The Securities and Exchange Commission on October 1, 2026, proposed the first federal custody framework written specifically for crypto assets held by registered investment advisers (RIAs) and 1940 Act funds. The 440-page proposal (File No. S7-2026-35) creates two new pathways — state trust compa...
The Securities and Exchange Commission on October 1, 2026, proposed the first federal custody framework written specifically for crypto assets held by registered investment advisers (RIAs) and 1940 Act funds. The 440-page proposal (File No. S7-2026-35) creates two new pathways — state trust companies and conditional self-custody — alongside existing bank and broker-dealer custodians. Comments are due December 7, 2026.
The proposal arrives as Coinbase Custody holds approximately $74 billion in Bitcoin ETF assets, representing roughly 80.8% of all ETF-held BTC through a single counterparty. The crypto custody provider market is valued at $3.52 billion in 2026, according to Research and Markets, and is projected to reach $27.2 billion by 2030. The SEC's rule would reshape the competitive landscape by expanding who qualifies as a custodian and under what conditions — questions that directly affect every institutional allocator's operational stack.
Industry reaction is split. The Investment Adviser Association called the proposal a step toward making the "unnecessarily complex and burdensome custody rule more workable." Better Markets, an investor advocacy group, said it "subjects investors to the very high risk of loss the SEC exists to prevent."
The SEC's proposed rule amends custody provisions under both the Investment Advisers Act (Rule 206(4)-2) and the Investment Company Act (Rule 17f-1 through 17f-7). It defines "crypto asset" as "any digital representation of value that is recorded on a cryptographically secured distributed ledger," explicitly naming Bitcoin, Ether, and Solana as examples.
For non-fund advisory clients, the rule applies only to crypto assets classified as funds or securities. The SEC states that "bitcoin, ether, and solana generally are neither" funds nor securities, placing them outside the rule's scope for non-fund clients. For regulated funds — registered investment companies and business development companies — the same digital commodities qualify as "securities and similar investments" and fall within the rule's reach.
This distinction matters. A wealth adviser holding Bitcoin for a retail client faces a different regulatory burden than a mutual fund allocating to Bitcoin. The proposal treats identical assets differently depending on the vehicle holding them.
The proposal names four routes for holding client crypto assets:
The hierarchy is deliberate. Self-custody is a pathway of last resort, not a preference.
The self-custody pathway carries the heaviest compliance load in the proposal. An adviser may hold client crypto assets only if all of the following conditions are met:
For regulated funds, the requirements are more stringent. Fund boards must review the adviser's unavailability determinations quarterly, assess safeguarding adequacy annually, and designate specific authorized personnel for key access.
Commissioner Hester Peirce, in her final statement before departing the SEC on October 2, flagged a terminology concern. She put "self-custody" in quotation marks and said she would have preferred the term "shelf-custody" to distinguish the concept from an individual holding their own private keys. The distinction is substantive: under the proposal, an adviser self-custodying client assets carries fiduciary duties that a personal key holder does not.
The proposal adds state trust companies as a fourth category of qualified custodian for crypto assets. To qualify, a state trust company must be "supervised and examined by state banking authorities and authorized to exercise fiduciary powers."
Before engaging a state trust company, an adviser or fund must:
Annual recertification is required. Client assets must be segregated from the trust company's proprietary holdings.
One notable omission: the proposal does not include the 2025 staff letter's contractual ban on rehypothecation. This means a state trust company could, in theory, rehypothecate custodied crypto assets unless the adviser contractually prohibits it. The SEC has requested comment on this point.
The SEC explicitly declined to propose rules for several categories of crypto activity:
The absence of DeFi coverage is significant. As of Q3 2026, total value locked in DeFi protocols exceeds $100 billion. Advisory clients participating in staking or lending through their adviser face regulatory ambiguity that this proposal does not resolve.
The proposal landed one month after the Clarity Act, Congress's most ambitious crypto legislation, stalled in the Senate in September 2026. SEC Chairman Atkins framed the rulemaking as filling a gap Congress left open, saying the proposal would replace the "grey of uncertainty" created by rules of a "bygone era."
The Investment Adviser Association, representing more than 17,000 registered advisers, said the SEC was "essential to the safekeeping of clients' crypto assets" by providing custody clarity. The group noted that prior rules left advisers "guessing how to effect lawful custody."
Benjamin Schiffrin, director of securities policy at Better Markets, argued there was "no reason for the SEC to endanger investors" by allowing advisors to hold client crypto assets. Better Markets also objected to the use of state trust companies, arguing they operate under different standards and levels of oversight than traditional custodians.
The political calendar adds urgency. Commissioner Peirce departed the SEC on October 2, reducing the Commission to two sitting members: Chairman Atkins and Commissioner Mark Uyeda. With a two-member Commission, any dissent blocks action. The December 7 comment deadline and subsequent rulemaking timeline will play out under this constrained configuration.
The custody proposal is one piece of a broader SEC crypto rulemaking sprint. On August 18, the Commission proposed Regulation Crypto Assets, creating fundraising exemptions of up to $75 million for covered investment contracts. Atkins has signaled "more regulatory proposals are on the horizon."
The proposal's practical impact depends partly on how much it diversifies the current custody landscape. At present, Coinbase Custody holds Bitcoin for nine of the twelve U.S. spot BTC ETFs. That represents approximately $74 billion in assets through a single counterparty, according to data compiled by CryptoRank as of April 2026. Fidelity's FBTC is the sole major exception, using Fidelity Digital Assets for in-house custody.
If the proposal's state trust company pathway brings new custodians into the market, it could reduce this concentration. Wyoming, South Dakota, and Nevada have all chartered trust companies with crypto custody authority. The question is whether those entities can meet the proposal's audit, segregation, and cybersecurity standards at institutional scale.
The self-custody pathway, by contrast, is unlikely to move significant assets. The $376,000 annual audit cost alone prices out smaller advisers, and the quarterly unavailability certification creates ongoing compliance friction. The pathway appears designed for edge cases — novel tokens that no custodian will support — rather than mainstream crypto assets.
The SEC's economic analysis within the proposing release provides cost estimates:
For regulated funds, Form N-CEN reporting must be expanded to cover crypto custody types, adding to annual filing burdens.
The SEC's crypto custody proposal is an attempt to retrofit fiduciary-era investor protections onto an asset class that operates on fundamentally different infrastructure. The self-custody pathway, with its $376,000 annual audit requirement and quarterly unavailability certifications, is narrowly constructed. The state trust company pathway is broader and could introduce meaningful competition to the current Coinbase-dominated custody landscape — if state-chartered entities can scale to institutional requirements.
The December 7 comment deadline will test whether the proposal's balance between access and protection holds. With a two-member Commission and no relief from Congress, the final rule's shape depends on whether Atkins and Uyeda can agree on where the line sits. The data will be in the comment letters.