Digital Asset Custody Regulation - Detailed Explanation

Custody is THE central legal question in crypto. Who owns the coin when exchange goes bust? Who can legally hold it for you? It is not about technology, it is about title.

1. What is Digital Asset Custody?

Custody = Safekeeping + Control of Private Keys + Legal Obligation to return same asset

There are 4 models:

1. Self-Custody: User holds keys - Ledger, Metamask. No counterparty risk, but if you lose seed, no recovery.
2. Third-Party Custody (Exchange/Custodian): Exchange holds keys in omnibus wallet. You have IOU.
3. Qualified Custodian: Regulated entity - Bank, Trust Company, Broker-Dealer - that meets SEC Rule 206(4)-2. Required to keep client assets segregated, undergo surprise audit, provide statements.
4. Self-Custody with Qualified Custodian as Agent: New model - Client holds keys in MPC wallet, custodian is co-signer.

What Custodian Must Do:

• Segregation - Client assets not usable for proprietary trading
• Bankruptcy Remoteness - Client assets not part of estate
• Insurance, Cold Storage, Access Controls
• Proof of Reserves + Liabilities

2. Global Regulatory Framework

A. United States - Most Developed, Most Enforcement-Driven

1. Advisers Act Custody Rule 206(4)-2:
The SEC Custody Rule requires that registered advisers that have custody of client funds or securities maintain those assets with broker-dealers, banks, or other qualified custodians. In turn, only financial institutions that are deemed qualified custodians under federal law may provide custodial services to public.

Problem: For years SEC did not say if crypto is "funds or securities". So advisors were in grey area.

2. The Turning Points in 2025-26:

SAB 121 Repeal - Jan 2025: SEC's Staff Accounting Bulletin 121 required banks to show crypto custodied as liability on balance sheet, which killed bank custody. Repeal in Jan 2025 allowed U.S. banks to legally custody digital assets, removed critical barrier.

GENIUS Act - July 2025: Passage codified stablecoin and digital asset regulations, ending years of enforcement-driven ambiguity.

SEC No-Action Letter - Sept 30, 2025: The staff of SEC Division of Investment Management issued no-action letter permitting registered investment advisers and registered investment companies to use state trust companies to custody crypto assets and related cash, subject to certain conditions. This was triggered by request from Simpson Thacher asking SEC to confirm it would not pursue enforcement against advisers that use state trust company to hold digital assets.

New Proposal Oct 1, 2026: SEC proposed broad set of changes to custody framework governing investment advisers. Proposal would open two paths for crypto custody: self-custody by adviser under conditions, and custody by state trust company.

3. Enforcement Cases:

Galois Capital Settlement: For decades this rule... In 2023, SEC proposed formal amendments to Custody Rule to explicitly cover digital assets. While changes not yet finalized, Galois Capital case demonstrates SEC is already holding firms accountable for not custodying crypto assets through qualified custodian. Message clear: RIAs managing digital assets must align with SEC custody standards.

BTC Trading Corp. Case: SEC concluded defendants had custody and control of customer funds by virtue of controlling digital wallet in which assets were stored. SEC appears to be arguing that Coinbase and Binance are acting as depositories because they are facilitating deliveries of securities via blockchain.

SEC Broker-Dealer Relief Dec 23, 2020: SEC issued statement setting forth conditions under which certain limited scope special purpose broker-dealers would be permitted to self-custody digital asset securities in accordance with possession or control requirements of Rule 15c3-3.

B. India - From Unregulated to Property Law

India has no dedicated custody licence yet, but 3 landmark developments:

1. Supreme Court - Internet and Mobile Association vs RBI (2020):
RBI ban on banking for crypto exchanges struck down. Court held while RBI had authority to regulate virtual currencies, complete exclusion from banking system was disproportionate, especially when no law prohibited trading itself. Holding or trading cryptocurrency in India is not illegal.

