Crypto Custody Due Diligence for Fund Managers

Crypto custody due diligence is the section of an operational review that decides whether a digital asset fund raises institutional capital. The question is no longer which technology a manager uses, but which legal entity holds the assets, under which licence, and what happens to those assets if that entity fails. Allocators now expect a documented selection process, a segregation analysis reviewed by counsel, and evidence that the arrangement has been re-examined since it was put in place. The regulatory position has moved with them: Cayman moved virtual asset custody providers from registration to licensing on 1 April 2025, and United States staff no-action relief followed on 30 September 2025. The European transitional window for crypto-asset service providers closes on 1 July 2026.

Allocators no longer ask managers whether the fund uses a custodian. They ask who selected it, against what criteria, what the segregation analysis said, and when it was last reviewed. Managers who can answer with a document rather than a story clear the custody section of due diligence in one meeting. David Lloyd, Chief Executive Officer at CV5 Capital

Executive Summary

Custody is the one operational decision in a digital asset fund that cannot be corrected after the fact. A poor administrator can be replaced and a weak reporting pack can be rebuilt, but assets moved out of a compromised or insolvent custodian are usually gone. The diligence exercise therefore has to be structured around failure modes rather than product features, and the output has to be a document the fund's directors have approved.

• Custody models differ less in security than in what they protect against: a chartered custodian addresses insolvency and legal title, while key management technology addresses unauthorised signing.
• Segregation is a legal question about the custody agreement and the insolvency law governing it, not an on-chain question about how many wallets exist.
• Custodian insurance programmes typically carry an aggregate limit shared across all clients and exclude losses caused by the client's own compromised credentials.
• Regulatory status now differs sharply by jurisdiction, and the entity on the custody agreement is frequently not the entity carrying the licence.
• Withdrawal governance, meaning approval quorums, allowlists and service levels, is a liquidity term and belongs in the fund's redemption design.
• Cayman regulated funds face express statutory and rule-based obligations on safekeeping, segregation and title verification that apply irrespective of asset class.

What Custody Actually Protects Against

The word custodian is used loosely in digital assets, and the first task in any review is to establish what kind of counterparty is being assessed. Four arrangements dominate, and each answers a different risk. A manager who selects on security alone will frequently choose a model that is technically strong and legally weak.

The distinction that matters is between control risk and estate risk. Control risk is the danger that someone signs a transaction they should not have signed. Estate risk is the danger that, when the counterparty fails, a liquidator treats the fund's assets as the counterparty's property. Key management technology addresses the first. Only legal structure addresses the second.

Most institutional digital asset funds now run a blended model. A regulated custodian holds the reserve, wallet infrastructure handles operational flows, venue balances are capped by exposure limits, and off-venue settlement is used where available. The diligence exercise consequently covers several counterparties rather than one, and the fund's policy has to state which assets sit where and why.

Key Management and Signing Architecture

A manager should be able to explain the key management model to a board without using vendor terminology. The substance sits in three questions: how key material is created, how signing authority is distributed, and how the arrangement recovers from loss.

Generation, distribution and recovery

Establish how keys or key shares are generated, in what environment, and who witnesses the ceremony. Then establish how those shares are distributed across people, devices, facilities and legal entities. A model that splits three shares across three employees of the same firm in the same office concentrates rather than distributes risk. Finally, establish the recovery path. If a share holder resigns, a device is destroyed or a facility becomes inaccessible, the fund needs a tested procedure, not an assurance.

Signing policy as a control

The transaction policy engine is where custody meets fund governance. It should enforce destination allowlists, per-transaction and daily value limits, approval quorums that scale with value, and a separation between the people who initiate trades and the people who approve settlement. The policy should be approved by the fund's directors, not configured informally by the trading desk. Exceptions and policy changes should be reported to the board on a fixed cycle.

Segregation and Bankruptcy Remoteness

The central legal question is simple to state and difficult to answer: if the custodian fails, are the fund's assets part of its estate? The answer turns on the custody agreement, the governing law, and the regulatory regime the custodian sits within. It does not turn on how many on-chain addresses the provider maintains.

Three provisions decide most of the outcome. The first is the characterisation of the relationship, since a custodial or trust relationship produces a very different insolvency result from a debtor and creditor relationship. The second is any right of use, rehypothecation or lending, which is often buried in a schedule and occasionally enabled by default. The third is the sub-custody clause, because the fund's protection is only as strong as the terms on which assets are passed down the chain.

