TLDR
The SEC updated staff guidance on Dec 1718 clarifying how existing securities rules apply to crypto. Broker?dealers can custody crypto asset securities if they control private keys and meet DLT risk standards, while most non?security crypto remains outside SIPC protection and the customer protection rule. These are staff statements and FAQs, not formal rules, but they meaningfully lower ambiguity for brokers and ATSs handling digital assets.
- Broker?dealers must have exclusive private key control and the ability to transfer crypto asset securities on?chain, with contingency plans for forks, attacks, and outages per a staff statement.
- The SEC updated FAQs on crypto market structure, including pairs trading and what counts as control, narrowing reliance on the SPBD safe harbor and expanding compliant custody options in the updated FAQs.
- Non?security crypto at broker?dealers sits outside the Customer Protection Rule, so SIPC coverage generally does not apply, requiring clear disclosures per the FAQ update.
Deep Dive
1. Broker Custody Clarity
The SECs Division of Trading and Markets laid out how brokers can meet Rule 15c3?3 possession or control for crypto asset securities. Firms must hold exclusive private key access, be able to transfer assets on the ledger, and maintain policies to manage blockchain risks like hard forks, 51% attacks, and outages, with a clear bar for when custody should not be claimed if risks are material staff statement.
- The statement provides a non?enforcement roadmap if standards are met and emphasizes operational controls over abstract tech debates coverage.
Traditional brokers now have a clearer checklist for compliant on?chain custody of tokenized stocks and bonds, which can unlock institutional participation while retaining investor protections.
2. Trading Venues and Control
The SEC refreshed its crypto FAQs (updated Dec 17), addressing trading on ATSs and what constitutes control for custody. It indicates pairs trading of a crypto security against a non?security crypto can be facilitated on regulated venues with proper compliance, and it expands how brokers can evidence control at qualified locations, reducing reliance on the special?purpose broker?dealer path FAQ update.
- Industry reporting notes the updates are incremental but lower friction for broker custody and market?making, with staff statements and FAQs guiding near?term practice report.
Regulated venues get a clearer path to list and settle tokenized assets and mixed pairs, which could improve price discovery and liquidity if platforms implement the controls.
3. What Is Not Covered
The SEC reiterates that non?security crypto assets held at broker?dealers are outside Rule 15c3?3. That means SIPC protections do not apply to those assets, and brokers must disclose the limits of customer protections accordingly FAQ update.
- The agency also stresses these are staff statements and FAQs, not binding rulemaking, so posture could change with leadership, though they clarify expectations now coverage.
Investors should not assume blanket protections for non?security crypto at brokers. Read disclosures carefully to understand custody, rehypothecation, and recovery scenarios.
Conclusion
The SEC did not create new law. It clarified how existing rules apply to crypto custody and trading, giving brokers and ATSs a path to handle crypto asset securities with explicit operational controls while confirming that non?security crypto remains outside key protections. If platforms adopt these standards, institutional participation could rise, but protections differ by asset type, so disclosures and venue design still matter.
