There is a particular silence that precedes structural change. It is not the silence of absence, but the silence of recalibration—a moment when the machinery of state pauses, recalibrates its assumptions, and prepares to move in a direction that renders previous certainties obsolete. On August 25, 2025, the U.S. Securities and Exchange Commission submitted a proposal to the White House Office of Information and Regulatory Affairs (OIRA) that carries precisely this weight of quiet transformation. The proposal, designated as RIN 3235-AN46, seeks to amend the custody rules under the Investment Advisers Act of 1940 and the Investment Company Act of 1940. It is classified as "economically significant" and, more tellingly, as "deregulatory" in nature. This is not a minor technical adjustment. This is the first formal, procedural step toward dismantling the restrictive custody framework that the Gensler-era SEC constructed in 2023—a framework that, in its attempt to protect investors, inadvertently strangled institutional participation in digital assets.
The context here is essential, because the 2023 proposal was not merely restrictive; it was architecturally exclusionary. Under Gary Gensler's leadership, the SEC proposed that qualified custodians for digital assets be limited to a narrow set of entities: state or federally chartered banks, trust companies, SEC-registered broker-dealers, and CFTC-regulated futures commission merchants. On its surface, this seemed like a reasonable investor protection measure. In practice, it was a structural barrier that excluded nearly every crypto-native custody solution—including multi-party computation (MPC) wallets, distributed validator technology (DVT) setups, and specialized digital asset custodians like Fireblocks and BitGo—from the regulated advisory ecosystem. The 2023 proposal was met with a wall of opposition from financial institutions, crypto platforms, and even other federal agencies. It was withdrawn. But the withdrawal was not a defeat; it was a strategic retreat. The new proposal, submitted under the leadership of current SEC Chair Paul Atkins, represents a deliberate inversion of the 2023 approach. The SEC now states its intent to "remove investor protection burdens that are no longer necessary in outdated provisions." The language is telling. The burden, once considered essential, is now deemed obsolete.
From my perspective as an analyst who has spent years mapping the intersection of macroeconomic cycles and digital asset infrastructure, this revision is not merely about custody. It is about the fundamental architecture of trust in a decentralized financial system. The custody rule is the choke point where traditional finance meets cryptographic verification. It is the point where the legal concept of "possession" must reconcile with the technical reality of private keys. The 2023 proposal attempted to force this reconciliation by imposing traditional financial intermediaries onto a system that was designed to eliminate them. The 2025 proposal, in its deregulatory framing, acknowledges a different reality: that the market has already moved, and the regulators must now catch up to the technical standards that have emerged organically.
The core insight here is that the SEC is not simply loosening rules; it is redefining the epistemological basis of asset custody. The 1940 Acts were written for a world of physical certificates and book-entry entries. They assume a custodian is a bank or a trust company because those were the only institutions capable of safeguarding assets. The digital asset era has introduced a new category of custodian: the technology company that secures assets through cryptographic protocols rather than physical vaults. The question the SEC is now grappling with is whether these technology companies can be trusted with the same level of responsibility as traditional custodians. The answer, based on the direction of this proposal, appears to be a conditional yes. But the conditions are still being written.
Let me be precise about what this means for the technical stack. If the new rule expands the definition of qualified custodian to include non-traditional custodians, it will implicitly endorse a range of technologies that were previously on the regulatory periphery. MPC technology, which splits private keys into multiple shares distributed across different parties, becomes a compliance-grade solution rather than a workaround. DVT, which allows for distributed validation without centralized control, gains legitimacy as an institutional-grade infrastructure. Hardware security modules (HSMs) and cold storage protocols will need to be audited against new standards. This is not a trivial change. It is a re-engineering of the compliance layer that sits between institutional capital and digital assets. Based on my audit experience with early DAO prototypes and my stress-testing of Aave's liquidity models, I can attest that the gap between theoretical security and practical implementation is where most failures occur. The SEC's new rules will need to address this gap with specificity, or the deregulation will simply shift the risk surface rather than reducing it.
The market's response to this proposal has been characteristically muted—a cautious optimism that reflects the scars of previous regulatory cycles. The proposal is still in its early procedural stages. The target date for formal publication is October 2025, followed by a public comment period and, eventually, a final rule. The market has priced in perhaps 30-50% of the potential positive impact, because the direction is clear but the details are not. There is a structural reason for this caution. The 2023 proposal's failure demonstrated that the SEC's regulatory power is subject to multiple checks and balances—from the financial industry's lobbying power to the objections of other federal agencies. The new proposal will face its own gauntlet of scrutiny. Consumer protection groups may argue that the deregulation goes too far. Traditional custodians may resist the inclusion of crypto-native competitors. The OIRA review itself may suggest modifications. The path from proposal to final rule is rarely linear.