Supervisory expectations in this area are now explicit in several jurisdictions. The New York Department of Financial Services set out its expectations for virtual currency custodians in an industry letter dated 23 January 2023. Custodians are expected to separately account for and segregate customer virtual currency from corporate assets, and to avoid establishing a debtor and creditor relationship. Sub-custody arrangements require departmental approval, and the terms of custody must be disclosed to customers in writing. The September 2025 United States staff relief discussed below is built on the same logic, conditioning relief on segregation from the custodian's own assets and on a written prohibition against lending or pledging without prior written consent.

For a Cayman fund the domestic overlay is separate and applies irrespective of the custodian's own regime. The CIMA Rule on Segregation of Assets was issued in 2020 for both regulated mutual funds and registered private funds. It requires that all financial assets and liabilities of a fund be segregated and accounted for separately from the assets of any of its service providers. Operators must maintain policies and controls to ensure compliance. The rule does not prohibit omnibus client accounts at a custodian or sub-custodian where that is consistent with recognised market practice. Private funds face express statutory obligations in addition. Under the Private Funds Act (2025 Revision), section 17 requires a private fund to appoint a custodian to hold custodial fund assets in segregated accounts and to verify title to other fund assets. That requirement is disapplied where the fund has notified the Authority that a custodian is neither practical nor proportionate, having regard to the nature of the fund and the assets it holds. An administrator or independent third party must then verify title. Section 18 requires cash monitoring by an administrator, custodian, independent third party or the manager where the function is independent or conflicts are disclosed.

Insurance and the Limits of a Headline Number

Custodian insurance is the area where manager expectations and policy reality diverge most sharply. A published programme limit is a statement about the custodian's cover, not a statement about the fund's assets. Four questions resolve most of the ambiguity.

• What is covered. Crime, specie and professional liability policies respond to different events. Cold storage theft, insider fraud, hot wallet compromise and negligent administration are not interchangeable perils.
• Whose loss is covered. Most programmes indemnify the custodian's balance sheet rather than naming clients as insureds. Recovery may therefore depend on the custodian's solvency at the time of loss.
• What the limit means. Programme limits are typically aggregate and shared across the entire client base. A fund holding a small share of a custodian's assets does not hold a proportionate share of the limit as of right.
• What is excluded. Losses arising from compromise of the client's own credentials, from authorised transactions later shown to be fraudulent, and from protocol or smart contract failure are commonly excluded.

The practical conclusion is that the custodian's programme is not the fund's insurance. Managers should read the summary of cover rather than the marketing figure, establish whether the fund can be named or receive a certificate, and consider fund-level cover separately with a specialist broker.

Regulatory Status by Jurisdiction

Regulatory status is now the first screen rather than the last check, and it has to be assessed at the level of the legal entity on the custody agreement. Group structures frequently place the recognised brand in one jurisdiction and the contracting entity in another. The table below states verified positions with their effective dates.

Two consequences follow for managers. Descriptions such as regulation-ready or authorisation pending should be treated as unverified until the licence or authorisation itself is produced. And where a fund has European touchpoints, the relevant deadline is the one adopted by the member state concerned, not the outer limit.

Withdrawal Governance and the Operating Model

Custody arrangements are frequently assessed as though the only event that matters is theft. In practice the more common friction is time. A custodian that requires two business days to release assets, or forty-eight hours to amend an allowlist, has imposed a constraint on the fund's dealing calendar. That constraint should be reflected in the redemption terms and disclosed, rather than discovered during a redemption cycle.

Three workstreams follow signature. The first is configuration of the policy engine against the board-approved wallet policy, including limits, quorums, allowlists and emergency freeze procedures. The second is administrator integration, since the fund's independent administrator needs its own data access to reconcile custodial and on-chain balances to the published net asset value. An arrangement the administrator cannot verify independently is an audit finding in waiting. The third is monitoring, meaning an annual re-review of regulatory status, control reports, insurance and financial condition, minuted at board level, with interim reviews triggered by a change of control or a security incident.

Staking adds a further layer where the strategy uses it. Managers should establish who controls the delegation, how slashing risk is allocated between fund and provider, and whether staked assets remain within the custody arrangement or leave it. United States staff statements on protocol staking dated 29 May 2025 and on liquid staking dated 5 August 2025 have made these mainstream questions rather than specialist ones.

The Diligence Questions an Allocator Will Ask

An operational due diligence team will work through a predictable sequence. A manager who has prepared answers, with documents attached, will normally clear the custody section without a second meeting.

