Permission Was the Bottleneck

Interop Markets tracks how digital infrastructure is being integrated into regulated financial systems. In these notes you won’t find much discussion of price action, narratives, or speculation. Our focus will be on permission, plumbing, and capital movement. The signal lives in corporate disclosures, supervisory authority, settlement rails, and balance sheets.

This first edition examines the quiet regulatory regime shift that turned crypto from an excluded activity into a classifiable financial function and why that change matters more than any market cycle.

In the first eight months of 2025, corporate entities moved $12.5 billion into Bitcoin treasuries, exceeding all of 2024. By year-end, more than 150 U.S. public companies held Bitcoin on their balance sheets. Citi, Deutsche Bank, and U.S. Bank announced 2026 launch timelines for digital asset custody services that had been paused for years.

Over the past 12 to 18 months, the regulatory stance toward crypto infrastructure moved from exclusion to integration. Rather than a single sweeping reform, it emerged through a deliberate sequence of targeted decisions across the Securities and Exchange Commission (SEC), the Office of the Comptroller of the Currency (OCC), and the Commodity Futures Trading Commission (CFTC).

No magic wand was waved, making crypto suddenly legal, but the result is that blockchain-based activities are now classifiable within existing financial frameworks.

Regulators stopped asking whether crypto should exist. They started asking where it fits. That distinction matters more than any individual headline.

On January 23, 2025, the SEC rescinded Staff Accounting Bulletin 121. SAB 121, issued in 2022, required banks and SEC-regulated entities to record customer cryptocurrency holdings as liabilities on their balance sheets at fair value. This triggered capital charges and operational complications that made custody economically infeasible.

The SEC’s new guidance, SAB 122, eliminated this requirement. Customer crypto holdings now receive conventional custodial accounting treatment.

This was a critical bottleneck. For three years, institutional investors expressed demand for crypto exposure. Traditional banks could not provide custody without violating balance-sheet constraints and incurring material capital deductions. Permission was the binding constraint. Not product-market fit. Not demand. Not technology.

Banks had the technology and the customers. They lacked regulatory authorization to deploy it at scale.

Within months, major custody platforms announced 2026 launch timelines. The infrastructure work had been ongoing for years. It lacked only consent.

In March 2025, the OCC issued Interpretive Letter 1183, rescinding the restrictive Letter 1179 from 2021. That earlier guidance required written supervisory non-objection before banks could engage in crypto activities. The new guidance shifted the burden. Banks may now engage in a broad range of digital asset activities (custody, stablecoin operations, participation in blockchain networks) without prior written approval, provided activities are conducted safely and soundly.

In December 2025, the OCC reinforced this stance through Interpretive Letters 1187 and 1188. These explicitly permitted national banks to engage in riskless principal transactions in cryptoassets, to hold limited crypto holdings to pay network fees, and to conduct other formerly ambiguous activities. Each letter narrowed what requires supervisory approval and expanded what banks may do.

In April 2025, the Federal Deposit Insurance Corporation issued revised guidance stating that FDIC-supervised institutions no longer need to notify the agency before engaging in crypto activities, provided they maintain safe and sound operations. This removed a procedural hurdle that had functioned as a de facto brake on adoption.

Two federal laws converted regulatory ambiguity into definition:

• The GENIUS Act (Guiding and Establishing National Innovation for U.S. Stablecoins), signed July 18, 2025, established the first federal framework for payment stablecoins. It defines reserve requirements, issuer eligibility, supervisory structure, and operational standards. Prior to GENIUS, stablecoins existed in regulatory limbo. Banks could not allocate capital to an instrument they could not classify for regulatory reporting or risk-weighted assets.

• The CLARITY Act (Digital Asset Market Clarity Act) separated the regulation of digital assets from the regulation of activities involving them, establishing three categories: digital commodities under CFTC jurisdiction, investment contract assets under SEC jurisdiction, and permitted payment stablecoins under the GENIUS framework.

Institutions cannot allocate meaningful capital to instruments whose regulatory treatment is undefined. GENIUS and CLARITY convert ambiguity into definition. That enables scale.

Regulators did not shift from “crypto is bad” to “crypto is good.” They shifted from categorical exclusion to functional classification. Agencies stopped denying permission and started defining categories into which crypto activities fit.

National banks may custody crypto under Section 24(Seventh) of the National Bank Act, the same authority supporting securities custody. Stablecoins are now a defined category with explicit reserve requirements and supervisory structure. Digital commodities are within the CFTC’s jurisdiction as commodity derivatives.

This reclassification is the regime shift. It is not dramatic. It is not promotional. But it is complete.

Institutions were ready. Regulators were not.

A common misreading of the 2020–2024 period treats institutional crypto adoption as a demand problem. This is inverted. Demand existed. Permission was missing.

A survey by Bank of New York Mellon conducted before the regulatory shift found that 91% of institutional investors expressed interest in investing in tokenized crypto products. A minority already held cryptocurrency in their portfolios, largely through unregulated venues or non-bank custodians because regulated alternatives did not exist.

