The headline reads like a win for anyone who has ever argued that keys belong in the hands of their owner. Read the actual rule text, and the hand holding the key is wearing a suit.
What Changed: The SEC's New Custody Pathway, In Plain Terms
On October 1, 2026, the SEC proposed a crypto custody framework that, for the first time, would let a registered investment adviser hold client crypto assets itself instead of parking them with a qualified custodian . The mechanism is proposed Advisers Act rule 223-1(b)(7), paired with Investment Company Act rule 17f-9 for registered funds . The adviser holds the keys. The client does not.
Quick Answer: The SEC's October 1, 2026 proposal lets registered advisers hold crypto keys directly under new rule 223-1(b)(7) — but "self-custody" here means the adviser custodies, not the investor. Sharing key material with the client would violate the rule. Comments are due 60 days after Federal Register publication, file no. S7-2026-35.
The scale of the document matters as much as its content. Press reports put the proposing release at roughly 760 pages with more than 330 questions posed for comment — a signal that the Commission considers the design unsettled, not finished .
Four things changed on paper:
- A conditional self-custody route. Rule 223-1(b)(7) and 17f-9 permit adviser-held keys where no permitted custodian will maintain the specific asset .
- State trust companies codified. Proposed rules 223-1(d)(13)(v) and 17f-8 recognize state trust companies as permitted custodians, replacing the narrower September 30, 2025 Division of Investment Management no-action letter with actual rule text .
- A fixed comment clock. 60 days from Federal Register publication, under file number S7-2026-35 .
- Trading platforms stay out. Crypto exchanges remain outside the permitted-custodian perimeter .
Commissioner Hester Peirce, in what became her final major action as Crypto Task Force chief, pushed back on the vocabulary itself.
The proposal "refers to advisers acting as custodians, not true investor self-custody," Peirce wrote, saying she prefers the term "shelf-custody." — Hester M. Peirce, Commissioner, U.S. Securities and Exchange Commission (source: SEC, 2026-10)
That distinction is the whole story. Retail traders reading "SEC allows self-custody" should read it as "SEC allows your fund manager to keep your keys" — a professional-market plumbing change, not a change to what you can do with your own wallet.
The Fine Print: How Narrow Is the Adviser Self-Custody Pathway?
The self-custody pathway in proposed Advisers Act rule 223-1(b)(7) is a last-resort exception, not a default option. An adviser must first make a written determination that no permitted custodian will maintain that specific crypto asset, re-confirm it quarterly, and move the asset to a qualified custodian as soon as reasonably practicable once one is available . Cost is expressly not a permissible basis for that determination .
The operational conditions stacked on top are where the pathway gets genuinely narrow:
- Exclusive key possession. Only the adviser may hold key materials. Sharing them with anyone outside the firm — including the client whose assets they are — would violate the rule .
- Two-person authorization. Certain custody actions require joint sign-off by two designated persons, one drawn from management.
- Per-client wallet addresses. Omnibus addresses are out; each client gets separate addresses, with quarterly statements showing address, network, balances and transactions.
- Annual accountant's report. A SOC 1 Type 2-style internal-control report covering on-chain reconciliation, plus written private-key-management and cybersecurity policies with annual risk assessments.
- UCC Article 8 overlay. Adviser and client must agree in writing to treat each self-custodied asset as a "financial asset," with the adviser as "securities intermediary" .
Vendors are permitted, but only if they cannot access keys or move assets unilaterally . Scope narrows the universe further: the custody rules reach only crypto assets that are "funds" or "securities" under federal law.
| Asset category | Status for non-fund advisory clients | Covered by custody rules? |
|---|---|---|
| GENIUS Act payment stablecoins | "Funds" | Yes |
| Tokenized bank deposits | "Funds" | Yes |
| Tokenized / digital securities | "Securities" | Yes |
| Bitcoin, ether, solana | Neither | No (but become "securities and similar investments" for regulated funds when self-custodied) |
So for a retail trader watching BTC or SOL, the practical read is narrow: these rules mostly bite on stablecoins and tokenized securities inside advisory accounts, and on digital commodities only once a regulated fund holds the keys itself .
Why It Matters: Costs, Risks, and the Industry Split
The economics explain why this pathway will stay rare. The SEC's own release estimates roughly $376,000 per adviser annually just for the required internal-control report, on top of about $173,000 in one-time and $58,000 in recurring compliance costs . There is no phase-in: the proposal would take effect on adoption, with no transition period .
That price tag lands on a conditional permission most advisers cannot use anyway, which is why reaction split along predictable lines rather than converging.
- Supportive: the Investment Adviser Association praised the effort to make custody rules "more workable and effective," and Josh Burton of Silver Regulatory Associates called the proposal the "culmination of years of work" .
