The U.S. Securities and Exchange Commission (SEC) has taken a significant step toward clarifying the regulatory landscape for digital‑asset custody by issuing a proposed rule that would apply to investment advisers and registered investment funds that hold cryptocurrency on behalf of clients. The draft rule, released as part of the agency’s broader effort to bring consistency and investor protection to the rapidly evolving crypto market, outlines a series of concrete obligations designed to ensure that custodial practices meet the same rigorous standards applied to traditional securities.
While the proposal is technical in nature, its timing carries symbolic weight: it arrives as the inaugural head of the SEC’s Crypto Task Force, Commissioner Hester Peirce, prepares to leave the commission at the end of the week, marking what many observers are calling a “swan song” for the task force’s first chapter. **Key Elements of the Proposed Custody Rule** 1.
**Definition of Custody for Digital Assets** The rule begins by defining “custody” in the context of digital assets. It treats any holding of cryptocurrency that an adviser or fund controls, whether directly on a blockchain ledger, through a third‑party wallet provider, or via a custodial service, as custody for regulatory purposes. This broad definition is intended to capture the many ways firms currently store crypto, from self‑custody with hardware wallets to outsourced solutions that employ multi‑signature arrangements. 2.
**Segregation and Record‑Keeping Requirements** To protect client assets, the proposal mandates that custodial holdings be clearly segregated from the firm’s own proprietary assets. Firms must maintain detailed, audit‑ready records that identify each client’s holdings, the specific blockchain addresses used, and the transaction history associated with those addresses. The SEC emphasizes that these records must be kept in a format that is both searchable and capable of being produced to regulators within a reasonable timeframe. 3.
**Safeguard Measures and Internal Controls** The draft rule outlines a suite of internal controls that custodians must implement. These include multi‑factor authentication for access to private keys, encryption of key material, regular penetration testing of wallet infrastructure, and documented procedures for key recovery in the event of loss or compromise.
The SEC also calls for firms to develop and test incident‑response plans that address potential cyber‑theft, hacking, or operational failures. 4.
**Third‑Party Custodian Oversight** When advisers or funds rely on external custodians, the rule requires that they conduct thorough due‑diligence reviews. This includes evaluating the custodian’s security protocols, insurance coverage, regulatory standing, and the robustness of its disaster‑recovery mechanisms. The adviser must retain written evidence of this due‑diligence and must monitor the custodian on an ongoing basis, updating risk assessments whenever material changes occur. 5.
**Reporting and Disclosure Obligations** Transparency is a central theme of the proposal. Firms will need to disclose, in their Form ADV and other regulatory filings, the nature of their crypto‑custody arrangements, the specific assets held, and any material risks associated with those holdings. Additionally, the rule requires periodic reporting to the SEC of custody‑related metrics, such as the total value of assets under custody, the proportion held in self‑custody versus third‑party custody, and any incidents of loss or theft. 6.
**Compliance with Existing Securities Laws** The SEC makes clear that the custody rule does not exist in a vacuum. All custodial activities must be consistent with existing securities‑law obligations, including anti‑money‑laundering (AML) and know‑your‑customer (KYC) requirements. Firms must also ensure that any digital‑asset securities they hold are properly registered or exempt under the Securities Act of 1933.
**Implications for the Industry** The proposed rule is likely to have a ripple effect across the crypto‑investment ecosystem. For large advisory firms and hedge funds that already employ sophisticated custodial solutions, many of the requirements will be familiar, albeit with a new emphasis on documentation and reporting.
Smaller advisers, however, may find the compliance burden more challenging, especially if they currently rely on informal self‑custody practices or on custodians that have not yet built out the requisite compliance infrastructure. One immediate consequence could be a surge in demand for regulated crypto‑custodians that can meet the SEC’s heightened standards.
Companies such as Coinbase Custody, Gemini, and Fidelity Digital Assets have already begun aligning their services with the agency’s expectations, and the rule may accelerate the consolidation of custodial services among a few well‑capitalized providers. This concentration could benefit investors by offering greater assurance of security, but it also raises questions about market competition and the accessibility of custodial services for emerging advisers.
**The Role of Commissioner Hester Peirce** Commissioner Peirce has been a vocal advocate for a balanced approach to crypto regulation, emphasizing both investor protection and the need for regulatory clarity that does not stifle innovation. Her tenure as the head of the Crypto Task Force saw the SEC move from a largely reactive stance—often issuing enforcement actions after the fact—to a more proactive posture that includes rulemaking, guidance, and outreach.
The custody proposal can be seen as the culmination of that shift, translating the task force’s earlier recommendations into concrete regulatory language. As Peirce prepares to depart the commission, industry participants are reflecting on her legacy. Many credit her with pushing the SEC to engage more directly with the crypto community, hosting round‑table discussions, and encouraging the agency’s staff to develop expertise in blockchain technology. The custody rule, while still a proposal and subject to public comment, stands as a tangible outcome of those efforts.
**Next Steps and Public Comment** The SEC has opened a 60‑day comment period, during which market participants, consumer advocates, and other stakeholders can submit feedback on the proposed rule. Commenters are encouraged to address practical implementation concerns, the potential impact on smaller advisers, and any unintended consequences that might arise from the rule’s language. After the comment period closes, the agency will review the input, possibly revise the rule, and eventually issue a final version. If adopted, the final rule could become effective within a year, giving firms a transition period to adjust their custody practices, update policies, and train staff.
**Conclusion** The SEC’s proposed custody rule represents a pivotal moment for the intersection of traditional financial regulation and the burgeoning world of digital assets. By setting clear standards for how investment advisers and funds must safeguard cryptocurrency holdings, the agency aims to reduce the risk of loss, fraud, and operational failure that has plagued the sector in recent years.
At the same time, the rule seeks to preserve the innovative spirit that drives crypto investment, offering a framework that can evolve alongside technological advances. For advisers, fund managers, and custodians, the path forward will involve careful assessment of current practices, strategic investment in security infrastructure, and active participation in the rule‑making process. As the industry adapts, the ultimate goal remains consistent: to protect investors while fostering a vibrant, trustworthy market for digital assets.