What Crypto Fund Custody Evidence Will an Auditor or Administrator Actually Accept?

Three parties test a digital asset fund's custody arrangements, and they test different things. Cayman law fixes only the audit obligation: annual accounts audited by a CIMA-approved auditor and filed within six months of financial year end. The crypto fund custody evidence an auditor will sign against, and the separate evidence an administrator needs before it will price a net asset value, are set by those counterparties rather than the regulator. Acceptance turns on five artefacts built in sequence from day one, because an inventory reconstructed after trading has begun cannot be reconciled backwards. Positions here are current as at August 2026.

Managers spend months optimising a custody arrangement for security and cost, then find that security was never the constraint. The binding gate is the administrator, because an arrangement it cannot observe independently is one it will not price, however lawful and however well controlled.David Lloyd, Chief Executive Officer at CV5 Capital

Executive Summary

The regulatory requirement, the administrator's pricing test and the auditor's existence and ownership test are three separate bars. Most guidance addresses only the first, which is why managers reach onboarding with a compliant arrangement and no evidence pack.

• Cayman legislation imposes an audit and filing obligation, not an evidential standard on the custody arrangement.
• The administrator is the binding gate, because it must observe balances independently before striking a net asset value.
• The five artefacts are the custody agreement, the wallet inventory, address attestation, proof of control signing and the reconciliation evidence pack.
• Proof of control signing evidences control of an address, not exclusive control and not beneficial ownership.

What Crypto Fund Custody Evidence an Auditor Requires, and What an Administrator Requires Instead

What the statute fixes, and what it leaves to the parties

Mutual Funds Act (2025 Revision) section 8(1) requires a regulated mutual fund to have its accounts audited annually by an auditor approved by the Cayman Islands Monetary Authority, and section 8(2) requires filing within six months of financial year end. Private Funds Act (2025 Revision) sections 13(1) and 13(4) impose equivalent obligations on a registered private fund. Neither Act imposes a local presence requirement. Section 8 also governs the administered mutual fund route; it is used here only for the audit obligation.

The Private Funds Act (2025 Revision) separately requires a registered private fund to arrange safekeeping of assets, verification of title to assets not held in custody, and cash monitoring. Those are obligations to have arrangements and keep records, not a specification of evidence. The administrator and the auditor fill that gap, alongside the record-keeping obligations in the Anti-Money Laundering Regulations.

The administrator's test and the auditor's test

An administrator publishes a number that investors subscribe and redeem against, and will not publish it on a manager's assertion. Its test is whether it can see the fund's positions through a channel the manager does not control, at the promised frequency, with a reconciliation trail behind every line. Because that test is continuous, an arrangement that survives one verification exercise can still fail onboarding.

The auditor's question is narrower: whether the assets in the financial statements existed at the reporting date and belonged to the fund. Existence is the easy half, because a balance at an address is publicly observable. Ownership is the hard half, because an address is not a name. The artefact set bridges that gap, and the auditor prefers evidence produced by someone other than the manager.

Whether Cayman law requires an independent custodian

Cayman legislation imposes no single mandatory independent custodian requirement across all fund types; the analysis turns on classification and the arrangements made. That question is covered in whether your fund needs a custodian at all and what qualified custodian means for a crypto fund, and is not developed here.

Artefacts One and Two: The Custody Agreement and the Wallet Inventory

What makes an arrangement unpriceable rather than merely unusual

An administrator reads the agreement for operational answers rather than risk allocation: whether the fund is the contracting party, which assets are in scope, whether independent read access can be granted without the manager's intermediation, the segregation basis, withdrawal and whitelisting controls, reporting cadence, and sub-custody.

An unusual arrangement is one an administrator has not seen often and will question. An unpriceable one is where it has no route to observe the assets except through the manager. Managers assume the objection is to novelty. It is not: a bespoke arrangement with independent read access and clean reporting onboards more easily than a conventional one where every balance arrives as a manager file. Where the fund is a segregated portfolio on shared infrastructure, the inventory must also show which portfolio each address serves, because a commingled balance cannot be allocated after the fact.

What each row contains, and who owns the inventory

The wallet inventory is the fund's authoritative register of every address and account through which it can hold or move value. Each row carries the identifier, the chain or venue, the segregated portfolio, the purpose, the custody model, the signers and threshold, the date it entered service, the approval reference, the latest attestation and proof of control date, and its status.

