The DOL's 401(k) Crypto Rule Hit the White House. Six Factors and $12 Trillion Are the Whole Story

The most important crypto rule of the year isn't really about crypto. It's about who gets sued.

On Nov. 5, the Office of Information and Regulatory Affairs logged RIN 1210-AC38 under the title "Fiduciary Duties In Selecting Designated Investment Alternatives." Final rule. Economically significant. Authoring office: the DOL's Employee Benefits Security Administration. No legal deadline for completion.

That's the last interagency checkpoint before a Federal Register publication, and it's the moment the boring paperwork becomes the actual unlock.

Read the title again. Nowhere does it say bitcoin. Nowhere does it say digital assets. And that's exactly why this rule has a better shot at taking effect than any crypto bill currently sitting in Congress. It's dressed as ERISA plumbing. Nobody has to vote on it.

Here's the claim I'll defend: this rule won't put a bitcoin sleeve in your 401(k). It will do something narrower and more useful. It'll stop your employer's plan committee from flinching.

The six boxes

The DOL dropped the proposal on March 30, 2026, and published it in the Federal Register the next day. The mechanism is a safe harbor under the Employee Retirement Income Security Act of 1974. Follow a documented process, and you get legal cover for adding private assets to a plan menu.

Six factors, per the draft. Performance. Fees. Liquidity. Valuation. Performance benchmarks. Complexity.

That's it. That's the test. Tick those boxes with a paper trail and you're inside the harbor. Nothing in the proposal compels a plan to offer crypto, private equity, or real estate. It just lowers the expected cost of the lawsuit if a participant's balance drops and a plaintiff firm comes knocking.

This traces back to the Aug. 7, 2025 executive order, "Democratizing Access to Alternative Assets for 401(k) Investors." That order told the Labor secretary to reexamine ERISA guidance and propose rules with "appropriately calibrated safe harbors." It defined alternatives broadly: private-market equity and debt, real estate, actively managed vehicles holding digital assets, commodities, infrastructure, lifetime-income strategies.

Deputy Labor Secretary Keith Sonderling framed the posture as neutrality. "The department's days of picking winners and losers are over," he said.

Worth noting the thaw already happened before this rule. In May 2025 the DOL rescinded a March 2022 compliance release that told fiduciaries to exercise "extreme care" before touching crypto. The department's reasoning was sharp: that phrase doesn't appear in ERISA. So the safe harbor is insurance stacked on top of an earlier reversal, not the reversal itself.

Scale of the prize: roughly $12 trillion in 401(k) assets, and more than 90 million defined-contribution savers. If you want a sense of how stale the public data is on this, you can pull the docket yourself. Here's the relevant code.

curl -s "https://api.regulations.gov/v4/documents?filter%5Brin%5D=1210-AC38" \ -H "X-Api-Key: $REGULATIONS_GOV_KEY" \ | jq -r '.data[].attributes | "\(.title) | \(.postedDate) | \(.documentType)"'

Run that and you'll see the proposal and, eventually, the final rule the moment it posts. Set a cron job. The Federal Register is faster than the newsletter coverage.

What the final text hasn't said

Here's where I've to steelman the skeptics, because they're not wrong about everything.

The final text isn't public. We don't know whether the six-factor list survived comment intact. We don't know how the rule describes digital-asset vehicles. We don't know the effective date. All of that becomes visible only when OIRA returns the package and EBSA posts it. Comment volume was heavy, and industry and labor groups spent months arguing opposite sides of the prudence standard. It's entirely plausible the safe harbor came out narrower than the March draft.

Second problem: politics. Sens. Bernie Sanders and Elizabeth Warren pushed the DOL to abandon this path entirely. House Republicans have moved to codify the August order in statute, which tells you they don't trust a rule to survive on its own. They're right not to. A safe harbor is one administration away from being rewritten, and there's no statutory floor under it.

Third, the "economically significant" flag cuts both ways. It gets the rule serious scrutiny, and it also invites OIRA economists to trim the cost-benefit case. Big rules attract big objections. This one has no deadline, which means nobody's forced to finish it on a schedule.

And the fourth objection is the one that actually bites. Even a cleared safe harbor leaves the real bottleneck untouched: recordkeepers. A plan sponsor can't add an asset class their recordkeeping platform doesn't support, and small plans can't afford the diligence file the six factors demand. So does that mean bitcoin shows up on the menu at your office? Probably not at a 40-person marketing agency. It shows up at mega plans with in-house benefits counsel and a consultant on retainer.

That's the bear case in one line. Access without distribution is a press release, not a product.

The verdict

I'll take the other side anyway.

Look at the sequence. August 2025: the executive order reframes retirement access as a policy goal. May 2025: the "extreme care" language dies, killing the explicit chill. March 2026: the six-factor safe harbor gets proposed. November 2026: the final package reaches OIRA. That's a straight line, and the proposed version cleared OIRA in late March after roughly two months of review. A cleared final rule by January is the base case, not the optimistic one.

So who actually wins here? Not the retail saver with a $60,000 balance, at least not first. The winners are asset managers with a 401(k)-eligible vehicle already on a shelf, recordkeepers who can turn a digital-asset sleeve into a config option, and the plan consultants who get to sell a diligence framework. Crypto gets pulled along inside a cart that private equity has been pushing for a decade. That's fine. It's how most institutional adoption actually happens. Somebody else does the lobbying, you get the menu slot.

The losers are the plaintiff bar and anyone who assumed a 2022-era guidance letter was permanent. Neither is a small constituency.

What I'd watch isn't the headline when the rule publishes. It's two fields in the actual document. First, whether the six factors appear verbatim, because rewording them changes what a committee has to prove. Second, the effective date, because plans renegotiate lineups on plan-year cycles and a mid-year date means you wait 12 more months for anything to show up in a fund menu.

Read the source. The docs are lying, or at least they're a draft until OIRA signs off. The published text is the only version that counts.