The U.S. Securities and Exchange Commission (SEC) has released a comprehensive proposal that would reshape how investment advisers and registered investment funds handle the custody of crypto‑related assets.
The draft rule, announced as part of the agency’s broader effort to bring clarity to the rapidly evolving digital‑asset market, is being positioned as a capstone to the tenure of Commissioner Hester Peirce, the inaugural head of the SEC’s Crypto Task Force, who is slated to leave the commission later this week. ### Background and Rationale Since the emergence of Bitcoin in 2009, the cryptocurrency ecosystem has expanded from a niche community of technologists into a multi‑trillion‑dollar industry encompassing retail investors, institutional participants, and a growing number of regulated entities such as broker‑dealers, investment advisers, and pooled investment vehicles. While the market’s growth has unlocked new opportunities for diversification and yield generation, it has also exposed investors to a range of operational and security risks.
High‑profile thefts, exchange collapses, and custodial failures have repeatedly highlighted the need for robust safeguards. Commissioner Peirce, who championed a more nuanced, innovation‑friendly approach during her time leading the Crypto Task Force, has consistently argued that clear, rule‑based guidance would reduce regulatory uncertainty and protect investors without stifling technological progress. The new custody proposal reflects that philosophy, aiming to strike a balance between rigorous oversight and the flexibility required for the fast‑moving digital‑asset sector. ### Key Provisions of the Proposed Rule 1.
**Definition of Custody for Digital Assets** – The rule expands the traditional definition of “custody” to explicitly include the holding, safeguarding, and control of private keys, seed phrases, and any other mechanisms that grant access to crypto‑based securities. This ensures that entities that merely store a private key on a third‑party platform are subject to the same fiduciary duties as those holding physical securities.
2. **Eligibility Criteria for Custodians** – Investment advisers and funds must employ a qualified custodian that meets one of three standards: (a) a bank or broker‑dealer registered with the SEC, (b) a qualified custodian licensed under state law with demonstrated expertise in digital‑asset security, or (c) a third‑party custodian that has undergone a rigorous SEC‑approved audit and possesses insurance coverage for loss due to cyber‑theft or operational failure.
3. **Segregation and Record‑Keeping** – The proposal mandates that client assets be segregated from the custodian’s own holdings, with clear, auditable records of each client’s holdings, transaction history, and the method of access (e.g., hardware wallet, multi‑signature arrangement).
Custodians must retain these records for a minimum of five years and make them available for inspection upon request. 4. **Risk Management and Internal Controls** – Entities must develop and implement written policies addressing key risk areas such as cyber‑security, business‑continuity planning, and disaster recovery.
The rule requires periodic penetration testing, vulnerability assessments, and the use of multi‑factor authentication for any personnel with access to private keys. 5.
**Reporting and Disclosure Obligations** – Investment advisers and funds will be required to disclose their custody arrangements in Form ADV and Form PF, respectively. The disclosures must detail the custodian’s identity, the nature of the assets held, insurance coverage, and any third‑party service providers involved in the custody chain. 6. **Compliance with Existing Anti‑Money‑Laundering (AML) Requirements** – The proposed rule reinforces that custodial services for crypto assets are subject to the same AML and Know‑Your‑Customer (KYC) obligations that apply to traditional securities custodians.
Custodians must implement transaction monitoring systems capable of detecting suspicious activity across blockchain networks. ### Potential Impact on the Industry If adopted, the rule would represent the most extensive regulatory framework for crypto custody in the United States to date. For investment advisers, the new obligations could necessitate a reassessment of existing client agreements, technology stacks, and vendor relationships.
Many advisers may need to transition from self‑custody models—where they directly manage private keys—to third‑party custodial solutions that meet the SEC’s criteria. Pooled investment vehicles, such as hedge funds and private equity funds, would also face heightened scrutiny. The requirement for segregation and detailed record‑keeping could increase operational costs, but it would likely enhance investor confidence and could make it easier for such funds to attract capital from more risk‑averse institutional investors.
On the custodial side, the rule could accelerate the maturation of the crypto‑custody market. Established banks and broker‑dealers may expand their service offerings to include digital‑asset custody, leveraging their existing compliance infrastructure. Meanwhile, specialized crypto‑custodians would need to obtain additional certifications and undergo regular SEC audits, potentially raising barriers to entry for smaller players. ### Reactions from Stakeholders The industry’s response has been mixed.
Pro‑innovation groups, including the Chamber of Digital Commerce, have praised the SEC’s effort to provide clarity but caution that overly prescriptive requirements could hinder the development of novel custody technologies such as decentralized custodial protocols and threshold‑signature schemes. Conversely, consumer‑protection advocates have welcomed the emphasis on segregation, insurance, and robust risk‑management practices, arguing that these measures are essential to prevent another wave of high‑profile losses. Commissioner Peirce’s departure adds a symbolic layer to the announcement.
Throughout her tenure, she has been a vocal advocate for balanced regulation that does not impede technological advancement. Her final act—ushering in a detailed custody framework—may be viewed as an attempt to cement a legacy of pragmatic oversight.
### Next Steps and Timeline The SEC has opened a 60‑day public comment period, during which market participants, legal scholars, and the general public can submit feedback on the proposal. The agency has indicated that it will consider the comments and may issue a revised rule before the end of the calendar year. Should the final rule be adopted, entities would likely be given a phased compliance timeline, possibly spanning 12 to 24 months, to allow for the transition to compliant custodial arrangements.
### Conclusion The SEC’s proposed custody rule marks a significant milestone in the United States’ regulatory journey toward integrating digital assets into the mainstream financial system. By extending traditional custodial standards to encompass the unique characteristics of crypto‑based securities, the agency aims to protect investors, promote market integrity, and provide a clear operating framework for advisers and funds. While the rule will undoubtedly impose new compliance burdens, it also offers an opportunity for the industry to professionalize its custody practices, foster greater institutional participation, and ultimately build a more resilient and trustworthy crypto ecosystem.