TLDR
The SECs Trading and Markets Division clarified that broker?dealers can custody crypto asset securities only if they control the private keys and can transfer the assets on chain under Rule 15c3?3s possession or control standard, per a Dec 17 staff statement and FAQs. See the staff clarification on private?key control in a market update.
- Exclusive key control, written policies, and DLT risk plans (forks, 51% attacks) are now spelled out as expectations for custody eligibility, per an SEC-focused report.
- The rule applies to crypto asset securities only; non?security crypto stays outside the Customer Protection Rule per an updated FAQ summary.
- Staff also refreshed FAQs and narrowed reliance on the SPBD safe harbor; the 2019 joint statement is marked withdrawn in the FAQ coverage.
Deep Dive
1. Keys and Control
The SEC staff says brokers can deem themselves in possession or control of crypto asset securities if they have sole private?key control and on?chain transfer capability. Firms must also implement written policies for key security and contingency plans for blockchain malfunctions, hard forks, airdrops, and 51% attacks, aligning crypto custody with existing broker?dealer safeguards under Rule 15c3?3(b)(1) as described in a policy report.
Broker?dealers are expected to assess the performance, governance, and risks of the DLT networks they use before and during custody. If material weaknesses exist, they should not claim possession, per a staff summary.
If a broker wants to hold tokenized securities for customers, it needs end?to?end operational control, not just a third?party wallet or shared key setup.
2. Whats In, Whats Out
This framework applies to crypto asset securities (for example, tokenized stocks or bonds), not to non?security crypto, which remains outside Rule 15c3?3 and its mechanics per an updated FAQ overview.
The SEC also issued related staff FAQs on trading and settlement (including ATS activity) to fit blockchain?settled instruments into traditional market safeguards, according to a market structure update.
Tokenized securities are being slotted into existing broker?dealer rules. Pure crypto that is not a security is unaffected by this custody clarification.
3. Practical Implications
Staff signals reduced reliance on the special?purpose broker?dealer path by recognizing control via qualifying control locations and exclusive key arrangements, and notes the prior 2019 joint statement is withdrawn in the FAQ coverage.
Industry read?outs stress this is staff guidance, not formal rulemaking. It lowers ambiguity for broker?dealers seeking to custody tokenized securities while preserving the SECs ability to revisit details, per a policy report.
More mainstream brokers can design compliant tokenized?security custody with clearer guardrails, but finality depends on how firms implement controls and how future rulemakings evolve.
Conclusion
The SECs staff just translated Rule 15c3?3s possession or control test into crypto terms: brokers must hold the keys, manage DLT risks, and prove on?chain transfer ability. This narrows ambiguity for tokenized securities while leaving non?security crypto outside the Customer Protection Rule. Expect traditional brokers to move faster on tokenized issuance and custody within these operational guardrails.
