Confirmed evidence

On October 1, the U.S. Securities and Exchange Commission proposed new rules and amendments addressing how registered investment advisers and regulated funds may custody crypto assets under the federal securities laws. The proposal is identified as File No. S7-2026-35 and remains open for public comment through December 7, 2026.

The SEC says the framework would permit crypto assets to be held in self-custody under specified circumstances and would allow state-chartered trust companies to serve as custodians subject to conditions. It also proposes broader custody-rule modernization, including changes involving financial-statement audits, broker-dealer custodial services, reporting and recordkeeping.

Commissioner Mark Uyeda described the proposed self-custody path as conditional rather than unrestricted. His statement identifies safeguarding expertise, cybersecurity protections, annual reviews, internal reporting, account statements and client disclosures among the contemplated controls. He also emphasized the conflict created when an adviser safeguards assets it is responsible for overseeing.

Commissioner Hester Peirce separately noted that the proposal does not make every crypto asset subject to the custody rules. The legal scope depends on whether the asset is a fund or security for an advisory account, or a security or similar investment for a regulated fund.

ATLAS4 interpretation

Custody is becoming a control surface rather than a label. Calling an entity a custodian does not establish that keys are segregated, authority is constrained, records reconcile, incidents are recoverable or client assets remain identifiable through insolvency. Those are separate claims requiring separate evidence.

The proposal matters because it acknowledges operational reality without treating operational flexibility as risk removal. Self-custody can solve an availability problem when no qualified custodian will support an asset, while simultaneously concentrating technical authority and fiduciary conflict inside the adviser. The control burden rises precisely where the intermediary count falls.

State trust companies may broaden the provider set, but charter status is not a substitute for asset-level diligence. Network support, signing architecture, key-generation practices, recovery procedures, insurance terms, subcustodian dependencies and legal treatment can vary materially across assets and providers.

What the headline does not prove

• The proposal does not mean the rules are final or that implementation details cannot change after comments.
• It does not establish that every token qualifies for the proposed framework.
• It does not demonstrate executable liquidity, reliable pricing or suitability for a client mandate.
• It does not eliminate smart-contract, network, bridge, operational or insolvency risk.

Evidence ATLAS4 would require

A credible custody assessment should preserve source lineage from the legal text to the service contract and finally to observed controls. ATLAS4 would look for independent evidence of asset segregation, signing-policy enforcement, access logging, reconciliations, incident response, recovery testing, third-party dependencies and the legal path for returning assets to clients.

Timing integrity matters. A policy announcement, Federal Register publication, comment deadline, final rule, compliance date and custodian product launch are different events. None should be collapsed into a single “regulatory clarity” timestamp.

Reassessment triggers

This analysis should be revisited when the SEC publishes a final rule, materially changes the scope or self-custody conditions, extends the comment period, or produces implementation guidance. Provider-specific conclusions require direct evidence from each custodian and cannot be inherited from the rulemaking headline.

Independent policy and market-structure research. For informational purposes only. Not investment advice or a recommendation to buy, sell or hold any security, commodity, token or digital asset.