[{"data":1,"prerenderedAt":471},["ShallowReactive",2],{"tag-crypto-custody":3},[4],{"_path":5,"_dir":6,"_draft":7,"_partial":7,"_locale":8,"title":9,"description":10,"slug":11,"date":12,"lastUpdated":12,"author":13,"readingTime":14,"category":15,"tags":16,"ogImage":20,"featured":7,"body":21,"_type":465,"_id":466,"_source":467,"_file":468,"_stem":469,"_extension":470},"\u002Farticles\u002F43-sec-proposed-crypto-custody-rules-evidence","articles",false,"","The SEC's crypto custody proposal and its evidence trail","The SEC's October 2026 proposal would create new crypto custody records. Counsel should know what they could prove, and what they could not.","sec-proposed-crypto-custody-rules-evidence","2026-10-12","Nick Kampe",11,"Legal Reference",[17,18,19],"crypto-custody","blockchain-evidence","investment-advisers","\u002Fog\u002Fsec-proposed-crypto-custody-rules-evidence.png",{"type":22,"children":23,"toc":448},"root",[24,32,37,42,49,74,79,84,89,95,109,114,119,124,129,134,139,152,157,163,168,173,178,183,189,194,199,212,225,231,236,241,246,251,256,261,267,272,277,282,288,293,298,333,346,352,357,362,367,373,379,390,396,405,411,420,426,435],{"type":25,"tag":26,"props":27,"children":28},"element","p",{},[29],{"type":30,"value":31},"text","A wallet address can show where crypto assets sat and when they moved. It cannot identify the custody agreement, the people authorized to approve a transfer, the controls they followed, or the client whose assets the address held. Those facts usually live in offchain records.",{"type":25,"tag":26,"props":33,"children":34},{},[35],{"type":30,"value":36},"The Securities and Exchange Commission's October 2026 custody proposal would create a much denser record around certain crypto assets held by registered investment advisers and regulated funds. If adopted, the proposal would require written custody determinations, address-level account information, control reports, approval procedures, board oversight records, and new regulatory disclosures. Those records could become important in a theft, misappropriation, insolvency, or fiduciary dispute.",{"type":25,"tag":26,"props":38,"children":39},{},[40],{"type":30,"value":41},"The proposal is not current law, and its scope is narrower than its name may suggest. Counsel should treat it as a proposed federal framework and a useful evidence map, not as a present duty for every crypto custodian.",{"type":25,"tag":43,"props":44,"children":46},"h3",{"id":45},"what-the-sec-proposed",[47],{"type":30,"value":48},"What the SEC proposed",{"type":25,"tag":26,"props":50,"children":51},{},[52,54,63,65,72],{"type":30,"value":53},"On October 1, 2026, the SEC issued ",{"type":25,"tag":55,"props":56,"children":60},"a",{"href":57,"rel":58},"https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2026\u002F10\u002F06\u002F2026-20466\u002Fadviser-and-regulated-fund-custody-rules-crypto-custody-rules",[59],"nofollow",[61],{"type":30,"value":62},"proposed adviser and regulated fund custody rules",{"type":30,"value":64},". The proposal was published in the Federal Register on October 6. Comments are due December 7, 2026. The SEC's ",{"type":25,"tag":55,"props":66,"children":69},{"href":67,"rel":68},"https:\u002F\u002Fwww.sec.gov\u002Frules-regulations\u002F2026\u002F10\u002Fs7-2026-35",[59],[70],{"type":30,"value":71},"rulemaking page",{"type":30,"value":73}," identifies File No. S7-2026-35 and labels the release as proposed.",{"type":25,"tag":26,"props":75,"children":76},{},[77],{"type":30,"value":78},"The proposal would permit two custody paths subject to conditions. An adviser could self-custody certain client crypto assets when a permitted custodian is unavailable. An adviser or regulated fund could also use a state trust company that satisfies the proposed inquiry, review, control, and segregation conditions. Regulated funds could self-custody through their advisers with added board oversight.",{"type":25,"tag":26,"props":80,"children":81},{},[82],{"type":30,"value":83},"The scope matters. The proposed Advisers Act amendments concern client crypto assets that are funds or securities. The proposed Investment Company Act rules concern crypto assets that are securities or similar investments. The release does not create a general custody code for every token, wallet, exchange, or