SEC's crypto custody rewrite just hit White House review. The details nobody has yet

The SEC's crypto custody rewrite entered White House review on Aug. 25. That's the boring administrative step that makes this real. And here's the kicker: nobody has actually seen the proposal yet.

The Office of Information and Regulatory Affairs has the rule listed as pending at the proposed-rule stage. No legal deadline. No operative language. Just a receipt that says the SEC is thinking about changing how investment advisers and funds custody their clients' crypto.

Think about that for a second. A rule that could decide which institutions get to hold billions in digital assets is moving through the government with zero public details.

The Timeline Nobody's Talking About

Let's walk through this like a story, because that's what it's.

June 2025. The SEC formally withdrew its 2023 safeguarding proposal. That was the Gensler-era attempt to rewrite custody rules for advisers, the one that would've made life miserable for anyone holding crypto outside a qualified custodian. The Commission killed it and said future action would need a fresh start.

Then came Sept. 30, 2025. SEC investment-management staff issued a no-action letter. The content matters less than the direction. Staff said they wouldn't recommend enforcement against advisers or regulated funds that treated certain state trust companies as banks for crypto custody, provided a long list of conditions were met.

That letter is a staff position. It has zero legal force. But it became the practical baseline for the entire industry overnight.

Now it's Aug. 25, 2026. The SEC's draft amendments to the custody rules are sitting at OIRA, the White House's regulatory review shop. The Unified Agenda entry targets October 2026 for a notice of proposed rulemaking.

October 2026 is an agency planning target. Not a hard date. The OIRA record lists no legal deadline. That gap between target and reality is where rules go to die.

But the sequence matters. Withdrawal in June 2025. Staff guidance in September 2025. White House review in August 2026. The SEC is building a new framework from scratch, not reviving old fights.

Who Wins, Who Loses

Here's what's actually at stake. Registered investment advisers and investment companies sit closest to this rulemaking. Their custody arrangements depend on institutions that meet federal requirements. That means banks and state trust companies have real commercial skin in this game.

And some crypto-native firms have been positioning for exactly this moment. The no-action letter opened a lane for state trust companies to qualify as custodians. That's not an accident. That's the SEC staff telling the industry which way the wind blows.

The conditions in that letter are worth reading carefully. Authorization, safeguarding policies, audited financial statements, independent control reports, custody contracts, risk disclosures, best-interest determinations. The custody agreement must segregate client or fund assets and bar lending, pledging or rehypothecation without written consent.

That sounds reasonable until you read it as a crypto firm. Because the lending ban is brutal. Most crypto businesses run on rehypothecation. You take client assets, you lend them out, you earn yield, you call it growth. This rule would kill that model for regulated advisers. Which is the point.

Here's my take: the SEC is building a two-tier system. Banks and state trust companies with real compliance infrastructure get the green light. Everyone else gets a rulebook so thick nobody can afford to follow it.

The bigger institutions will call this accountability. I call it a moat.

And here's the uncomfortable truth for crypto maximalists. The firms best positioned for this rule are the ones that spent the last two years hiring compliance officers and begging for regulatory clarity. Coinbase. Ripple. The names that make retail traders roll their eyes. They did the boring work while everyone else was fighting the SEC in court. That boring work is about to pay off.

The Details That Matter

Let's be specific about what's missing. The published records provide no operative proposal language. No eligibility requirements. No control standards. No safekeeping provisions. Nothing.

The no-action letter from Sept. 30, 2025 is the only concrete signal we've. Advisers and funds must determine that using a particular custodian serves the best interests of clients, funds and their shareholders. They must disclose material risks. They must have custody contracts that prevent lending without consent.

So the SEC staff already told us what they think good custody looks like. The rewrite likely codifies those principles into enforceable regulation.

Here's the thing. The no-action letter is technically toothless. It's a promise not to sue under specific conditions. The proposed rule, if it arrives, becomes law with consequences. That's the jump from soft guidance to hard rules.

Who feels that jump? State trust companies without audited financials. Smaller advisers who can't afford compliance teams. Crypto platforms that built their entire model on rehypothecation. The ones who thought the no-action letter was permission to keep doing business as usual. It wasn't.

The funding rate is lying to you again if you think this is bullish or bearish for crypto prices. It's neither. This is structural. It's about who gets to hold the assets, not what the assets are worth.

But the winners are clear. Institutions with federal banking relationships. Trust companies with audited books. Custodians who can prove they aren't lending client assets out the back door.

The losers? Everyone else. And there are a lot of everyone elses.

This ends badly. The data already knows it.

Not because the rule is wrong. Because it's overdue. The industry spent years begging for regulatory clarity, and now that it's coming, half the firms in crypto aren't ready for it. They don't have the compliance staff. They don't have the audited financials. They don't have the controls.

Bullish on hopium. Bearish on math. The math says consolidation, and consolidation always leaves bag holders.

The timeline gives us a rough target. October 2026 for the proposed rule. Then a comment period. Then a final rule. Then an implementation deadline. Realistically, we're looking at 2027 before anything binds. That's an eternity in crypto. But it's also just enough time for the industry to wake up and realize the guardrails are real.

So here's my advice. Watch the OIRA page. Watch for the proposal text. And when it drops, read the rehypothecation section first. That's where the real story lives.

Zoom out. No, further. See it now? This isn't a crypto rule. It's a banking rule wearing a crypto costume. And the banks have been waiting for this for a decade.