The Securities and Exchange Commission (SEC) has issued new staff guidance that will reshape how public companies report their handling of customer cryptocurrency assets. The SEC's Division of Corporation Finance released updated expectations for digital asset depositories and crypto custody arrangements, focusing on balance sheet treatment and risk disclosure. This guidance applies to custodians, exchanges, digital asset platforms, and any publicly traded company managing customer crypto on behalf of third parties.

Why Does This Custody Guidance Matter Now?

The crypto industry learned painful lessons from major exchange failures and platform collapses in recent years. When companies like FTX and others imploded, investors discovered they had little visibility into how their assets were actually held, who controlled private keys, and whether customer funds were segregated from corporate assets. The SEC's new guidance is a direct response to those failures.

This is staff guidance, not a formal Commission rule, which is an important distinction. The SEC is not creating binding law through this document. However, staff guidance carries real weight because it signals what the SEC's examination teams will scrutinize during filing reviews and what investors expect to see disclosed.

What Information Must Companies Now Disclose About Crypto Custody?

The guidance centers on several critical disclosure areas that public companies must address when they hold digital assets for customers. Companies can no longer use vague language or generic statements about holding crypto "safely." Instead, they need to provide specific, detailed information that helps investors understand the actual risks and protections in place.

• Asset Control and Private Keys: Companies must explain who physically controls private keys, whether assets are held in hot wallets (internet-connected) or cold storage (offline), and what happens if a custodian fails or becomes compromised.
• Customer Asset Segregation: Disclosure must clarify whether customer assets are kept separate from corporate funds, whether they can be rehypothecated (lent out or used for other purposes), and what legal protections exist if the company faces bankruptcy.
• Insurance and Risk Coverage: Companies need to detail insurance limits, what types of losses are covered, and what customer assets remain uninsured or at risk.
• Third-Party Service Providers: If custody is outsourced to another firm, companies must disclose who that provider is, what happens if they fail, and what oversight mechanisms exist.
• Cybersecurity and Operational Risks: Companies must explain their security controls, incident response procedures, and how they protect against hacks, theft, or operational failures.

The guidance also addresses balance sheet presentation, meaning companies must clearly show what assets they actually own versus what they hold in custody for customers, and what obligations they have to those customers.

How Does This Guidance Differ From a Formal SEC Rule?

Staff guidance does not have the same legal force as a formal rule adopted by the full SEC Commission. It also does not replace existing statutes, court decisions, or accounting standards like Generally Accepted Accounting Principles (GAAP). Companies still need specialized legal and accounting advice for their specific circumstances.

However, the practical impact is significant. This guidance tells issuers what SEC staff will likely ask about during filing reviews, shapes disclosure norms across the industry, and signals which risks regulators believe investors need to understand more clearly. For companies in the digital asset depository business, vague language is becoming increasingly difficult to defend.

What Are the Broader Implications for the Crypto Industry?

The SEC's latest staff guidance is part of a wider tightening around disclosure standards. As more companies hold, custody, or service digital assets, regulators are pushing for clearer, more standardized reporting. This trend can make the sector more transparent and easier for investors to compare, but it may also increase compliance costs for custody providers and platforms.

Digital asset custody involves complex technical and legal questions around private keys, third-party custodians, insurance limits, wallet architecture, legal title, bankruptcy treatment, and cybersecurity controls. The SEC's guidance helps companies understand what information investors need to see to make informed decisions about where their crypto is held and what risks they face.

Better disclosure makes it easier to identify which companies have robust custody practices and which ones carry higher risks. It also creates accountability; companies can no longer hide behind technical complexity or claim that custody arrangements are too specialized for public disclosure. The SEC is essentially saying that if you hold customer crypto, you must explain how you hold it, in terms that investors can actually understand.

" }