Additions and retirements are the control point. An address enters by documented approval before it receives value, recording who requested it, who authorised it and on what basis. Retirement records the date, the reason and any residual balance. The manager maintains the inventory, the administrator holds the authoritative copy, and the board approves the policy governing changes, all under the fund's wallet governance policy.

Artefacts Three and Four: Address Attestation and Proof of Control Signing

What an attestation asserts, and what it is worth alone

An address attestation is a formal statement, signed by an authorised officer of the fund or the investment manager, that the inventoried addresses are those through which the fund holds assets, that the fund is beneficially entitled to the balances, and that no other address holds fund assets. It is a completeness assertion as much as an ownership one. Alone it is a representation, the weakest audit evidence available: it records what management says, not what the auditor observed.

What proof of control signing does and does not prove

Proof of control signing pairs the assertion with a demonstration. The holder signs an agreed message with the private key associated with the address, and the receiving party verifies the signature against that address. It shows only that, at the moment of signing, the signer could produce a valid signature. It does not show exclusive control, because it says nothing about who else holds the key, nor beneficial ownership, because control and title are distinct, nor anything about any other date. Managers and allocators overstate all three, which is why the point is worth making to a board before it is made to an auditor.

The methods are a signed message using a nonce supplied by the verifying party, a small test transfer to an address that party nominates, or a report on the arrangement obtained from the provider. The nonce matters: a signature over text the manager chose is far weaker than one over text the auditor specified. Run a full exercise at onboarding, a fresh one on every address addition or signer change, and a complete exercise close to the reporting date.

Artefact Five: The Reconciliation Evidence Pack

The reconciliation evidence pack ties independently observed balances to the fund's books, converting the other four artefacts from documents into a working control. Position and cash reconciliations run daily for a fund striking daily dealing and at minimum monthly for a monthly dealing fund, with a full exercise at each reporting date.

Breaks fall into a few types. Timing differences arise where a transaction is recorded before it settles on chain, and clear by confirmation. Pricing differences arise where the source or snapshot time differs from the valuation policy, and clear by reference to that policy. Quantity differences from unrecorded fees, network costs, rebases or airdrops clear by posting the missing entry. A balance at an address outside the inventory is not a break at all: it is a control failure, and should be escalated rather than cleared quietly.

Independent Verification Before an Administrator Will Strike a NAV

Independence means the balance reaches the administrator without passing through the manager. Three routes achieve that: direct read access, where the administrator holds credentials in its own name; independently sourced chain data, where it queries the inventoried addresses using infrastructure it selects rather than accepting an export; and reporting sent by the arrangement provider straight to the administrator.

A manager-supplied screenshot or balance export is not independent verification and will not serve as the primary record, whatever its accuracy. The path from address to published number is set out in the account of from wallet to NAV.

Venue held balances and off-venue collateral sit outside this pattern, because the fund holds a claim against the venue rather than an asset at a controlled address. Evidence shifts to account title, statement reconciliation and counterparty assessment.

Where Acceptance Breaks Down

Self-custody, multi-signature and threshold arrangements

Self-custody by the fund entity is not an automatic bar to an audit opinion, but it removes the independent party from the chain of evidence, so everything must be demonstrated rather than confirmed. Multi-signature and threshold arrangements need three further records: a signer schedule naming each signer and the capacity in which they act, a threshold record stating the quorum and the policy setting it, and per-signer control evidence. Where the quorum sits entirely with people connected to the manager, the arrangement is evidentially close to self-custody.

Staked, locked and protocol-deployed positions

These break the standard method because the asset is no longer at an address the fund can sign from. Existence is evidenced through protocol state, ownership through the transaction trail from a controlled address. Further records are needed: the deployment transaction, the unbonding path and its timing, the accrual basis for rewards, and the treatment in the valuation policy, covered in custody and NAV treatment of staked assets.

Thin or halted assets, and in-kind subscriptions

Thin, halted or delisted assets are usually an existence question that has become a valuation question, and the answer sits in the valuation policy. In-kind subscriptions received into an address before the inventory records it are the hardest case: the fund has taken title with no approved address, no attestation and no independent observation of receipt. The remedy is procedural: no address receives value before it is approved and recorded.

