or in a third‑party service. 2.

**Segregation and Record‑Keeping** – Advisers would be required to maintain detailed records that demonstrate the segregation of client assets from the adviser’s own holdings. This includes maintaining a ledger that tracks each client’s token balances, transaction timestamps, and the specific wallet addresses used for storage. 3. **Third‑Party Custodian Standards** – If an adviser outsources custody to a third‑party provider, the provider must be a qualified custodian under existing SEC rules.

The proposal outlines additional criteria for crypto‑specific custodians, such as robust multi‑signature controls, regular audits, and insurance coverage for loss due to hacking or operational failure. 4.

**Periodic Audits and Reporting** – The rule would mandate annual independent audits of crypto custody arrangements, with findings reported to the SEC. Auditors would need to verify that the custodian’s internal controls are effective and that client assets are accurately accounted for. 5.

**Risk Management and Cybersecurity** – Advisers must adopt comprehensive risk‑management policies that address the unique vulnerabilities of digital assets, including phishing attacks, key‑management failures, and the potential for smart‑contract exploits. The rule encourages the use of hardware security modules (HSMs) and cold‑storage solutions to mitigate these risks.

6. **Disclosure Obligations** – Investment advisers would be required to disclose to clients the specific custody arrangements in place, the identity of any third‑party custodians, and the measures taken to safeguard assets. This transparency is intended to help investors make informed decisions about the safety of their crypto holdings. ### Potential Impact on the Industry The introduction of a dedicated custody rule could have several far‑reaching consequences for the financial services sector.

First, it may lower the barrier to entry for traditional advisers who have been hesitant to add crypto to their offerings due to regulatory uncertainty. By providing a clear compliance roadmap, the rule could encourage broader adoption of digital assets in diversified portfolios. Second, the requirement for qualified custodians is likely to boost demand for specialized crypto‑custody firms. Companies that already provide institutional‑grade storage solutions—such as Coinbase Custody, Gemini, and BitGo—may see an influx of new business as advisers seek compliant partners.

At the same time, the heightened standards could strain smaller custodians that lack the resources to meet audit and insurance requirements. Third, the rule’s emphasis on transparency and reporting could increase investor confidence. One of the most common criticisms of the crypto market has been the perceived lack of oversight and the prevalence of fraud or loss.

By mandating regular audits and clear disclosures, the SEC aims to bring a level of accountability comparable to that of traditional securities custodians. Finally, the rule may influence the broader regulatory landscape beyond the United States. Other jurisdictions that are watching the SEC’s approach could adopt similar standards, leading to a more harmonized global framework for crypto custody.

### Commissioner Hester Peirce’s Legacy and Future Outlook Commissioner Peirce has been a vocal proponent of a balanced regulatory stance—one that protects investors without stifling innovation. Throughout her tenure, she has urged the SEC to modernize its rules to reflect the realities of blockchain technology, arguing that overly burdensome requirements could push legitimate businesses offshore. The custody proposal aligns with her vision by offering a pragmatic, risk‑based approach that acknowledges both the opportunities and the hazards inherent in digital assets. Her departure marks the end of an era for the Crypto Task Force, but the work she helped initiate is likely to continue.

The draft rule will undergo a public comment period, during which industry stakeholders, consumer advocates, and other interested parties can submit feedback. The SEC is expected to refine the language based on these comments before finalizing the rule, potentially within the next year.

### What Advisers Should Do Now Advisers and fund managers should begin preparing for the new regulatory environment by: - Conducting an internal review of current crypto custody practices to identify gaps relative to the proposed definitions and standards. - Evaluating existing third‑party custodians for compliance with the anticipated qualified‑custodian criteria. - Developing or updating risk‑management policies that address cybersecurity, key‑management, and smart‑contract risks.

- Drafting client‑facing disclosures that clearly explain custody arrangements, associated risks, and the steps taken to protect assets. - Monitoring the public comment process and participating where appropriate to shape the final rule. By taking these proactive steps, advisers can position themselves to meet the forthcoming requirements smoothly and continue to offer crypto exposure to their clients with confidence.

In summary, the SEC’s proposed custody rule represents a significant step toward integrating digital assets into the regulated financial system. It seeks to provide clarity, enhance investor protection, and promote responsible innovation. While the rule is still in draft form and subject to change, its core principles are likely to endure, shaping the way crypto is stored, reported, and overseen for years to come.