service provider.",{"type":25,"tag":26,"props":85,"children":86},{},[87],{"type":30,"value":88},"Nothing in the proposal is binding merely because it was published. The Commission may change it, adopt part of it, or decline to adopt it. Existing law and custody rules remain the starting point until any final rule becomes effective.",{"type":25,"tag":43,"props":90,"children":92},{"id":91},"self-custody-would-produce-an-evidence-trail",[93],{"type":30,"value":94},"Self-custody would produce an evidence trail",{"type":25,"tag":26,"props":96,"children":97},{},[98,100,107],{"type":30,"value":99},"The proposed self-custody route would turn several operational decisions into required records. The SEC's ",{"type":25,"tag":55,"props":101,"children":104},{"href":102,"rel":103},"https:\u002F\u002Fwww.sec.gov\u002Ffiles\u002Fia-7023-fact-sheet.pdf",[59],[105],{"type":30,"value":106},"fact sheet",{"type":30,"value":108}," provides a shorter summary, while the proposing release supplies the conditions and requested comments.",{"type":25,"tag":26,"props":110,"children":111},{},[112],{"type":30,"value":113},"An adviser would first have to determine in writing that a permitted custodian is unavailable for the crypto asset. It would make that determination before taking self-custody and repeat it quarterly. In a later dispute, those dated determinations could show what alternatives the adviser considered, when it considered them, and whether the stated reason matched the market at the time. They would not prove that the conclusion was reasonable without the underlying inquiry and supporting material.",{"type":25,"tag":26,"props":115,"children":116},{},[117],{"type":30,"value":118},"The adviser would also document its safeguarding expertise and maintain systems intended to protect each asset against loss, theft, misuse, and misappropriation. The proposed systems would address private key management and require at least two people to authorize a crypto asset transaction jointly. The adviser would review the safeguarding systems and cybersecurity controls at least annually and document that review in writing.",{"type":25,"tag":26,"props":120,"children":121},{},[122],{"type":30,"value":123},"That difference between policy and execution matters. A written two-person approval rule shows what should have happened. Access logs, signing-device records, wallet configuration, approval messages, and the transaction itself show what happened. Counsel should preserve both.",{"type":25,"tag":26,"props":125,"children":126},{},[127],{"type":30,"value":128},"The proposal would require each client's self-custodied assets to be maintained in one or more addresses corresponding only to that client. It would also require quarterly account information identifying the address and network, the period-end amounts, and all transactions from the address during the period. The client would be urged to compare the statement with the balances and transactions recorded at the address.",{"type":25,"tag":26,"props":130,"children":131},{},[132],{"type":30,"value":133},"This creates a direct reconciliation point. An address can be compared with the adviser statement, client ledger, and transaction history for the same period. A mismatch would not explain itself, but it would identify the period and record set that need investigation.",{"type":25,"tag":26,"props":135,"children":136},{},[137],{"type":30,"value":138},"An adviser would obtain an internal control report from an independent public accountant within six months after taking self-custody and annually afterward. The proposal describes an opinion on whether custody controls were suitably designed, implemented, and operating effectively during the covered period. A control report is evidence about the reviewed controls. It is not proof that every transfer was authorized or that no compromise occurred outside the test period or scope.",{"type":25,"tag":26,"props":140,"children":141},{},[142,144,150],{"type":30,"value":143},"The adviser and client would also agree in writing to treat each self-custodied crypto asset as a \"financial asset\" and the adviser as a securities intermediary under the applicable state's enacted version of UCC Article 8. That election may affect the legal structure of the holding relationship. It