The SEC’s proposed crypto custody rules would give advisers and regulated funds a clearer federal path for holding certain digital assets, but the proposal also leaves several operational and legal limits unresolved. The SEC issued Proposal S7-2026-35 on October 1, 2026, and the proposal was published in the Federal Register on October 6, 2026, with comments due on December 7, 2026, according to the SEC proposal page.
The proposal matters because custody is not just a legal label for crypto assets. It determines who controls private keys, how client assets are segregated, how records are reconciled, and what evidence an adviser must keep if something goes wrong. The rule is still only a proposal as of October 20, 2026, so advisers should treat it as a planning document rather than a settled compliance standard.
What Crypto Custody Rules Changed
State Trust Companies As Qualified Custodians
The proposed crypto custody rules would permit investment advisers and regulated funds to use state trust companies as qualified custodians for crypto assets under both the Advisers Act of 1940 and the Investment Company Act of 1940. That would broaden the possible custodian set beyond banks or broker-dealers, based on the research record.
This change is significant for digital asset operations because many crypto custody providers have been organized as trust companies rather than traditional broker-dealers. Still, broader eligibility does not mean every provider would be suitable for every asset. Advisers would still need to evaluate whether a qualified custodian is available for the specific crypto asset, network, and custody model involved.
Self-Custody In Limited Cases
The proposal would allow adviser self-custody only in limited circumstances. Before self-custody, an adviser would need a written Qualified Custodian determination stating that no qualified custodian is available for that specific crypto asset. The adviser would then need to reassess that determination quarterly.
This is a narrow permission, not a general approval of adviser-controlled wallets. The determination must be tied to due diligence about the asset, its network, and whether custodians generally known to the adviser offer services for that asset type. The proposal also states that cost cannot be the basis for deciding that no qualified custodian is available.
Where The Proposal Stops
Crypto Custody Rules And Asset Scope
A central limitation is asset scope. The proposal covers crypto assets that are “client funds or securities” under the Advisers Act custody rule, or “securities and similar investments” under the Investment Company Act. Assets outside those definitions may sit outside the proposal’s protections.
That boundary creates uncertainty for advisers that work with more than one class of digital asset. A custody process may be required for one token but not for another, depending on the legal classification. The proposal does not resolve the broader classification question for every crypto asset. Advisers would need to map custody obligations asset by asset rather than assume a single control model applies across a full portfolio.
No Fixed Transfer Deadline
The proposal also does not set a fixed deadline for moving a self-custodied crypto asset to a qualified custodian if one later becomes available. Instead, the research record says the proposal grants a grace period that is practicable by systems and resources, without specifying an exact number of days or weeks.
That may help advisers manage technical migration risk, but it also leaves room for interpretation. Private key migration, wallet policy changes, blockchain confirmation timing, and reconciliation updates can all affect transfer planning. A fixed deadline would be simpler to administer, but the proposal uses a more flexible standard.
Adviser Burdens And Control Evidence
Internal Control Reports
For advisers, crypto custody rules would add documentation and control burdens if self-custody is used. The SEC estimated that obtaining internal control reports would average $376,000 per year per adviser with self-custody of client crypto assets, with variation based on asset type and safeguarding system complexity, as described in the Federal Register proposal.
That figure does not mean every adviser would face the same cost. The proposal itself ties variation to the type of asset and the safeguarding system. A simple custody stack and a multi-asset system with different signing rules may not be equal from a control-reporting standpoint.
Operational Guardrails
The proposal describes several safeguarding controls for self-custody. These include limits on access to key material, designation of supervised persons by advisers or boards, client asset segregation standards, reconciliation of on-chain balances with adviser records, and incident response requirements.
Those controls point to the technical character of the proposal. Private keys are not ordinary account credentials. Whoever can use key material may be able to initiate asset movement, so governance over access, approval, and recordkeeping is central to custody risk. For readers comparing compliance and technical duties, our related article on SEC custody technical duties explains how key management and reporting questions can affect adviser operations.
- Quarterly review: Advisers relying on self-custody would need to reassess the written Qualified Custodian determination every quarter.
- No cost shortcut: The proposal would not allow an adviser to reject a qualified custodian merely because the custodian is expensive.
- Record alignment: On-chain balances would need to be reconciled with adviser records under the proposed guardrails.
- Incident response: Self-custody systems would need procedures for responding when safeguarding controls fail or appear to fail.
The practical burden may fall hardest on advisers that hold less common crypto assets, assets with limited custodian support, or assets whose networks require specialized operational knowledge. The proposal does not provide a universal technical template for private key storage, wallet architecture, or signing workflow. That means advisers would need to support their own control design with records, reports, and recurring review.
The SEC estimated that, as of April 20, 2026, there were 10 crypto mutual funds with about $432.5 million in net assets, 122 crypto ETFs with about $8.7 billion, and 72 crypto ETPs with about $117.7 billion. Those figures show why the custody proposal is not only a niche issue for private wallets; it can also affect regulated products that already hold or reference digital assets.
SEC Proposed Custody Framework For Advisers
The practical reading of the SEC’s proposed custody framework is cautious: the crypto custody rules would expand possible custody channels and allow limited self-custody, but they do not remove classification questions, cost pressure, or operational risk. Advisers would still need to decide whether each asset falls within the covered categories and whether a qualified custodian is actually available for that asset.
The proposal also shows a tension between legal custody concepts and blockchain mechanics. A custodian relationship may satisfy a rule, but the actual risk still depends on key access, segregation, reconciliation, and incident response. If an adviser self-custodies, the compliance burden shifts inward, along with the need to document why no qualified custodian was available.
Advisers should avoid treating the proposal as permission to simplify controls. The rule text, if adopted after the comment process, could change from the October 2026 version. Until then, the supported takeaway is limited: the SEC proposed a framework that may make compliant crypto custody more available, while leaving meaningful limits around asset scope, transfer timing, and the cost of proving control quality. For broader infrastructure insights within the same network, visit HW Server.