The Year End: Existence, Ownership and the Six Month Filing Deadline

Accounts must be audited annually by an auditor approved by the Authority and filed within six months of financial year end, under Mutual Funds Act (2025 Revision) sections 8(1) and 8(2) or Private Funds Act (2025 Revision) sections 13(1) and 13(4). The first cycle is set out in the account of the first year audit and filing cycle.

Two points affect who will take the engagement. The approved auditor requirement is that the firm be approved by the Authority, and neither Act imposes a local presence requirement in its own terms. The local sign-off requirement sits in CIMA's Regulatory Policy on Local Audit Sign-Off, which by its own terms applies to private funds; registered mutual funds should not assume the same requirement reaches them. Which applies narrows the field.

At the reporting date the auditor looks for a complete inventory reconciled to the ledger, independent confirmation wherever a third party sits in the arrangement, proof of control against every self-held or threshold-held address, an attestation covering completeness, and a pack with breaks cleared. Where an address cannot be independently confirmed, alternative procedures apply: proof of control close to the reporting date, transaction tracing from a confirmed source, and corroboration from the trade counterparty. If none is available the position becomes a scope matter, and scope matters at a first year end cost time as well as fees. Positions stated here are current as at August 2026.

The Acceptance Matrix and Build Sequence

Build sequence, and when each artefact must exist

The order is fixed by dependency, not preference. Before onboarding, the custody agreement must be executed with the fund as contracting party, the inventory must exist under an approved change control policy, the valuation policy must be agreed, and the verification route tested rather than described.

• At engagement letter stage: custody agreement executed, governance policy board-approved, inventory opened.
• Before onboarding completes: read access tested end to end, valuation policy agreed, first attestation signed.
• Before the first net asset value: first reconciliation completed, proof of control run against every inventoried address.
• Ninety days before financial year end: audit firm engaged, inventory reviewed, stale attestations refreshed, aged breaks cleared.

Read it with the guidance on choosing a digital asset fund administrator and the framework under digital asset fund operations.

Key Takeaways

• Open the wallet inventory before the first address receives value, and treat every addition and retirement as a documented approval event.
• Test the independent verification route end to end during administrator due diligence, rather than accepting a description of it.
• Let the counterparty specify the message and nonce for proof of control signing, and repeat it whenever a signer or address changes.
• Establish which local audit sign-off position applies by reference to CIMA before selecting an audit firm.
• Assemble the reporting date pack ninety days ahead, and escalate any balance outside the inventory as a control failure, not a break.

Frequently Asked Questions

What is a wallet inventory and who maintains it?

It is the fund's register of every address and account through which it can hold or move value, each row recording the identifier, chain or venue, segregated portfolio, purpose, custody model, signers, approval reference and attestation date. The manager maintains it, the administrator treats its copy as the reconciliation record, and the board approves the policy governing changes. It must exist before onboarding, because an inventory built at year end will not reconcile backwards.

Will an administrator accept a screenshot or a manager-supplied balance export?

Not as the primary record. Independence means the balance reaches the administrator without passing through the manager, so the routes are direct read access, chain data it sources itself, or reporting from the arrangement provider. A manager-supplied file may support such a source, never replace it.

What does proof of control signing actually prove?

It proves that the signer could produce a valid signature for the address at that moment. It does not prove exclusive control, because it says nothing about who else holds the key, nor beneficial ownership, because control and title are distinct. It says nothing about any other date, which is why it is repeated near the reporting date.

How are staked or locked positions evidenced?

The asset is no longer at an address the fund can sign from, so existence is evidenced through protocol state and ownership through the transaction trail from a controlled address. Further records are required: the deployment transaction, the unbonding path and its timing, the accrual basis for rewards, and the treatment under the valuation policy.

When must the audited accounts be filed?

Within six months of financial year end, under Mutual Funds Act (2025 Revision) section 8(2) for a regulated mutual fund and Private Funds Act (2025 Revision) section 13(4) for a registered private fund, with the audit required by sections 8(1) and 13(1). Neither Act imposes a local presence requirement. The local sign-off requirement sits in CIMA's Regulatory Policy on Local Audit Sign-Off, which applies by its own terms to private funds, and registered mutual funds should establish the position rather than assume it.