- Opposed: Better Markets argues the framework trades investor protection for industry accommodation, singling out state trust companies as "subject to an inconsistent hodgepodge of less rigorous rules and less oversight" .
- Unresolved: Bitwise General Counsel Johanna Collins-Wood said the proposal answers long-standing asset-manager problems but leaves "important questions about DeFi" open — staking, vault deposits and omnibus addresses among them .
"[The proposal] subjects investors to the very high risk of loss the SEC exists to prevent," — Benjamin Schiffrin, Director of Securities Policy at Better Markets (source: Better Markets, 2026-10)
One technical change deserves more attention than it is getting. The codified state-trust-company pathway drops the contractual rehypothecation ban that the September 30, 2025 no-action letter imposed, and the Commission instead asks whether rehypothecation should be allowed with client consent . For traders, rehypothecation — a custodian re-pledging assets it holds for you — is the mechanism behind several 2022-era lending failures. Whether that question gets answered restrictively or permissively is the single highest-stakes item in the comment file .
What to Watch Next: Comment Period, Timeline, and Trading Signals
The next decision point is the comment file. The proposal — Press Release 2026-100, file number S7-2026-35 — opens a 60-day public comment window that starts when the release is published in the Federal Register, not when it was announced on October 1, 2026 . With more than 330 questions posed across roughly 760 pages, the final rule text could tighten or loosen materially from what was proposed .
Four markers are worth tracking:
- The Federal Register publication date. That stamp sets the comment deadline. Until it appears, the clock has not started .
- The rest of the architecture. Chairman Paul Atkins placed this alongside Regulation Crypto Assets, proposed in August 2026, and transfer-agent modernization as one framework, and said "more regulatory proposals are on the horizon" .
- Who replaces Hester Peirce. She left the Crypto Task Force the same week the proposal landed, removing its chief internal champion during the exact period comments get weighed .
- Whether a transition period gets added. As proposed, every provision takes effect on adoption with no grandfathering .
That last point is the practical one. An adviser building key-management infrastructure now carries the roughly $173,000 one-time and $58,000 recurring compliance cost before any effective date exists . Expect comment letters to push hard for a phase-in.
The concrete takeaway: nothing in this proposal changes how you hold your own coins today, and nothing becomes binding until a final rule is adopted. What it does signal is that regulated capital's custody options are widening on a defined schedule — so read the Federal Register date as the real start line, and watch the rehypothecation answer as the item most likely to touch market structure.
Frequently asked questions
Does the SEC's new rule let retail crypto investors self-custody their own assets?
No. The proposal's "self-custody" pathway applies to registered investment advisers holding client crypto assets directly, not to end investors holding their own wallets. Proposed Advisers Act rule 223-1(b)(7) requires the adviser to keep exclusive possession of all key materials — sharing keys with anyone outside the adviser, including the client, would violate the rule . Commissioner Hester Peirce said she prefers the term "shelf-custody," noting the proposal "refers to advisers acting as custodians, not true investor self-custody" . Retail wallet practices are untouched.
Which crypto assets are covered by the SEC's custody proposal?
Only crypto assets that qualify as "funds" or "securities" under the federal securities laws fall inside the custody rules . Law-firm analysis of the release breaks that down as follows :
- Funds: payment stablecoins issued by GENIUS Act issuers, plus tokenized deposits.
- Securities: tokenized or digital securities.
- Neither (for non-fund advisory clients): bitcoin, ether and solana.
- Exception: for regulated funds, digital commodities become "securities and similar investments" once an adviser self-custodies them.
So the same token can sit inside or outside the rules depending on who holds it and how.
When does the SEC crypto custody rule take effect?
It does not take effect yet — this is a proposal, not a final rule. The Commission issued it on October 1, 2026 as Press Release 2026-100 under file number S7-2026-35, and the public comment period runs 60 days after publication in the Federal Register . No adoption date has been set. One detail advisers are flagging: the release proposes no transition period, so all provisions would become effective on adoption . The proposing release runs roughly 760 pages and poses more than 330 questions for comment .
What are state trust companies' role in the new framework?
State trust companies would be formally recognized as permitted custodians under proposed Advisers Act rule 223-1(d)(13)(v) and Investment Company Act rule 17f-8, replacing the narrower September 30, 2025 Division of Investment Management no-action letter with codified rule text . Before engaging one and annually thereafter, an adviser or fund needs a reasonable basis, after due inquiry, to believe the entity is authorized by its state banking authority for crypto custody and maintains written safeguarding policies . Diligence also covers U.S. GAAP audited financials, an internal control report and asset segregation. Better Markets' Benjamin Schiffrin, Director of Securities Policy, objects that state trust companies are "subject to an inconsistent hodgepodge of less rigorous rules and less oversight" . Crypto trading platforms remain excluded from the permitted-custodian framework.
Enjoyed this article? Subscribe to get new stories by email whenever they're published.
