SEC's Deregulatory Custody Shift: A Technical Post-Mortem of the 2025 Proposal

The SEC submitted a proposal to the White House on August 25th. The designation is clear: 'deregulatory.' This is the first concrete signal from Paul Atkins' SEC that the 2023 Gensler-era custody regime is officially dead. The math doesn't lie. The 2023 proposal defined 'qualified custodian' so narrowly—licensed banks, trust companies, registered broker-dealers—that it strangled institutional crypto adoption. It was withdrawn after a firestorm of opposition from financial institutions, crypto platforms, and federal agencies. Now the SEC is reversing course. But this isn't a simple pivot. It's a structural admission that the previous framework was both unworkable and counterproductive. Context matters here. The proposal targets the custody rules under the Investment Advisers Act of 1940 and the Investment Company Act of 1940. The stated goal is to 'remove investor protection burdens in outdated provisions that are no longer necessary.' That language is carefully chosen. It's not a blanket deregulation. It's a surgical revision aimed at expanding the definition of who can hold client crypto assets. The rule has been tagged as 'economically significant' and assigned RIN 3235-AN46. The formal proposal is targeted for October. This is still early-stage—OIRA review is pending—but the direction is unmistakable. From a technical auditor's perspective, the core issue is the definition of 'qualified custodian.' The 2023 proposal would have effectively forced investment advisers to use a handful of legacy financial institutions. The technical implication was severe: it would have excluded modern custody solutions like MPC (multi-party computation) wallets and DVT (distributed validator technology) from the compliance framework. Trust the code, verify the trust. If the new rules open the door to non-traditional custodians, we're looking at a fundamental shift in how custody technology is architected and audited. The market has partially priced this in—about 30-50% of the potential impact is already reflected in custody-related equities. But the specific technical standards are still unknown. Here's the contrarian angle most analysts are missing. The 2023 proposal's failure wasn't just about regulatory overreach. It was a market-driven rejection of a custody model that ignored the actual technical evolution of digital asset security. The new proposal, if it mirrors the deregulatory intent, could create a two-tier custody market. Traditional banks will push for strict standards to protect their turf. Crypto-native custodians like BitGo and Fireblocks will push for technical neutrality. The result could be a fragmented regulatory landscape where 'qualified custodian' means different things depending on the asset class. Security is not a feature; it is the foundation. The risk is that in the rush to deregulate, we lower the bar for actual security standards—particularly around key management and audit requirements. Let me be precise about what I see from my audit experience. The 2023 proposal's failure was instructive. It showed that theoretical security requirements—no matter how well-intentioned—must survive contact with real-world technical constraints. The new proposal has a real chance of succeeding, but only if it addresses the operational realities of crypto custody. The market's reaction will be measured. This is not a green light for reckless experimentation. It's a recognition that the previous framework was a dead end. The timing is critical. The formal proposal in October will reveal the actual technical standards. If the SEC allows MPC-based custody solutions to qualify, we'll see a wave of institutional adoption. If it maintains bank-only custody, the deregulatory label is just window dressing. Complexity hides the truth; simplicity reveals it. The signal here is clear: the SEC is repositioning itself as a facilitator of institutional crypto adoption, not an obstacle. But the proof will be in the final rule text. A bug fixed today saves a fortune tomorrow. The same logic applies to regulatory frameworks. The broader implication is ecosystem-wide. Custody is the choke point for institutional capital. Relax the choke point, and you unlock flows into tokenized securities, DeFi protocols, and exchange-traded products. The recent wave of federal trust bank charter approvals is a direct response to the 2023 proposal's restrictive stance. The market found alternatives. Now the SEC is catching up. The question is whether the new rules will be permissive enough to matter, or whether they'll merely codify the status quo. We'll know by October. Watch the details. The trend is your friend, but only if you verify the underlying assumptions.