2. Madras High Court - Rhutikumari vs Zanmai Labs Pvt Ltd (WazirX) - Oct 25, 2025 - LANDMARK
First clear judicial declaration in India recognizing cryptocurrencies as legally protected proprietary rights.

• Facts: Investor's 3,532.30 XRP tokens frozen after July 2024 WazirX cyberattack.
• Held: Madras HC held that cryptocurrency qualifies as property under Indian law - capable of being owned, enjoyed, transferred, and held in trust. Judgment delivered by Justice N Anand Venkatesh.
• Crucial Custody Point: The decision grants legal standing to crypto assets as property capable of ownership and protection. It also establishes that assets held in custody by exchanges must be treated as client property held in trust, not as exchange's property.
• Test: Crypto meets property tests because they can be owned, transferred and controlled by private keys. Identifiable and controllable, therefore eligible for legal protection similar to movable property.

As India edges toward structured digital-asset regime, this judgment reshapes conversation from speculative trading to investor rights, custody standards and future architecture.

3. Regulatory Position Today:

• No qualified custodian list - Exchanges self-custody - that is the risk
• PMLA 2002 applied to crypto exchanges since March 2023 - exchanges are reporting entities, must maintain custody records for 5 years
• SEBI paper proposes - Exchanges must keep 80% in cold storage, daily reconciliation, third-party audit.

C. EU - MiCA Title V

MiCA requires CASP providing custody to be liable for loss of assets, must segregate, cannot use client assets without consent, must have recovery plan. Custodian liable up to market value unless force majeure.

3. Key Case Laws on Custody - FTX, Celsius, Voyager

These bankruptcy cases decided the future of custody law globally.

Case 1: Celsius Network - US Bankruptcy Court SDNY - Judge Martin Glenn - Jan 2023

Most important custody case ever.

Terms of Service language decided ownership:

• Earn Accounts: User grants Celsius all right and title to such Eligible Digital Assets, including ownership rights, and right without further notice to hold such assets in Celsius' own wallet or elsewhere, and to pledge, re-pledge, hypothecate, sell, lend, or otherwise transfer.

Court held: Assets in Earn became Celsius property at time of deposit, such that digital assets now constitute property of debtors' bankruptcy estate.

• Custody Accounts: Terms said title to digital assets held in such accounts shall at all times remain with you and not transfer to Celsius.

Based on ruling on Earn, this suggests Custody accounts may not be property of estate, assets therein may be returned.

Outcome:
Bankrupt crypto lending firm Celsius ordered to give back roughly $44 million to customers who kept digital assets on platform's custody accounts. Judge Martin Glenn issued ruling, only applying to assets that never interacted with Earn product and stayed in custody accounts. Later settlement allowed custody holders to receive 72.5% of holdings.

Lesson: Wording of custody agreement = ownership. If you grant title, you are unsecured creditor.

Case 2: FTX - Nov 2022

In bankruptcy proceedings, courts ruled assets held by exchanges were... In case of FTX, court made it clear assets held on behalf of customers were property of bankruptcy estate, aligning with treatment as recoverable property.

But FTX TOS said: Title to your Digital Assets shall at all times remain with you. Yet court found commingling and diversion - concealed diversion of FTX customer funds to co-founder's private crypto hedge fund. So despite custody language, due to fraud, treated as estate.

In these bankruptcy proceedings, courts ruled assets held by exchanges were property of estate.

Case 3: Voyager Digital

Same as Celsius - Earn vs Custody distinction applied.

4. Custody Failure Pattern - What Goes Wrong?

1. Rehypothecation: Custodian lends your BTC without consent - Celsius, BlockFi
2. Commingling: Your coins mixed with exchange's coins - FTX
3. No Segregation: Hot wallet hack - WazirX July 2024 - 45% of customer funds lost
4. No Insurance
5. Unqualified Custodian: Using unregulated entity - Galois Capital failed this