SEC proposes crypto custody rule for advisers, funds and state trust companies

The Securities and Exchange Commission proposed a crypto custody framework on Thursday, a 760-page rule that would settle which companies may hold digital assets for investment advisers and regulated funds, and opened a 60-day public comment period. Two provisions carry most of the weight: advisers would be permitted to hold client crypto themselves in certain circumstances, and state-chartered trust companies would be allowed to serve as custodians.

Chairman Paul Atkins framed the proposal as filling a gap rather than expressing a preference. Existing custody rules, he said in a statement, "were designed to protect the assets of advisory clients and regulated funds from loss, theft, misuse, and misappropriation," but they contemplate "the custody and safekeeping only of traditional assets," which he called "an untenable situation in the 21st century." In his account the proposal gives advisers and funds "a compliant pathway where none existed before," replacing the uncertainty left by custody rules crafted for a bygone era.

The text runs wider than the who-holds-it question, clarifying how advisers and regulated funds keep records and what they disclose federally and offering new clarifications of industry practices and auditing requirements, according to CoinDesk's account of the proposal. What the Commission voted out is a proposal rather than a final rule, and its definitions — a handful of words doing most of the work — are now open to contest for 60 days.

Those strands are built to answer one another: a custodian qualifies, the adviser's records show what it holds and where, and the audit tests whether the records are true. The clarifications of industry practices and auditing requirements are the part that decides whether the framework gets used at all, because an adviser cannot accept a custody arrangement it cannot document, and an auditor cannot test controls the rule never specified.

Funds sit on the other side of the same sentence, because the proposal would clarify how regulated funds keep records of crypto assets and what they disclose, placing the obligation on the entity holding assets for investors and not only on the adviser recommending them.

Custody draws this weight because it is the constraint an adviser cannot route around: exposure through a listed wrapper has long been available without holding a token, and this publication has argued that the wrapper became the default on-ramp for digital-asset exposure. Holding the asset is a different problem, and it lands on the same duty the existing rule names — protecting client assets from loss, theft, misuse and misappropriation — which is why the custodian question arrives packaged with recordkeeping and audit rather than as a standalone licensing formality. An adviser that cannot name a custodian it trusts, and cannot produce records showing where the assets sit, has no route to satisfying that duty.

Length is its own filter, and seven hundred sixty pages is readable by the firms that already run custody businesses and by the trade groups that represent them, while the advisers most likely to want the self-custody exception are the least equipped to draft against it. It is a fair guess that the shape of the comment file will reflect that asymmetry.

Self-custody is the provision most likely to be read past its details, and the details narrow it: the SEC said it is using the term the way asset management firms use it, not the way crypto companies typically do, placing the adviser rather than the client in possession of the assets. Two conditions attach — the adviser would have to show expertise in holding crypto assets, and it would have to establish that it cannot find another qualified custodian for the mandate.

Security and control requirements come with the permission, and advisers would have to reevaluate the arrangement every quarter, an SEC official said. The requirement, the official said, would likely bear on newly launched tokens that a custodian did not yet support — the case where an adviser with the expertise and a client mandate would otherwise have nowhere compliant to put the asset.

The expertise condition has no stated benchmark in the coverage available, and the availability condition is harder than it reads: an adviser would have to make, and keep remaking, a finding about a market of custodians it does not control. Quarterly reevaluation converts that finding from a one-time diligence exercise into a recurring documentation obligation, the mechanism that keeps the exception narrow in practice. For an adviser weighing direct holdings, the option is real but conditional, and the condition is one a deepening custodian market can dissolve from the other side.

Permitting state-chartered trusts to act as custodians widens the set of institutions an adviser can hand client crypto to, and it gives state charters a role in answering a question the SEC is otherwise defining for federally regulated advisers and funds. Which states can charter a trust company with the operational capacity to hold digital assets, and what supervision stands behind the charter, does not appear in the coverage available. That silence is the provision's exposure: a custodian that loses client assets creates the same harm whether its charter came from Washington or a state capital.

Whether the proposal applies the same security and control expectations to state-chartered trusts as to other custodians is not addressed in the coverage available, and the covered text does not resolve it. On Atkins's own account, the existing rule contemplates only traditional assets, and the trust provision is the part of the proposal that most directly widens the field. Custody is a fee business, so every institution admitted to the category holds a claim on mandates that currently have nowhere compliant to go; how far the category widens is the change with the clearest commercial consequence, and it is the one least likely to be settled by the proposal's text alone — the final language, not the 760 pages, decides who competes for the work.

Custody was the remaining major topic on the crypto agenda Atkins set out, and CoinDesk reported the Commission has now checked off every item on it. The Commission recently published the Innovation Exemption for tokenizing securities, laying out pathways for companies seeking to tokenize U.S. equities; the exemption is time- and size-limited, leaving the firms building to it subject to a timetable the next Commission controls.

The custody proposal landed the day before Commissioner Hester Peirce departs Friday for a professorship in Virginia; Peirce, who led the crypto task force from its inception, leaves the SEC with two commissioners. The coverage does not name her successor on the task force. Earlier in the week the agency cut the number of commissioners required for a quorum from three to two, adding that if one of the two is conflicted out of a matter, the remaining commissioner can form a quorum.

Those two facts sit next to each other in the record, and the arithmetic shapes what comes after: a two-person Commission with a conflict carve-out can still clear items, so the path from Thursday's proposal to a final vote does not require a fuller bench; a single unconflicted commissioner is enough to form a quorum, against a past requirement of at least three. Any final rule, then, would arrive on the authority of a smaller group than the one that produced the proposal.

Rules are also easier for a later Commission to reopen than statutes are for a later Congress to repeal, which is the ordinary reason not to read a proposal as a settlement. With the Clarity Act dead in the Senate, the text that binds this market is whatever the agencies write, and the agency dockets are where the definitions land. The comment file is the mechanism: 60 days from Thursday for advisers, custodians and state trust supervisors to argue over what expertise means when an adviser holds client tokens, what qualifies a custodian, and what a quarterly review has to document.

The proposal does not, in the coverage available, carry a target date for a final vote. It does carry the first federal text that treats adviser and fund crypto custody as its own problem rather than an awkward case under a rule written for traditional assets — and a comment window, open since Thursday, into which anyone with a custodian to defend or a mandate to place can write a version of the answer.