Navigating Cryptocurrency Custody: The Critical Role of Off-Chain Data in a Post-SAB 121 Environment

Introduction

The SEC's repeal of Staff Accounting Bulletin (SAB) 121 enables financial institutions to expand into cryptocurrency custody services. While this creates growth opportunities, institutions must address significant risks. Cryptocurrency is still a vehicle for money laundering, terrorist financing, fraud and sanctions evasion. Comprehensive risk management becomes essential as traditional finance enters digital assets.

The Inherent Limitations of On-Chain Analysis

Blockchain transactions alone provide insufficient visibility into participant identities and motivations. Transactional patterns alone are insufficient to understand the broader context of cryptocurrency usage. On-chain data cannot reveal real-world connections to illicit activities, necessitating supplementary analysis.

The Importance of Off-Chain Data

Glacier21 addresses this gap by aggregating information from diverse sources including social platforms, data leaks, code repositories, and sanctions lists. This approach reveals connections and affiliations that are not visible on the blockchain, enabling identification of high-risk entities and compliance verification.

Key Considerations for Post-SAB 121 Compliance

• Enhanced Due Diligence – Incorporate on-chain and off-chain data in risk assessments.
• Continuous Monitoring – Track transactions and detect suspicious activities.
• Regulatory Compliance – Meet AML, KYC, and sanctions requirements.
• Custody Security – Employ multi-signature wallets and cold storage.
• Data Integration – Create unified risk frameworks from diverse sources.

Building Risk Management Frameworks

Institutions should invest in technologies leveraging AI and machine learning for pattern detection while fostering collaborative information-sharing practices.

Conclusion

The SAB 121 repeal presents significant opportunity, but this expansion must be accompanied by a comprehensive understanding of the associated risks and a commitment to robust risk management practices.