does not make a wallet balance conclusive proof of title. The governing agreement and state law still matter, as discussed in ",{"type":25,"tag":55,"props":145,"children":147},{"href":146},"\u002Fresources\u002Fucc-article-12-digital-asset-control",[148],{"type":30,"value":149},"Control is not ownership: UCC Article 12 and digital assets",{"type":30,"value":151},".",{"type":25,"tag":26,"props":153,"children":154},{},[155],{"type":30,"value":156},"For regulated fund assets, the fund board would review the adviser's custodian-unavailability determination initially and quarterly. The board would also determine before self-custody, and annually afterward, that the fund asset would receive reasonable care. Minutes, board materials, written determinations, and the information presented to directors could become central evidence if the custody decision is later challenged.",{"type":25,"tag":43,"props":158,"children":160},{"id":159},"state-trust-company-custody-would-create-a-different-record-set",[161],{"type":30,"value":162},"State trust company custody would create a different record set",{"type":25,"tag":26,"props":164,"children":165},{},[166],{"type":30,"value":167},"A state trust company label would not be enough. Before engagement and annually afterward, the adviser or regulated fund would need a reasonable basis, after due inquiry, to believe that the company was authorized by its state banking authority to provide crypto custody. It would also need a reasonable basis to believe that the company maintained and implemented written policies designed to protect crypto assets and related cash from theft, loss, misuse, and misappropriation.",{"type":25,"tag":26,"props":169,"children":170},{},[171],{"type":30,"value":172},"The adviser or fund would receive and review the trust company's most recent audited annual financial statements and internal control report. Client crypto assets would be segregated from the trust company's proprietary assets. A regulated fund would put that segregation term in its custody agreement.",{"type":25,"tag":26,"props":174,"children":175},{},[176],{"type":30,"value":177},"Those records answer different questions. The authorization inquiry concerns the custodian's legal authority. Policies and control reports concern process. Financial statements concern the company and covered period. The custody agreement states the promised allocation of rights and duties. Wallet records and internal ledgers show asset movement and account treatment. None should be used as a substitute for the others.",{"type":25,"tag":26,"props":179,"children":180},{},[181],{"type":30,"value":182},"Segregation also needs operational proof. Contract language may require separate treatment while wallet architecture, omnibus accounts, subledgers, or reconciliation records show how the custodian implemented it. In an insolvency or shortfall dispute, counsel may need the agreement, address inventory, client ledger, general ledger, reconciliation history, and records of transfers between client and proprietary accounts.",{"type":25,"tag":43,"props":184,"children":186},{"id":185},"the-proposal-rejects-the-explorer-only-theory",[187],{"type":30,"value":188},"The proposal rejects the explorer-only theory",{"type":25,"tag":26,"props":190,"children":191},{},[192],{"type":30,"value":193},"The SEC would allow an adviser or regulated fund to satisfy some ledger recordkeeping duties with onchain records if the network held a true, accurate, and current record of the required information. The same section says the firm would have to supplement the chain with offchain records when required information was not available onchain.",{"type":25,"tag":26,"props":195,"children":196},{},[197],{"type":30,"value":198},"The release gives a direct example. Public transaction information may need an offchain record to connect an address with a client or regulated fund and identify beneficial ownership. Names, investor identifiers, contact information, and other nonpublic data may also remain offchain. The firm would have to produce onchain records to the SEC in a human-readable, reasonably usable electronic format and maintain access during the applicable retention period.",{"type":25,"tag":26,"props":200,"children":201},{},[202,204,210],{"type":30,"value":203},"That