The U.S. Securities and Exchange Commission has introduced a comprehensive set of proposed regulations that would reshape how investment advisers and pooled investment vehicles handle the custody of digital assets. This initiative, announced as part of the SEC’s broader effort to bring clarity and investor protection to the rapidly evolving cryptocurrency market, marks a symbolic farewell to Commissioner Hester Peirce, the inaugural head of the agency’s Crypto Task Force, who is set to leave the commission at the end of the week.
The draft rule is designed to address a number of long‑standing concerns that have plagued the industry since the early days of crypto investing. At its core, the proposal seeks to impose stricter standards on how custodial arrangements for virtual currencies are structured, monitored, and disclosed.
By doing so, the SEC hopes to close gaps that have allowed fraud, misappropriation, and operational failures to occur in environments where traditional safeguards—such as segregation of client assets, regular audits, and robust internal controls—have often been absent or inadequately applied. Key components of the proposed rule include: 1. **Definition of Custody** – The SEC expands its definition of custody to cover not only direct control of private keys but also any situation in which an adviser or fund has the ability to withdraw, transfer, or otherwise manipulate crypto assets on behalf of a client. This broader interpretation ensures that entities cannot sidestep regulatory oversight simply by using third‑party custodians while retaining de facto control.
2. **Eligibility Criteria for Custodians** – The rule outlines specific qualifications that a third‑party custodian must meet to be deemed acceptable.
These criteria include registration with the SEC as a qualified custodian, adherence to stringent cybersecurity standards, the implementation of multi‑factor authentication for key management, and the maintenance of comprehensive insurance coverage to protect against loss or theft. 3. **Segregation and Record‑Keeping** – Advisers and funds will be required to keep client crypto holdings separate from their own proprietary assets.
Detailed record‑keeping protocols must be established, documenting every transaction, the exact location of each asset (including wallet addresses and custody provider), and the method used to verify ownership. 4. **Periodic Audits and Reporting** – The proposal mandates annual independent audits of custodial arrangements, with audit reports submitted to the SEC.
Additionally, advisers and funds must provide quarterly disclosures to investors, outlining the status of their crypto holdings, any changes in custodial relationships, and any incidents that could affect the safety of the assets. 5. **Risk Management and Cybersecurity** – Entities must develop and maintain a robust risk management framework that specifically addresses the unique vulnerabilities of digital assets. This includes regular penetration testing, incident response plans, and employee training focused on cyber threats.
6. **Investor Disclosure Requirements** – The SEC emphasizes transparency by requiring advisers and funds to disclose, in plain language, the risks associated with crypto custody, the identity and qualifications of any third‑party custodian, and the steps taken to mitigate those risks. This information must be presented in prospectuses, offering memoranda, and any other marketing materials.
The proposed rule also touches on the treatment of “cold storage” solutions—offline wallets that are considered the gold standard for security. While the SEC acknowledges the heightened protection offered by cold storage, it still requires that firms maintain detailed logs of how private keys are generated, stored, and accessed, and that they have documented procedures for recovering keys in the event of loss.
Commissioner Peirce, who has been a vocal advocate for clearer crypto regulations throughout her tenure, is credited with shepherding the task force that laid the groundwork for these proposals. In a recent statement, she highlighted the importance of balancing innovation with investor safety, noting that “the promise of digital assets can only be realized when market participants have confidence that their holdings are protected by rigorous, enforceable standards.” Her departure signals the end of an era, but the rulemaking process she helped initiate is expected to continue under the guidance of her successors. Industry reaction to the draft has been mixed.
Some market participants welcome the increased clarity, arguing that a well‑defined regulatory framework will attract more institutional capital and reduce the reputational risk associated with crypto investments. Others express concern that the compliance burden could be prohibitive for smaller advisers and emerging funds, potentially stifling competition and innovation. Several trade groups have already filed comments, urging the SEC to consider a tiered approach that scales requirements based on the size of the adviser’s crypto exposure and the sophistication of its operational infrastructure.
They argue that a one‑size‑fits‑all model could inadvertently push smaller players out of the market, consolidating custody services among a handful of large providers. The public comment period for the proposal is slated to run for 60 days, during which stakeholders—including advisers, custodians, investors, and consumer advocacy groups—can submit feedback. The SEC has pledged to review all submissions carefully and to incorporate constructive suggestions before finalizing the rule.
If enacted, the new custody standards would align the treatment of crypto assets more closely with that of traditional securities, bringing the industry into a regulatory regime that emphasizes transparency, accountability, and investor protection. The rule would also likely influence state-level regulators and international bodies that are watching the U.S.
approach as a potential model. In summary, the SEC’s draft custody rule represents a significant step toward mainstreaming digital assets within the existing financial regulatory architecture. By setting clear expectations for how custodial relationships should be structured, monitored, and disclosed, the agency aims to reduce the risk of fraud and operational failures that have plagued the sector. While the final shape of the rule will depend on the forthcoming comment period and subsequent revisions, the proposal signals a decisive move toward a more secure and trustworthy crypto market—one that balances the innovative spirit of the technology with the protective safeguards long‑established for traditional investors.