Key Takeaways
- • Galaxy Asset Management published a perspective piece on June 18, 2026, authored by venture legal counsel Ian Irlander and legal intern Nora Joyce, addressing the structural compliance gap preventing registered investment advisers from deploying capital into decentralized finance protocols.
- • The SEC's Custody Rule (Rule 206(4)-2), enacted in 1962, requires RIAs to hold client funds with "qualified custodians" (banks, broker-dealers, trust companies), creating a fundamental conflict with DeFi's smart contract-based asset management where no traditional intermediary exists.
- • The SEC's 2023 proposed Safeguarding Rule, which would have explicitly extended custody requirements to digital assets, was never implemented, leaving RIAs without clear regulatory pathways for DeFi deployment.
- • Galaxy Asset Management identifies MPC-based (multi-party computation) key management as a potential compliance solution to bridge the gap between regulatory requirements and decentralized finance technology infrastructure.
- • RIAs seeking to honor client requests for DeFi yield strategies remain caught between regulatory mandates for qualified custodians and technology stacks fundamentally incompatible with traditional custody models.
Summary
Galaxy Asset Management has directly addressed a critical regulatory obstacle limiting registered investment advisers' ability to deploy client capital into decentralized finance. Published on June 18, 2026, the firm's perspective piece—co-authored by venture legal counsel Ian Irlander and legal intern Nora Joyce—identifies and analyzes the structural compliance friction between outdated securities regulations and modern blockchain technology.
The core issue centers on the SEC's Custody Rule (Rule 206(4)-2), a framework established in 1962 that predates blockchain technology by over five decades. The rule mandates that RIAs maintain client funds and securities with "qualified custodians," a category limited to banks, broker-dealers, and certain trust companies. However, when RIAs engage with DeFi protocols, assets move directly onchain through smart contracts governed by protocol rules rather than institutional intermediaries. This creates a structural compliance gap: traditional custody mechanisms cannot operate within decentralized finance infrastructure, yet regulatory requirements still mandate their use.
The SEC attempted to modernize this framework in 2023 through a proposed Safeguarding Rule designed to explicitly extend custody requirements to digital assets. This proposal was never implemented, leaving the original 1962 framework intact and creating ambiguity for RIAs attempting to offer DeFi strategies to clients. The absence of regulatory clarity has effectively locked many advisers out of decentralized finance deployment despite client demand.
Galaxy's analysis highlights multi-party computation (MPC) based key management as a viable technical pathway toward compliance. The firm's work signals the broader institutional investment industry's effort to bridge the gap between regulatory prudence—which the Custody Rule genuinely serves—and technological innovation in asset management. For RIAs, family offices, and institutional investors seeking DeFi exposure, Galaxy's framework offers a starting point for understanding how compliance and decentralized protocols might coexist within existing regulatory boundaries.
The core issue centers on the SEC's Custody Rule (Rule 206(4)-2), a framework established in 1962 that predates blockchain technology by over five decades. The rule mandates that RIAs maintain client funds and securities with "qualified custodians," a category limited to banks, broker-dealers, and certain trust companies. However, when RIAs engage with DeFi protocols, assets move directly onchain through smart contracts governed by protocol rules rather than institutional intermediaries. This creates a structural compliance gap: traditional custody mechanisms cannot operate within decentralized finance infrastructure, yet regulatory requirements still mandate their use.
The SEC attempted to modernize this framework in 2023 through a proposed Safeguarding Rule designed to explicitly extend custody requirements to digital assets. This proposal was never implemented, leaving the original 1962 framework intact and creating ambiguity for RIAs attempting to offer DeFi strategies to clients. The absence of regulatory clarity has effectively locked many advisers out of decentralized finance deployment despite client demand.
Galaxy's analysis highlights multi-party computation (MPC) based key management as a viable technical pathway toward compliance. The firm's work signals the broader institutional investment industry's effort to bridge the gap between regulatory prudence—which the Custody Rule genuinely serves—and technological innovation in asset management. For RIAs, family offices, and institutional investors seeking DeFi exposure, Galaxy's framework offers a starting point for understanding how compliance and decentralized protocols might coexist within existing regulatory boundaries.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.