The OCC has clarified that national banks and federal savings associations may buy and sell custodial crypto assets at the direction of customers and outsource custody and execution services to third parties, provided appropriate third-party risk management practices are in place. Permitted services include transaction execution, recordkeeping, valuation, and tax reporting.