What did SEC say on custody?

TLDR

The US SEC issued an Investor Bulletin on 12 Dec explaining crypto custody basics, the trade-offs between self-custody and third?party custodians, and key risks for investors, per a crypto custody guide (SEC bulletin coverage).

1. Self?custody vs custodians: the SEC outlines hot vs cold wallet risks and private key responsibilities (SEC custody guide overview).
2. Third?party custodians: hacks, shutdowns, or bankruptcy can mean loss of access to your assets (custodian risk warning).
3. Due diligence: verify policies on rehypothecation, commingling, insurance and segregation of accounts (retail investor bulletin summary).

Deep Dive

1. Wallet Models

The SECs bulletin distinguishes self?custody (you control private keys) from third?party custody and explains the trade?offs of hot wallets (internet?connected, faster, higher cyber risk) and cold wallets (offline, stronger protection but risk of permanent loss if devices or keys are compromised) (SEC custody guide overview).

• Losing private keys typically means permanent asset loss, and compromised keys can lead to theft without recourse (retail investor bulletin summary).

2. Custodian Risk

Using third?party custodians introduces counterparty risk. The SEC warns that if a custodian is hacked, shuts down, or goes bankrupt, you may lose access to your assets (custodian risk warning).

1. Custodial policies vary widely; investors should understand whether assets are held in segregated accounts or pooled, which can affect outcomes in stress events (retail investor bulletin summary).
2. The SEC emphasizes reviewing insurance and recovery frameworks rather than assuming bank?like protections (custodian risk warning).

3. Due Diligence

The bulletin urges investors to investigate custodians practices before storing assets: check rehypothecation, commingling, storage methods (hot vs cold), insurance, data privacy, security controls, and fees (retail investor bulletin summary).

1. Ask how your assets would be treated in a failure and whether ownership records are clear and enforceable (custodian risk warning).
2. Understand the operational implications of wallet choice and confirm supported assets and incident response protocols (retail investor bulletin summary).

Conclusion

The SEC did not create new rules. It published plain?English guidance that elevates custody risk awareness and investor education. The core message is simple: know who controls your keys, understand custodian policies, and align your storage method with your risk tolerance and operational capabilities (SEC custody guide overview).