is the evidentiary problem in plain terms. A public chain may preserve the transfer, but it does not preserve the complete business record. ",{"type":25,"tag":55,"props":205,"children":207},{"href":206},"\u002Fresources\u002Fcftc-blockchain-regulatory-records",[208],{"type":30,"value":209},"A public blockchain is not a records archive",{"type":30,"value":211}," explains the same distinction in the CFTC recordkeeping context. The proposed SEC rules apply it to adviser and regulated fund custody.",{"type":25,"tag":26,"props":213,"children":214},{},[215,217,223],{"type":30,"value":216},"For litigation, the useful unit is the reconciled record set: chain data, address-to-client mapping, custody ledger, account statement, approval record, control evidence, and agreement. ConsensusIntel's ",{"type":25,"tag":55,"props":218,"children":220},{"href":219},"\u002Fmethodology",[221],{"type":30,"value":222},"methodology",{"type":30,"value":224}," separates source data from inference so a later reader can test each link.",{"type":25,"tag":43,"props":226,"children":228},{"id":227},"how-these-records-could-matter-in-a-dispute",[229],{"type":30,"value":230},"How these records could matter in a dispute",{"type":25,"tag":26,"props":232,"children":233},{},[234],{"type":30,"value":235},"A custody case often starts with an outcome, such as missing assets, an unauthorized transfer, a frozen account, or a claimed shortfall. The proposed records would let counsel test distinct parts of that account instead of asking the blockchain to answer all of them.",{"type":25,"tag":26,"props":237,"children":238},{},[239],{"type":30,"value":240},"Address assignments and account statements could connect a client account to a specific chain, contract, and address during a defined period. That is stronger than relying on a ticker symbol or screenshot, but the mapping still needs authentication.",{"type":25,"tag":26,"props":242,"children":243},{},[244],{"type":30,"value":245},"Approval logs and key-management records could show which credentials and people participated in a transfer. They may support an inference about process compliance. They do not identify a natural person from blockchain data alone.",{"type":25,"tag":26,"props":247,"children":248},{},[249],{"type":30,"value":250},"Quarterly custodian determinations and board materials could show who made the custody decision and what information was available. Whether that decision met a legal standard is a question for counsel and the court, not a conclusion supplied by the transaction graph.",{"type":25,"tag":26,"props":252,"children":253},{},[254],{"type":30,"value":255},"Segregation and reconciliation records could test whether assets attributed to clients were kept apart from proprietary assets in the books and wallet system. A shared address does not necessarily prove commingling of legal interests, and separate addresses do not prove that the custodian honored every contractual restriction.",{"type":25,"tag":26,"props":257,"children":258},{},[259],{"type":30,"value":260},"Annual reviews and control reports could identify known weaknesses, remediation work, test scope, and periods not examined. A report with a clean opinion is not a guarantee against loss. Its terms, exceptions, testing period, and reliance limits need to be read.",{"type":25,"tag":43,"props":262,"children":264},{"id":263},"hypothetical-an-adviser-reports-a-wallet-compromise",[265],{"type":30,"value":266},"Hypothetical: an adviser reports a wallet compromise",{"type":25,"tag":26,"props":268,"children":269},{},[270],{"type":30,"value":271},"Hypothetical example: an adviser self-custodies a client's crypto asset and later reports that an attacker transferred the balance to an unknown address. The blockchain proves that a transaction was included and shows the source, destination, time, amount, and contract effects. It does not prove how the attacker obtained authority or whether the adviser's controls were followed.",{"type":25,"tag":26,"props":273,"children":274},{},[275],{"type":30,"value":276},"Under the proposed framework, counsel could compare the transaction with the client's address assignment, quarterly statement, two-person approval records, key-management design, cybersecurity review, incident response records, and accountant's