TLDR
In the US, broker?dealers can custody tokenized securities under Exchange Act Rule 15c3?3 (Customer Protection Rule) per a recent SEC staff statement, if specific operational and security conditions are met (SEC staff statement coverage).
- Physical possession can be satisfied by exclusive control of private keys and the ability to transfer on the ledger (SEC custody clarification).
- Updated SEC FAQs explain control mechanics under Rule 15c3?3(c) and limit coverage to crypto asset securities (FAQ update summary).
- Firms must assess blockchain risks (51% attacks, forks, airdrops) and prevent any unauthorized key access (SEC expectations).
Deep Dive
1. Possession via Keys
The SEC clarified broker?dealers may treat tokenized stocks or bonds as in physical possession if they have direct access to the asset on its distributed ledger and maintain exclusive control of the private keys, ensuring customers and affiliates cannot move assets without authorization (SEC custody clarification). This fits tokenized instruments into existing securities safeguards rather than creating a new regime (staff statement coverage).
Custody designs must centralize key control at the broker?dealer, with segregation, auditable transfer authority, and contingency plans that preserve control under stress.
2. Control and Scope
The SECs updated FAQs outline how broker?dealers can evidence control under Rule 15c3?3(c) using qualifying control locationspotentially beyond direct key holdingand reaffirm that the Customer Protection Rule applies only to crypto asset securities, not non?security crypto (FAQ update summary). This expands practical custody options while keeping scope tied to securities classification.
Legal and operational arrangements (sub?custody, multisig, directive rights) can meet control standards, but assets must be securities. Non?security tokens remain outside these protections.
3. Risk Conditions
Broker?dealers must formally assess the ledger and network supporting the security, prepare for malfunctions, 51% attacks, hard forks, and airdrops, and implement written policies for private key protection and incident response. If material operational or security issues exist, the firm should not deem itself in possession (SEC expectations).
Custody eligibility is conditional. Robust governance, monitoring, and disruption playbooks are mandatory to keep possession/control status defensible.
Conclusion
Tokenized securities custody is permitted under existing Rule 15c3?3, not a new carve?out, provided broker?dealers meet possession/control and risk?management standards. The SECs staff statement and FAQs lower ambiguity, but custody remains contingent on exclusive key control or validated control locations and disciplined assessments of blockchain risk (staff statement coverage; FAQ update summary).
