The Custody Question Moves to Center Stage
For years, the defining question in U.S. crypto regulation was which tokens qualify as securities. That debate is now being overtaken by a more practical problem: once a broker-dealer, investment adviser or fund decides to touch crypto assets, where should those assets sit, and what rules should govern control of the private keys?
The Amendments to the Custody Rules (RIN 3235-AN46) entered review at the Office of Information and Regulatory Affairs (OIRA) within the White House Office of Management and Budget on August 25. The SEC plans to propose draft rules by October 2026. The project is flagged as “economically significant” and marked as deregulatory in direction, though the actual text remains undisclosed.
Why Custody Is the Gatekeeper
Custody is not a back-office detail — it is the gate through which institutional capital must pass. A pension fund, RIA or mutual fund cannot hold digital assets at scale until it has a legally recognized, auditable, bankruptcy-remote place to keep them. Without that, allocators face a binary choice: stay out, or accept operational and legal risk their compliance teams will not sign off on.
The existing custody framework was written for a world of securities held at banks, transfer agents and clearing agencies. Applying it to assets secured by private keys raises unresolved questions:
- Can a qualified custodian hold crypto directly, or must it use a sub-custodian?
- How should key management, sharding and multi-signature arrangements be audited?
- What happens to client assets in a custodian’s bankruptcy?
- Do staking, lending and other yield activities sit inside or outside the custody perimeter?
The Deregulatory Signal — and Its Limits
The “deregulatory” tag matters. It suggests the SEC is aiming to remove friction rather than add new burdens, potentially broadening the set of permissible custodians and clarifying how advisers can satisfy their safekeeping obligations. That would be a meaningful shift from the enforcement-first posture that dominated recent years.
But a proposal is not a rule. With a draft not expected until late 2026, the timeline leaves a long window of uncertainty. In the meantime, institutions will keep relying on a patchwork of state trust charters, foreign custodians and bespoke no-action relief.
What to Watch
The real test is whether the final text creates a genuine on-ramp — a clear, scalable path for regulated entities to custody digital assets — or simply re-skins existing requirements. If it succeeds, custody could become the quiet infrastructure layer that finally lets institutional money enter crypto at scale. If it stalls, the market will keep building workarounds, and the U.S. will keep exporting its custody business abroad.
