1. Stronger Custody Rules Come Into Effect
Canada’s principal investment regulator has implemented new digital asset custody requirements that take immediate effect, establishing a risk-based framework designed to tighten how crypto assets are held and safeguarded by trading platforms.
2. Preventing a Repeat of QuadrigaCX
The motivation behind the updated rules stems from past failures in the nation’s crypto sector, most notably the 2019 collapse of QuadrigaCX, where poor custody practices left investors unable to access assets. The new framework is structured to address and mitigate those historical vulnerabilities.
3. A Tiered, Risk-Focused Approach
Under the rules, custody expectations vary based on risk profiles. Firms must meet different standards for how they store digital assets, whether through approved third-party custodians or through stringent internal custody systems designed to keep assets secure and segregated.
4. Built-in Flexibility for Innovation
Regulators made clear the framework aims to strike a balance between investor protection and technological innovation. By making the rules adaptable to emerging custody and cybersecurity risks, CIRO intends to remain responsive as markets evolve.
5. Heightened Operational Expectations
The framework emphasizes not just where assets are held but how they are monitored, including governance requirements, clear legal agreements, and regular reporting and audit expectations. These measures are intended to reduce risks stemming from fraud, hacking, and operational breakdowns.
6. Broader Regulatory Evolution in Canada
This initiative builds on Canada’s already cautious approach to digital asset oversight, which includes licensing, registration, and disclosure rules for trading platforms and ongoing policy work on topics like stablecoins and tokenized asset governance.