control report. If the fund owned the asset, board materials could show the basis for accepting self-custody and the information reviewed before the loss.",{"type":25,"tag":26,"props":278,"children":279},{},[280],{"type":30,"value":281},"A gap may matter as much as a match. If the policy required two approvals but the system accepted one credential, the policy and transaction evidence point to a control failure. If two approvals appear, counsel still needs to determine whether the records are authentic, whether credentials were compromised, and whether either approver acted with authority. The evidence narrows the question. It does not decide intent or liability.",{"type":25,"tag":43,"props":283,"children":285},{"id":284},"what-counsel-can-request-now",[286],{"type":30,"value":287},"What counsel can request now",{"type":25,"tag":26,"props":289,"children":290},{},[291],{"type":30,"value":292},"The proposal does not entitle a litigant to records or make its proposed categories mandatory today. Discovery depends on the forum, claims, defenses, possession, custody, control, proportionality, and applicable orders. Still, the release identifies records that many current custody programs may already create.",{"type":25,"tag":26,"props":294,"children":295},{},[296],{"type":30,"value":297},"A targeted request can seek:",{"type":25,"tag":299,"props":300,"children":301},"ol",{},[302,308,313,318,323,328],{"type":25,"tag":303,"props":304,"children":305},"li",{},[306],{"type":30,"value":307},"The custody agreement, account-opening documents, financial-asset election, and amendments in effect during the disputed period.",{"type":25,"tag":303,"props":309,"children":310},{},[311],{"type":30,"value":312},"The complete address inventory by chain and asset, with creation dates, client mappings, wallet type, signing threshold, and change history.",{"type":25,"tag":303,"props":314,"children":315},{},[316],{"type":30,"value":317},"Native approval, access, device, and key-management logs for the disputed transactions, including timestamps and user or system identifiers.",{"type":25,"tag":303,"props":319,"children":320},{},[321],{"type":30,"value":322},"Client statements, subledgers, general-ledger entries, and reconciliations tied to the same addresses and dates.",{"type":25,"tag":303,"props":324,"children":325},{},[326],{"type":30,"value":327},"Custodian due-diligence files, audited financial statements, internal control reports, annual custody reviews, incident records, and remediation evidence.",{"type":25,"tag":303,"props":329,"children":330},{},[331],{"type":30,"value":332},"Filed Form ADV or Form N-CEN records relevant to the custody arrangement, together with the working papers used to prepare them.",{"type":25,"tag":26,"props":334,"children":335},{},[336,338,344],{"type":30,"value":337},"Request native fields and identifier mappings, not screenshots alone. A production should preserve timezone, source system, record version, export method, and any correction history. If the matter involves an exchange, adviser, or trust company, ",{"type":25,"tag":55,"props":339,"children":341},{"href":340},"\u002Fservices#exchange-custody",[342],{"type":30,"value":343},"exchange and custody analysis",{"type":30,"value":345}," can reconcile the produced records with the chain.",{"type":25,"tag":43,"props":347,"children":349},{"id":348},"what-the-proposal-would-not-prove",[350],{"type":30,"value":351},"What the proposal would not prove",{"type":25,"tag":26,"props":353,"children":354},{},[355],{"type":30,"value":356},"The proposed records would improve the available evidence without eliminating its limits. A chain record does not establish beneficial ownership by itself. A written policy does not prove compliance. A control report does not cover events or systems outside its scope. A state authorization does not establish that every asset was handled correctly. A regulatory filing may report aggregate information without resolving a client's individual position.",{"type":25,"tag":26,"props":358,"children":359},{},[360],{"type":30,"value":361},"Federal custody rules also do not decide every property, contract, agency, fiduciary, or insolvency question. Applicable state law and the parties' agreements may determine rights that the blockchain cannot. Technical