Crypto-native custodians emerged to fill this gap. Platforms like Anchorage Digital Bank and Fidelity Digital Assets grew not because they were inherently superior to banks, but because they spoke the right language and were the only legally viable option available.

Meanwhile, traditional banks (collectively holding $55.8 trillion in assets under custody as of mid-2025) could not participate. SAB 121 made custody commercially irrational. Capital charges and balance-sheet liabilities transformed what should have been a natural service extension into an unacceptable burden.

In 2025, the circumstances inverted. Institutions did not suddenly develop interest in crypto but regulators finally authorized banks to serve that interest.

The result was capital velocity reflecting pent-up demand finally finding an approved conduit. In the first eight months of 2025, corporate entities moved $12.5 billion into Bitcoin treasuries, exceeding all of 2024. This acceleration did not occur because Bitcoin somehow became more compelling. It occurred because previously prohibited activity became permitted.

By late 2025, more than 150 U.S. public companies held Bitcoin on their balance sheets in one form or another. Corporate entities collectively owned approximately 1.3 million Bitcoin. That’s 6.2% of the asset’s supply at maturity. These are treasury reserve allocations made under fair-value accounting guidance, approved by auditors, and disclosed in SEC filings.

Fewer than 1% of U.S. businesses currently hold Bitcoin and I don’t think all of them should. However, the bottleneck has shifted from permission to education and internal process.

Permission is binary. Either crypto activities are authorized or they are not. The 2024–2025 shift made permission affirmative.

On the other hand, production is non-binary. Banks move through pilots, validation cycles, vendor selection, board approvals, and regulatory examinations. What appears as permission granted becomes a live product only after custody controls, settlement integration, key management, and audit testing are complete.

BNY Mellon and Goldman Sachs announced tokenized money-market fund initiatives in mid-2025. These were not greenfield projects. Development had been underway for years. The announcement marked the convergence of regulatory permission and internal readiness.

JPMorgan launched a tokenized money-market fund in December 2025 using its own capital. The launch was limited by design: restricted investors, narrow asset scope, controlled infrastructure.

These timelines reflect operational reality. Custody and settlement involve other people’s assets. Failure means loss. Institutions cannot move faster than their risk and compliance systems allow.

Institutional adoption follows an operational sequence, not a conceptual one. Each phase builds on the prior infrastructure layer and creates specific implications for different market participants.

Custody and Safekeeping (2025–2026)

Banks launch compliant custody services, beginning with Bitcoin and Ethereum, followed by payment stablecoins. This phase determines which banks capture first-mover advantage in client relationships and which custody technology providers win vendor selection processes.

For institutional investors, this means the end of custody fragmentation. No more split between traditional securities at banks and digital assets at specialized custodians. For crypto-native custodians, this creates competitive pressure from incumbents with existing client relationships and deeper balance sheets.

Treasury and Cash Management (2026)

Corporates adopt stablecoins as reserve assets alongside cash and Treasuries. This will be normal operational diversification of treasury holdings under fair-value accounting. Some might hold Bitcoin, but I’d argue that actually is speculation.

For CFOs, this creates a new category of reserve asset with different volatility, liquidity, and regulatory treatment than traditional instruments. It also forces updated guidance on valuation, impairment, and disclosure.

Settlement and Reconciliation (2026–2027)

Tokenized settlement integrates into cash management systems, reducing cross-border friction. Transactions that currently take days and involve multiple intermediaries compress to hours or minutes with fewer counterparties.

For multinational corporations, this reduces working capital tied up in settlement lag. For correspondent banks, this threatens fee income from cross-border payment services. For settlement infrastructure providers, this creates a race to build interoperability between legacy rails and tokenized systems.

Collateral and Margin (2026–2027)

Digital assets become usable collateral for borrowing and derivatives, unlocking capital efficiency. A hedge fund can post Bitcoin as margin for equity derivatives. A corporate can pledge stablecoins against a credit facility.

For prime brokers, this expands the collateral base and creates operational complexity around custody, valuation, and liquidation procedures. For risk managers, this requires new haircut frameworks and stress testing for digital collateral. For derivatives clearinghouses, this means updating margin systems and default waterfall procedures.

Product Expansion (2027+)

Tokenized funds, on-chain bonds, and blockchain-based private placements emerge only after internal systems stabilize. This phase depends on the infrastructure built in prior phases because you cannot issue tokenized bonds without custody, settlement, and collateral infrastructure already operational.

What should not be expected in 2026–2027 is mass-market consumer crypto from traditional banks or wholesale displacement of legacy rails. Those come later. Some question if they’ll happen at all.

Financial history repeats this pattern. The internet existed long before e-commerce scaled. Electronic trading preceded retail platforms. Programmable settlement existed in wholesale markets before enabling new products.

Digital asset infrastructure is at the same stage. Custody systems, settlement protocols, collateral management, and compliance automation are being hardened. Pilots run in controlled environments. Internal tools become productized gradually.

What appears as “crypto adoption” is infrastructure hardening.

Infrastructure scales through cost reduction and friction removal, not novelty. Telegraph cables replaced messengers and electronic trading replaced floors for the same reason: operational efficiency.

