The SEC Is Rewriting Crypto Custody: Institutional Access May Shift From Prohibition to Conditions

One of the hardest barriers to institutional participation in crypto is not whether an asset can be bought, but who holds it afterward and who is accountable when something goes wrong. U.S. custody frameworks were built largely around traditional securities. Many digital assets lack a suitable conventional custodian and require a different stack of key management, on-chain settlement, and operational security. That mismatch has left advisers and funds in prolonged uncertainty.

On October 1, the SEC proposed new crypto custody rules for investment advisers and funds. According to Commissioner Hester Peirce’s public explanation, the proposal would broaden available custody paths. Under limited conditions, an adviser could hold crypto assets for clients or regulated funds, while eligible state trust companies could qualify as permitted custodians.

“Self-custody” does not mean an investor holding a hardware wallet

The proposal’s use of self-custody can be confusing. It does not describe individuals controlling their own private keys. It refers to an adviser assuming custody on behalf of a client or regulated fund when no suitable permitted custodian is available. Peirce suggested the label “shelf-custody” to distinguish the arrangement from genuine investor self-custody.

The route would not be unconditional. Based on the public description, an adviser would first need to determine that no permitted custodian is available for the asset, then repeat that determination at least quarterly. It is better understood as a constrained fallback than as permission to bypass third-party custody whenever convenient.

State trust companies could become a new competitive layer

Another important change is the potential recognition of eligible state trust companies. Before using one—and annually thereafter—an adviser or fund would need a reasonable basis to believe that the company is authorized by the relevant state banking regulator and maintains written safeguards against theft, loss, misuse, and misappropriation.

If adopted, competition may move away from the simple question of whether a provider is a large traditional bank and toward whether it can demonstrate genuine digital-asset competence. Relevant controls include multiparty computation or hardware security modules, hot-and-cold wallet segregation, key recovery, on-chain monitoring, treatment of forks and airdrops, separation of internal duties, and independent verification of assets and liabilities.

What the proposal could change

For now, this is a proposal, not an effective final rule. It also does not mean the SEC has declared every crypto asset a security. The official material specifies that the relevant requirements apply only where an asset falls within the existing statutory categories of funds, securities, or similar investments. The market should not read the announcement as blanket approval.

The directional change still matters. The old problem was that compliant custody channels were scarce while trading and safeguarding digital assets differed materially from traditional instruments. Even institutions with demand struggled to construct an auditable operating model. The proposal acknowledges that reality and attempts to replace simple exclusion with conditions, recurring determinations, and documented controls.

• Asset managers may gain product flexibility, while assuming heavier operational, audit, and key-governance obligations.
• Custodians may find that licensing is no longer the only moat; demonstrable technical controls will matter.
• Trading platforms could support a smoother institutional workflow, but would not automatically become permitted custodians.
• Investors may receive more choices, not zero risk; platform insolvency, protocol risk, and adviser operational risk remain distinct.

The decisive details will be how a final rule defines the absence of an available custodian, which assets can use an exception, and whether auditors can verify on-chain control effectively. The next phase of U.S. institutional crypto adoption may be shaped less by the next ETF than by these seemingly dry custody mechanics.

This article discusses a public SEC proposal and is not legal or investment advice. The final rule may change following the comment process.