1. Current Custody Obligations and the Proposed Crypto Alternatives
The SEC proposed its framework on October 1, 2026. As of October 8, 2026, it remains a proposal. Firms can evaluate the proposed alternatives, but the release itself does not authorize a change to an otherwise noncompliant custody arrangement.
Current Duties Depend on Assets and Authority
Rule 206(4)-2 governs custody of client funds and securities by SEC-registered investment advisers and advisers required to register. Subject to applicable exceptions, an adviser with custody must maintain covered assets with a qualified custodian.
Custody can arise through withdrawal authority or a position giving the adviser access to client assets. Physical possession is only one way to trigger the rule. For a wallet arrangement, the review should identify who can sign transactions, direct transfers, or obtain access through a related entity.
Asset classification also matters. The current adviser rule covers funds and securities, while the Investment Company Act custody framework addresses securities and similar investments. The broader cryptocurrency regulation analysis should inform this assessment without replacing it.
The 2023 Proposal Is a Separate Regulatory Action
The SEC withdrew its 2023 safeguarding proposal in June 2025. Firms should distinguish that earlier proposal from the 2026 release rather than carry its proposed requirements into a current compliance checklist.
A useful assessment separates three categories: obligations that apply today, alternatives proposed in 2026, and implementation questions that depend on a final rule.
2. Which Framework Applies to the Adviser or Fund?
An entity’s registration status and legal structure determine the starting point. “Digital asset manager” does not establish whether the adviser custody rule, fund custody rules, or a different regulatory framework applies.
| Entity or arrangement | Starting framework | Main custody question |
|---|---|---|
| SEC-registered adviser | Investment Advisers Act | Does the adviser have custody of covered client assets? |
| Registered management investment company | Investment Company Act | Which permitted arrangement can hold the fund’s assets? |
| BDC | Applicable Investment Company Act provisions | What requirements apply to the BDC’s custody structure? |
| Private fund advised by an RIA | Adviser custody rule and relevant exceptions | What obligations arise through the adviser’s authority over fund assets? |
SEC-registered adviser
- Starting frameworkInvestment Advisers Act
- Main custody questionDoes the adviser have custody of covered client assets?
Registered management investment company
- Starting frameworkInvestment Company Act
- Main custody questionWhich permitted arrangement can hold the fund’s assets?
BDC
- Starting frameworkApplicable Investment Company Act provisions
- Main custody questionWhat requirements apply to the BDC’s custody structure?
Private fund advised by an RIA
- Starting frameworkAdviser custody rule and relevant exceptions
- Main custody questionWhat obligations arise through the adviser’s authority over fund assets?
Private Funds and Registered Funds Require Separate Analysis
A private fund does not become a registered investment company because its adviser registers with the SEC. Its adviser must assess custody obligations and any available exceptions under the adviser framework.
Registered funds and BDCs require a separate fund-level analysis. The proposed crypto self-custody and state trust company routes also contain eligibility limits. Firms should not assume those routes extend to every type of registered investment company.
The practical starting point is an entity-and-asset map: identify the owner, adviser, fund structure, asset classification, and person with transfer authority.
3. Evaluating Qualified Custodians and State Trust Companies
Legal eligibility and operational capability are different questions. A provider may offer institutional wallet services without qualifying under the applicable custody framework. An eligible institution may also lack support for a particular token.
Verify the Contracting Entity and Supported Assets
The search for a qualified custodian for crypto assets should identify the actual contracting entity and its regulatory status. A brand’s reputation does not establish the eligibility of each affiliate.
Review the agreement alongside the operational permissions. Who authorizes transfers? How do records identify ownership? Can a subcustodian access the assets? What happens if the provider stops supporting the token?
These questions help identify gaps between a service description and the arrangement the client would receive.
State Trust Company Custody Would Carry Conditions
The proposal would create a conditional route for state trust company custody. It calls for written initial and annual assessments of authorization and safeguarding policies, together with review of audited financial statements and internal control reports.
That review should distinguish financial statement audits from reports addressing custodial controls. Each serves a different purpose within accounting oversight.
A report may cover only specified systems or a limited period. The reviewer should check whether its scope includes the custody service, identify exceptions, and examine how the provider addressed them.
4. Self-Custody Would Require an Asset-Specific Decision

The proposed self-custody route would require a written, asset-specific determination, after due inquiry, that no qualified custodian will maintain the crypto asset. Lower fees alone would not support that determination.
Reassessment and Transfer Would Continue after Approval
The adviser would need to revisit qualified custodian availability at least quarterly. If a qualified custodian becomes available, the proposal would require placement of the asset with that custodian as soon as reasonably practicable.
The supporting record should identify the asset, providers considered, information reviewed, and reasons for the conclusion. A blanket statement that “crypto custodians are unavailable” would miss the asset-specific inquiry.
Self-custody would also involve safeguarding expertise, systems, cybersecurity controls, independent internal control reporting, and other conditions. Technical capability alone would not establish eligibility.
Contracts and Fund Board Oversight Also Matter
The proposed framework includes a contractual financial asset election under the applicable state enactment of UCC Article 8. This is a state commercial-law component of a federal regulatory proposal. It should not be confused with a determination that the token is a security under federal securities law.
For eligible regulated funds, the proposed route would combine adviser safeguards with fund board oversight. Relevant corporate governance records should explain the custody decision, material control limitations, and the information directors reviewed.
5. Preparing for a Custody Decision before Moving Assets
Firms can assess their current arrangements while tracking the rulemaking. The assessment should distinguish existing compliance gaps from work that would become necessary only if the SEC adopts the proposed alternatives.
Collect:
- An asset inventory showing ownership, wallets, and custodial accounts.
- Custody agreements and records of signing or withdrawal authority.
- Provider authorization documents and available audit or control reports.
- Key management, incident response, and recovery procedures.
- Relevant adviser disclosures and fund board materials.
Before changing custody providers or moving assets into an adviser-controlled wallet, an attorney can review the applicable framework and contractual terms. The analysis should identify the legal basis for the arrangement, unresolved conditions, and steps that depend on final adoption.
6. FAQ about Adviser and Fund Crypto Custody
Operational safeguards and regulatory status answer different questions. These distinctions can affect how a firm evaluates the proposed routes.
No. Cold storage describes how key material is held. Compliance also depends on custody authority, the custodian’s legal status, and the applicable requirements or exceptions.
Yes. Although exempt reporting advisers are not subject to the adviser custody rule in the same way as registered advisers, some proposed Form ADV amendments could affect them. Reporting obligations require a separate review.
Tokenization alone does not determine registration status. The fund’s structure, offering, and applicable statutory requirements or exclusions remain part of the analysis.
08 Oct, 2026