Tokenization reduces settlement time from days to seconds, freeing capital. Smart contracts automate income distribution and collateral management. Shared ledgers reduce reconciliation and audit costs.

McKinsey estimates tokenized bonds could unlock roughly 40% operational efficiency through embedded compliance and streamlined servicing. These are engineering assessments, not speculative projections.

Infrastructure providers capture value before consumer brands do. Clearinghouses, exchanges, and settlement networks historically generated more cumulative value than the products built on them.

Banks that build tokenized settlement internally and later license it create returns before launching retail offerings. This is how infrastructure businesses scale. Pay attention to intangible asset growth.

Public infrastructure providers face expanding addressable markets as institutions participate. Coinbase benefits from regulated bank participation. Settlement-focused networks gain relevance as tokenized flows increase.

Private markets see similar dynamics. Infrastructure-focused venture investments move from regulatory speculation to execution assessment.

Traditional incumbents face pressure to integrate tokenization or risk displacement. The DTCC’s multi-year tokenization pilot will be a critical signal for how quickly legacy systems adapt. I think we’ll see them follow what SWIFT did with ISO 20022 rather than become gradually marginalized by native digital infrastructure.

The shift from exclusion to integration creates new metrics that matter.

• Custody and Settlement: Federally chartered banks offering crypto custody. Assets under regulated custody. Settlement times. Interoperability between traditional and digital platforms.

• Capital Reallocation: Corporate treasury holdings. Institutional allocations via regulated vehicles. Tokenized issuance volume. Cross-border tokenized settlement flows.

• Regulatory Maturity: Stablecoin frameworks by jurisdiction. CFTC-registered digital commodity venues. SEC-compliant tokenization platforms. Interagency custody and collateral guidance.

• Infrastructure Buildout: SWIFT blockchain connectivity. DTCC pilot progress. Digital-asset prime brokerage. Collateral pools accepting tokenized assets.

These metrics are not exciting. They do not predict prices, but will determine whether infrastructure integration is occurring or stalling.

The regulatory shift from exclusion to classification removes one constraint. It does not eliminate risk.

A skeptic might argue this represents regulatory capture. That crypto lobbying manufactured a permissive environment benefiting insiders rather than a genuine assessment of public interest. The concentration of corporate Bitcoin holdings among a small number of entities, combined with rapid legislative movement, could suggest industry influence over policy.

The counter is that regulatory clarity benefits all participants, not just incumbents. Ambiguity created a permission barrier that advantaged those with legal resources to navigate gray areas. Classification creates defined rules that smaller entities can follow. The question is whether the resulting framework is prudent. We won’t spend a lot of time on whether it was influenced.

Permission and infrastructure do not guarantee institutional adoption at scale. Banks may build custody capabilities and discover that demand was overstated, that operational costs exceed revenue, or that client interest remains concentrated in a narrow band of early adopters.

The BNY Mellon survey showing 91% institutional interest predates actual product availability. Expressed interest and capital deployment are different; not to mention how they change with market prices. The gap between pilot programs and production-scale services may reveal that infrastructure readiness does not translate to economic viability.

GENIUS and CLARITY define categories, but they do not resolve all regulatory ambiguity. Cross-border regulatory coordination remains incomplete. The treatment of decentralized protocols under existing securities law is still contested. The interaction between state money-transmission licensing and federal stablecoin frameworks creates jurisdictional complexity.

Institutions operating at scale require near-total certainty. “Mostly clear” is not the same as “fully settled.” A custody bank needs to know not just that custody is permitted, but exactly how every operational scenario (key compromise, protocol fork, chain reorganization, sanctioned addresses) will be treated by supervisors and prosecutors.

A major custody breach at a regulated institution would immediately halt adoption. If a federally chartered bank loses customer crypto assets due to key management failure, operational error, or external attack, the resulting supervisory response could reimpose restrictive requirements.

Similarly, if tokenized settlement systems cannot achieve interoperability with legacy rails, the infrastructure remains siloed. A corporate treasurer cannot move seamlessly between traditional and tokenized assets if doing so requires multiple custody relationships, incompatible systems, and manual reconciliation. Fragmentation would undermine the efficiency gains that justify adoption.

Regulatory regimes shift. A future administration could reinterpret agency authority, reinstate restrictive guidance, or pursue enforcement actions that create new uncertainty. Legislative frameworks can be amended or repealed. What appears as a durable policy change in 2025 could be revised in 2027.

The 2024–2025 shift occurred through agency reinterpretation and narrow legislative action, not comprehensive reform. That means it could be undone through similar mechanisms. Institutions building long-duration infrastructure face the risk that the permission structure changes before investments pay off.

The changes of 2024–2025 are not a bull-market inflection or a regulatory capitulation. They are a functional reorganization of how certain financial activities are classified and supervised.

Permission has been granted. Infrastructure is being built. Capital is beginning to reallocate accordingly.

The next phase will not announce itself loudly. It will appear first in balance sheets, settlement workflows, and collateral systems. Those tracking institutional infrastructure buildout (not narratives) will see it earliest.

That is the signal Interop Markets will follow.