The date was August 25, 2025. The SEC submitted a proposal to the White House Office of Information and Regulatory Affairs (OIRA). The document carried a designation that would have been unthinkable under the previous administration: "deregulatory."
That single classification, buried in the federal rulemaking registry under RIN 3235-AN46, is the most significant signal of institutional intent I have tracked since the 2024 Bitcoin ETF flow divergence. It signals a structural pivot in how the United States intends to handle the custody of digital assets โ and it will reshape the competitive landscape for every custodian, investment adviser, and tokenization project currently waiting on the sidelines.
This is not a market commentary. This is an audit of the rulemaking pipeline.
Context: The Ghost of 2023
To understand why this submission matters, you have to revisit the failed proposal of February 2023. Under Chair Gary Gensler, the SEC moved to amend custody rules under the Investment Advisers Act of 1940 and the Investment Company Act of 1940. The core provision: digital assets must be held by a narrowly defined "qualified custodian." The acceptable list was restrictive โ state or federally chartered banks, trust companies, SEC-registered broker-dealers, and CFTC-regulated futures commission merchants.
This sounds reasonable on paper. In practice, it was a structural exclusion.
Most crypto-native custodians โ the platforms actually building multi-party computation (MPC) wallets and distributed validator technology โ did not fit neatly into those categories. The rule, if finalized, would have forced investment advisers to move assets to traditional financial institutions that, in many cases, lacked the technical infrastructure to securely custody digital assets.
Based on my experience auditing DeFi protocols during the 2022 collapse, I can tell you this: a bank's legacy custody stack is not designed for 24/7 settlement finality. The 2023 proposal was a compliance nightmare disguised as investor protection.
The backlash was immediate and multi-front. Traditional financial institutions opposed the strict definition. Crypto platforms opposed the exclusion of non-bank custodians. Even other federal agencies pushed back on the SEC's jurisdictional reach. By March 2025, the SEC withdrew the proposal.
But here is the part most analysts miss: the withdrawal was not a defeat. It was a reset.
Core: What the Deregulatory Filing Actually Signals
The August 25 submission is not the final rule. It is the beginning of a formal review process. OIRA has classified it as "economically significant," meaning the projected annual impact exceeds $100 million. The SEC has targeted October 2025 for formal publication. From there: a public comment period, revisions, and ultimately a final rule.
Read the language carefully. The SEC states its intent to "remove investor protection burdens that are no longer necessary" from outdated provisions. This is the regulatory equivalent of a complete 180-degree turn.
Here is what the market is underpricing:
First, the qualified custodian definition is the battleground. If the new rule expands the definition beyond the 2023 list, it opens the door for technology-first custodians. Entities using MPC, hardware security modules, and audited cold storage systems could qualify. This is not hypothetical. The approval of new federal trust charters โ a wave of them โ has already expanded the pool of eligible custodians. The market is solving the custody problem through alternative channels, and the SEC is being forced to catch up.
Second, this is part of a coordinated framework, not a standalone action. RIN 3235-AN48 will clarify broker-dealer compliance requirements for crypto. The tokenized securities innovation exemption is still pending. When you map these three items together, a coherent picture emerges: the SEC under Paul Atkins is systematically dismantling the regulatory barriers to institutional crypto adoption.
The sequencing matters. Custody rules come first because custody is the foundation. Without a compliant custody solution, institutional capital cannot flow into tokenized securities, digital asset funds, or even simple spot positions. Liquidity leaves before the crash hits โ but it also refuses to enter before the custody framework stabilizes.
Third, the "deregulatory" label has procedural teeth. Under Executive Order 12866, an economically significant rule designated as deregulatory must undergo rigorous cost-benefit analysis. This means the SEC must justify any remaining restrictions by demonstrating they are necessary to prevent specific, identifiable harm. This is a much higher bar than the 2023 approach.
I have built dashboards tracking smart money flows into Layer 2 solutions and correlated ETF inflows with Coinbase OTC desk volumes. The patterns are clear: institutional capital does not respond to sentiment. It responds to structural certainty. The deregulatory designation is a structural certainty signal.
Contrarian: Deregulation is Not De-Risking
Here is where the narrative gets dangerous.
The market will likely interpret this as "SEC is going soft on crypto." That is a misreading. Code does not lie. Check the contract.
The SEC is not abandoning investor protection. It is reallocating the burden of proof. Instead of pre-defining who is a qualified custodian, the new framework will likely require custodians to demonstrate compliance through audits, insurance requirements, and disclosure obligations. This is a shift from "permission-based" to "verification-based" regulation.
The practical effect: operational standards will become the gatekeeper, not regulatory charters. This raises the bar for crypto-native custodians in a way the 2023 proposal never did. A custodian cannot simply claim to be compliant โ it must prove it through third-party audits and demonstrable security practices.
This is a subtle but critical distinction. The market is pricing a simple "bullish for crypto." The reality is more nuanced: this is bullish for compliant, audited custodians and bearish for anyone operating in the gray zone.
Another blind spot: the timeline risk. OIRA review can take 90 days or more. The October target could slip. If the government faces a shutdown โ a recurring pattern โ the entire timeline shifts. And the final rule, once published, will face a 60-day public comment period. Consumer protection groups will mobilize. State attorneys general may weigh in. The process is far from over.
Remember what happened with the 2023 proposal. It was withdrawn after massive pushback. The current proposal faces the opposite risk: it may be criticized as too lenient, creating a political liability that could slow its progress or dilute its provisions.
Follow the smart money, not the tweets. The smart money is waiting for the final text, not the initial filing.
The Ecosystem Shuffle
The downstream effects will be uneven. Let me break down who actually benefits and who faces structural headwinds.
Traditional finance wins big. Banks and trust companies with existing custody charters can extend their services to digital assets without the burden of a restrictive compliance framework. The wave of federal trust charter approvals is already positioning these entities for this moment. The cost of entry just dropped.
Crypto-native custodians face a double-edged sword. On one hand, expanded definitions mean they can serve investment advisers directly. On the other hand, they will face competition from traditional institutions with deeper balance sheets and established client relationships. The differentiation will come down to technical capability โ specifically, the quality of private key management and operational security.
Tokenized securities get their missing prerequisite. Compliance custody is the precondition for institutional adoption of tokenized assets. If the final rule provides a workable framework, the RWA (real-world asset) sector moves from pilot projects to scalable issuance. The pending tokenized securities innovation exemption reinforces this trajectory.
DeFi benefits indirectly. Clearer custody rules mean more institutional capital entering the ecosystem through compliant on-ramps. That liquidity eventually flows into DeFi protocols. But this is a medium-term effect, not an immediate one.
Takeaway: What to Watch
The signals are already in the data. The 2023 proposal failed because it was out of step with market realities. The 2025 reset acknowledges that reality. The SEC is not becoming pro-crypto. It is becoming pro-structure.
My assessment: the probability of a final rule that expands the qualified custodian definition is moderately high โ call it 60-65%. The probability that the final rule includes additional operational requirements (audits, insurance, disclosure) is near certain.
The real question is not whether the rule passes. It is whether your custodian is ready for the verification-based regime that follows. The custodians who thrive will be those who treat compliance as a technical feature, not a legal afterthought.
Liquidity leaves before the crash hits. But it also arrives before the rally. The filing on August 25 is the first step in that arrival process. The question is whether you are positioned for the flows that come after.