The SEC is revisiting crypto custody, and that matters because custody is where digital assets stop being an abstract debate and turn into a real-world risk problem for advisers, funds, and their clients.
- The SEC has advanced a custody rule review step.
- Crypto custody still hinges on the “qualified custodian” problem.
- Congress and the SEC are both trying to set the rails.
The U.S. Securities and Exchange Commission sent a proposed crypto custody rule to the White House Office of Management and Budget for review on Aug. 25, according to the filing process described in the materials. If the proposal clears that review, the SEC could publish a rule that clarifies how investment advisers and investment companies hold crypto assets for clients, and possibly trim custody requirements it now considers outdated, as noted in SEC moves crypto custody rule forward with White House.
That is a meaningful procedural step, not bureaucratic wallpaper. Custody rules decide who is allowed to hold client assets, under what conditions, and with what safeguards. In crypto, that gets messy fast because control often comes down to private keys, wallet security, and transaction-signing authority rather than a neat brokerage statement and a locked vault.
Existing SEC custody rules generally require assets to be held with a qualified custodian, meaning an approved third party that meets SEC standards for safeguarding client property. That framework works reasonably well for traditional securities. Crypto has never fit it cleanly, and pretending otherwise is how you end up with regulatory nonsense dressed up as certainty.
The proposal would apply to rules under both the Investment Advisers Act of 1940 and the Investment Company Act of 1940. Those laws are the legal plumbing behind adviser custody obligations and fund custody rules, and they were written long before anyone had to explain hot wallets to a compliance officer.
The SEC’s earlier Safeguarding Advisory Client Assets proposal, first floated in March 2023, is important context here. In that rulemaking, the agency directly addressed how crypto custody can differ from traditional asset custody. It said due care may require a cold wallet in many cases, but that a hot wallet could be appropriate for frequent trading situations, and that a hybrid setup might make sense depending on the facts and circumstances.
For readers newer to the term: a cold wallet is kept offline, which makes it harder to hack but less convenient for active trading. A hot wallet stays connected to the internet, which makes it more usable but also more exposed. In practice, firms may use offline storage for reserves and online wallets for day-to-day activity. That’s not glamorous, but it’s far more honest than pretending every digital asset can be guarded the same way.
The earlier proposal also acknowledged a basic truth that still gets buried under regulatory jargon: stricter custody standards can improve investor protection, but they can also increase compliance costs and reduce the number of firms willing or able to provide custody services. That trade-off is real. Safety is not free, and in crypto, neither is convenience.
Details of the new custody proposal are not public yet. Full text will only become available after the White House Office of Management and Budget finishes reviewing it. After that, the proposal would return to the SEC, where the commission would decide whether to publish it for public comment. Under normal rulemaking procedure, a proposed rule generally stays open for comment for at least 60 days once published.
That comment period is where the actual fight starts. Investment advisers, investment companies, custody providers, and crypto firms will likely focus on the same core issue: whether the SEC is modernizing the rules in a way that actually works for digital assets, or just rewrapping old assumptions in newer language and calling it progress.
The SEC is not acting in a vacuum. In July, it placed three crypto rule proposals on its 2026 regulatory agenda, covering crypto assets, broker-dealers, and market structure. In June, it released a 2026 to 2030 strategy that identified digital assets, blockchain infrastructure, and tokenized financial products as areas of focus. That suggests the agency is trying to build out a broader crypto framework, not just tinker around the edges, with related guidance like Staff Responses to Questions About the Custody Rule still shaping the compliance picture.
SEC Chair Paul Atkins said in July that the agency was
“ready, willing and able”to act where it has authority. That is the right posture if the goal is to reduce uncertainty instead of letting it linger forever. The harder question is whether the agency can write rules that are both usable and tough enough to keep bad actors from turning custody into a slapdash side hustle.
Congress is still working on the larger market-structure picture. The Senate continues to debate the Digital Asset Market Clarity Act, while the House passed its version of the CLARITY Act in 2025. The exact legislative outcome still matters because custody rules govern how client assets are safeguarded, while market-structure legislation is about how tokens are classified, traded, and supervised. Those are related fights, but they are not the same fight.
The House bill text points toward a broader framework for digital assets, including language around digital commodity issuers, decentralized governance, and whether a blockchain has reached “maturity” under the law. It also includes intermediary-registration concepts that would bring more of the crypto market under defined compliance lanes. In plain English: lawmakers are trying to decide not just what crypto is, but which firms get to handle it and under what rules.
That is the part that really matters. If the SEC gets custody right, advisers and funds may finally have a clearer path to hold Bitcoin and other digital assets without stepping through legal traps every five feet. If it gets it wrong, U.S. firms will keep living in compliance limbo while the market routes around them. Nobody serious wants a system where institutional adoption depends on guesswork and prayer.
There is also a bigger philosophical point here. Crypto custody is not just a technical issue. It is a test of whether regulators can adapt legacy finance rules to bearer-style digital assets without breaking the thing they are trying to protect. Bitcoin does not care about your filing cabinet. The law, unfortunately, often still does.
Key takeaways
-
Why does crypto custody matter?
Because whoever controls the keys effectively controls the asset. In regulated finance, that makes custody central to investor protection, not a back-office detail. -
What is a qualified custodian?
It is an approved third party allowed to hold client assets under SEC rules. The problem is that crypto-native firms often do not fit legacy definitions neatly. -
What might the SEC change?
The agency is expected to clarify how advisers and investment companies can hold crypto assets for clients, and it may revisit older custody requirements that no longer match market practice. -
Why does Congress matter here?
Because custody rules and market-structure legislation are connected. The SEC can act where it believes it has authority, but Congress could still redraw the broader regulatory map. -
What should readers watch next?
The actual proposal text, the SEC vote on whether to publish it, and the public comment period. That will show whether the rule is a practical framework or just more legal fog with better branding.
For broader context on how the agency is moving, see the SEC Chair Paul Atkins to Lead Crypto Custody Roundtable and Kraken Parent Payward Files for OCC Trust Charter to Expand, both of which show how custodial standards are shaping the next phase of institutional crypto infrastructure.
At the same time, the SEC’s own Statement on Regulation Crypto Assets: Fit-for-Purpose underscores the point: the agency knows it cannot keep pretending crypto fits neatly inside every old rulebook page.
Further reading
For the regulatory text behind the SEC’s custody rethink, this is the cleanest reference point.