• Which legal entity holds the assets, in which jurisdiction, and under which licence or charter? Produce the licence and the executed custody agreement.
• What does counsel say about segregation and the fund's position on the custodian's insolvency? Produce the written analysis.
• How is signing authority distributed, and what is the tested recovery procedure? Produce the wallet policy and the most recent recovery test record.
• What do the current service organisation control reports say, including the exceptions? Produce the reports under a confidentiality agreement.
• What does the insurance programme actually cover, and what is the fund's position under it? Produce the summary of cover.
• How was this custodian selected, by whom, against what criteria, and when was that decision last reviewed? Produce the selection memorandum and the board minute.
• What is the migration plan if the relationship ends? Produce the exit analysis, including expected timeline.

The recurring failures are equally predictable. Managers diligence the brand rather than the contracting entity. They treat infrastructure as custody. They read the insurance headline rather than the exclusions. They apply rigour to the custodian while leaving a material share of the book in unsegregated venue accounts without limits or monitoring. They select a perfectly sound provider and keep no record of why. And they discover the mechanics of migration only when the relationship has already deteriorated.

Custody Inside a Cayman Platform Structure

CV5 Capital operates a Cayman institutional digital asset fund platform through which third-party investment managers establish and operate their own funds. Funds launch as segregated portfolios within CV5 Digital SPC, a CIMA regulated umbrella structure. CV5 Capital is not the investment manager of any strategy on the platform and does not act as custodian. Custodians are appointed at fund level under their own agreements, and the investment manager retains responsibility for the strategy and for the commercial choice of provider.

What the platform supplies is the institutional wrapper around that choice: a documented selection and annual review process, a board-approved wallet and transaction policy, administrator reconciliation access, and the governance record that allocators expect to inspect. For an emerging manager, that converts custody from the weakest page of the due diligence questionnaire into one of the strongest.

Key Takeaways

• Screen candidate custodians on legal entity, licence and segregation position before comparing technology or pricing.
• Have counsel produce a short written analysis of the fund's position on the custodian's insolvency, and keep it with the fund records.
• Read the summary of insurance cover, not the headline limit, and consider fund-level cover as a separate decision.
• Approve the wallet and transaction policy at board level before any assets move, and configure the provider's policy engine to match it.
• Treat withdrawal service levels as a liquidity input and reflect them in the fund's dealing and redemption terms.
• Record the selection in a custody memorandum approved by the directors, and diarise an annual re-review with a minuted outcome.

Frequently Asked Questions

Does a Cayman digital asset fund have to appoint a custodian?

It depends on the fund's regulatory classification. Under the Private Funds Act (2025 Revision), section 17 requires a registered private fund to appoint a custodian to hold custodial fund assets in segregated accounts and verify title to other assets. That requirement is disapplied where the fund has notified CIMA that a custodian is neither practical nor proportionate. Where no custodian is appointed, an administrator or independent third party must verify title. The CIMA Rule on Segregation of Assets, issued in 2020, applies to both regulated mutual funds and registered private funds.

What is a qualified custodian for digital assets in the United States?

Qualified custodian is a concept under rule 206(4)-2 of the Advisers Act, resting on categories that include banks and savings associations, registered broker-dealers, registered futures commission merchants and certain foreign financial institutions. On 30 September 2025 the SEC's Division of Investment Management issued staff no-action relief permitting registered advisers and registered funds to use state trust companies for crypto asset custody. Conditions include state banking authority authorisation, audited financial statements, a current internal control report, contractual segregation and restrictions on lending. The 2023 proposed safeguarding rule was withdrawn on 12 June 2025 and was never adopted.

Is multi-party computation wallet infrastructure the same as custody?

No. Multi-party computation is a key management technology. It can be operated by a regulated custodian as part of a custody service, or by a manager as self-custody infrastructure. The legal character of the arrangement depends on which entity holds the assets and under what agreement, not on the cryptography used.

Does custodian insurance protect the fund's assets?

Not automatically. Programmes typically indemnify the custodian rather than naming clients as insureds, carry aggregate limits shared across the whole client base, and respond only to defined perils. Exclusions commonly cover losses arising from compromise of the client's own credentials. Managers should obtain the summary of cover and treat fund-level insurance as a separate decision.

How often should a fund re-diligence its custodian?

Annually is the institutional expectation, covering regulatory status, control reports, insurance, financial condition and service performance, with the outcome minuted. A change of control at the provider, a security incident or a material change in licence status should trigger an interim review. Allocators increasingly ask when the last review took place rather than who the custodian is.

What changed for European custody arrangements in 2026?

The transitional period for crypto-asset service providers under the Markets in Crypto-Assets Regulation ends on 1 July 2026, after which national registrations no longer provide a basis to serve European clients. Several member states adopted shorter periods that expired during 2025. A pending authorisation application does not constitute authorisation, so managers with European touchpoints should confirm the provider's actual status rather than accept forward-looking language.