analysis should state what each record shows and leave the legal conclusion to counsel and the court.",{"type":25,"tag":26,"props":363,"children":364},{},[365],{"type":30,"value":366},"This article describes an SEC proposal published on October 6, 2026. It is for informational purposes and is not legal advice. Check the final rulemaking record and applicable law before relying on any proposed requirement.",{"type":25,"tag":43,"props":368,"children":370},{"id":369},"frequently-asked-questions",[371],{"type":30,"value":372},"Frequently Asked Questions",{"type":25,"tag":43,"props":374,"children":376},{"id":375},"q-are-the-secs-october-2026-crypto-custody-rules-already-in-effect",[377],{"type":30,"value":378},"Q: Are the SEC's October 2026 crypto custody rules already in effect?",{"type":25,"tag":26,"props":380,"children":381},{},[382,388],{"type":25,"tag":383,"props":384,"children":385},"strong",{},[386],{"type":30,"value":387},"A:",{"type":30,"value":389}," No. The SEC issued a proposed rule. It was published in the Federal Register on October 6, 2026, and comments are due December 7, 2026. The Commission must complete any later adoption process before new requirements become effective.",{"type":25,"tag":43,"props":391,"children":393},{"id":392},"q-would-the-proposal-apply-to-every-crypto-asset-held-by-an-adviser",[394],{"type":30,"value":395},"Q: Would the proposal apply to every crypto asset held by an adviser?",{"type":25,"tag":26,"props":397,"children":398},{},[399,403],{"type":25,"tag":383,"props":400,"children":401},{},[402],{"type":30,"value":387},{"type":30,"value":404}," No. The proposed Advisers Act amendments concern client crypto assets that are funds or securities. The proposed Investment Company Act rules concern crypto assets that are securities or similar investments. Classification and account type affect the scope.",{"type":25,"tag":43,"props":406,"children":408},{"id":407},"q-would-an-onchain-transfer-prove-which-client-owned-the-asset",[409],{"type":30,"value":410},"Q: Would an onchain transfer prove which client owned the asset?",{"type":25,"tag":26,"props":412,"children":413},{},[414,418],{"type":25,"tag":383,"props":415,"children":416},{},[417],{"type":30,"value":387},{"type":30,"value":419}," No. The transfer can establish activity at an address. Client identity and beneficial ownership may require the adviser's address mapping, account records, agreement, and other offchain evidence.",{"type":25,"tag":43,"props":421,"children":423},{"id":422},"q-would-an-internal-control-report-prove-that-a-disputed-transfer-was-authorized",[424],{"type":30,"value":425},"Q: Would an internal control report prove that a disputed transfer was authorized?",{"type":25,"tag":26,"props":427,"children":428},{},[429,433],{"type":25,"tag":383,"props":430,"children":431},{},[432],{"type":30,"value":387},{"type":30,"value":434}," No. It may show whether specified custody controls were designed, implemented, and operating effectively during the reviewed period. Authorization of a particular transfer requires transaction-specific approval, access, and identity evidence.",{"type":25,"tag":26,"props":436,"children":437},{},[438,440,446],{"type":30,"value":439},"If a custody dispute turns on the gap between the wallet record and the firm's books, ",{"type":25,"tag":55,"props":441,"children":443},{"href":442},"\u002Fcontact",[444],{"type":30,"value":445},"contact ConsensusIntel",{"type":30,"value":447}," to scope the technical record set before discovery closes.",{"title":8,"searchDepth":449,"depth":449,"links":450},2,[451,453,454,455,456,457,458,459,460,461,462,463,464],{"id":45,"depth":452,"text":48},3,{"id":91,"depth":452,"text":94},{"id":159,"depth":452,"text":162},{"id":185,"depth":452,"text":188},{"id":227,"depth":452,"text":230},{"id":263,"depth":452,"text":266},{"id":284,"depth":452,"text":287},{"id":348,"depth":452,"text":351},{"id":369,"depth":452,"text":372},{"id":375,"depth":452,"text":378},{"id":392,"depth":452,"text":395},{"id":407,"depth":452,"text":410},{"id":422,"depth":452,"text":425},"markdown","content:articles:43-sec-proposed-crypto-custody-rules-evidence.md","content","articles\u002F43-sec-proposed-crypto-custody-rules-evidence.md","articles\u002F43-sec-proposed-crypto-custody-rules-evidence","md",1793226883012]