The contrarian angle here is that this deregulation may not lead to the institutional flood that many expect. The conventional narrative is that loosening custody rules will unlock massive institutional inflows into digital assets. This is a seductive thesis, but it ignores a critical structural reality: the custody bottleneck was never the only barrier to institutional adoption. There remains the question of accounting standards, the volatility of digital asset prices, the lack of a clear regulatory framework for tokenized securities, and the reputational risk that still attaches to crypto exposure in traditional finance. The custody rule revision is a necessary condition for institutional adoption, but it is not a sufficient one. The more likely outcome is a gradual, two-tiered market development. The first tier will consist of traditional financial institutions that already have relationships with banks and trust companies, and who will now find it easier to offer crypto custody as an extension of their existing services. The second tier will consist of crypto-native custodians who will need to upgrade their compliance infrastructure to meet the new standards. The competition between these tiers will be intense, and it will reshape the custody landscape in ways that are difficult to predict.
There is also a deeper, more philosophical issue at play here. The SEC's shift toward deregulation is occurring at a moment when the global regulatory environment is fragmenting. The European Union's Markets in Crypto-Assets Regulation (MiCA) has established a comprehensive framework that is, in many ways, more prescriptive than the U.S. approach. Singapore and Hong Kong are competing to become the preferred jurisdiction for digital asset innovation. The U.S. is now signaling a more permissive stance, but this permissiveness is not without risk. A deregulatory race to the bottom could undermine the very investor protections that make institutional participation sustainable in the long term. The 2023 proposal was flawed because it was too restrictive. The 2025 proposal could be equally flawed if it is too permissive. The optimal path lies somewhere in the middle—a framework that recognizes the legitimacy of crypto-native custody solutions while maintaining rigorous standards for security, auditability, and transparency.
This is where the concept of the "chaotic surface" becomes relevant. The surface of this regulatory change appears orderly—a procedural submission, a review process, a target date. But beneath that surface, the forces at play are deeply chaotic. There is the political pressure from a crypto industry that has become a significant lobbying force. There is the economic pressure from a traditional financial sector that sees digital assets as a growth opportunity. There is the technological pressure from a custody industry that has developed solutions faster than the regulators can evaluate them. And there is the ideological pressure from a philosophical debate about the nature of money and trust in a digital age. The SEC's proposal is an attempt to impose order on this chaos, but the outcome will be determined by the interaction of these forces, not by the text of the rule itself.
For those of us who have observed this industry through multiple cycles, the pattern is familiar. The ICO boom of 2017 was a technological experiment that outpaced regulatory understanding. The DeFi summer of 2020 was a liquidity experiment that outpaced risk management frameworks. The NFT mania of 2021 was a cultural experiment that outpaced economic rationality. Each cycle ended in a crash, followed by a period of regulatory consolidation. The current cycle is different. It is not a technological or cultural experiment; it is an institutional integration. The question is not whether digital assets will be integrated into the traditional financial system, but how, and under what terms. The SEC's custody rule revision is the first significant answer to that question. It is a signal that the U.S. is choosing a path of integration rather than exclusion. But the path is long, and the obstacles are many.
The takeaway for those positioning themselves in this market is not to chase the immediate headlines, but to understand the structural timeline. The formal proposal in October will provide the first concrete details. The public comment period will reveal the points of contention. The final rule, likely in the first half of 2026, will establish the new baseline. Between now and then, the market will be driven by speculation and positioning. The real opportunities will emerge after the rule is finalized, when the competitive landscape becomes clear. The custody providers that will thrive are those that can navigate the transition from the current regulatory gray zone to the new compliance framework. The traditional financial institutions that will benefit are those that can integrate crypto custody into their existing service offerings without disrupting their core business models. The investors who will succeed are those who recognize that this is not a sprint, but a marathon—a structural reordering of trust that will unfold over years, not months.
The silence before structural change is always the most telling moment. It is the moment when the old order is being dismantled, and the new order has not yet taken shape. The SEC's proposal is a sound in that silence—a signal that the direction of travel has changed. But the destination is still uncertain. The custody rule revision is the first step, not the last. The subsequent steps—the broker-dealer rule clarification under RIN 3235-AN48, the tokenized securities exemption, the international regulatory competition—will determine whether this moment of deregulation becomes a foundation for sustainable growth or another chapter in the industry's turbulent history. The answer lies not in the text of the rule, but in the chaotic surface of its implementation. And that surface, as always, is where the real story will be written.