Can a DeFi Fund Be Audited? The DeFi Fund Audit Evidence Test

A DeFi fund audit is achievable, and the obstacle is almost never the strategy. It is the absence of an independent route between a protocol position and the party required to verify it. An auditor must evidence existence, ownership, valuation and rights for every position, including those with no address balance. Where the holding arrangement was designed with that in mind, the work is ordinary. Where it was not, the evidence cannot be reconstructed at the year end.

Managers ask whether a DeFi strategy can be audited at all. In our experience the strategy is rarely what decides it. What decides it is whether the wallets, the signing arrangement and the administrator's verification route were designed together, before the first deposit.David Lloyd, Chief Executive Officer at CV5 Capital

Executive Summary

The audit question blocks more on-chain fund launches than the regulatory question does. It is an evidence problem, solvable at the point the wallets are created.

• An auditor tests four assertions for every position: existence, ownership, valuation and rights.
• Lending, pool and staking positions are auditable where the fund proves control of the interacting address.
• The administrator must verify holdings without relying on figures supplied by the manager.
• Positions with no address balance, such as pool shares and unclaimed rewards, are where arrangements fail.
• Some remedies work before the financial year end, and others take effect only next period.

The Short Answer: A DeFi Fund Audit Turns on Three Conditions

Yes, a fund running on-chain strategies can be audited, subject to three conditions. Every position must trace to an address or contract interaction the fund can prove it controls. The administrator must have a verification route independent of the manager's reporting. The rights attaching to each position, including withdrawal, lock-ups and encumbrance, must be documented and testable.

These are evidentiary conditions, not strategy conditions. A lending deposit, a pool position and a staked native asset can each satisfy them. A simple long book held on one key controlled personally by the principal may fail all three.

The obligation the audit satisfies

Under the Mutual Funds Act (2025 Revision), sections 8(1) and 8(2), a registered fund must have its accounts audited annually by an auditor approved by the Cayman Islands Monetary Authority. The audited accounts are filed within six months of the financial year end. The audit obligation applying to a private fund sits in the Private Funds Act (2025 Revision), sections 13(1) and 13(4). Neither Act imposes a local presence requirement. Local sign-off is a CIMA policy requirement which by its own terms applies to private funds.

What an Auditor Tests: Existence, Ownership, Valuation and Rights

Audit procedure over digital assets is not novel in structure. It applies familiar assertions to an asset class where the confirmation letter from a financial institution does not exist. Each demands its own evidence.

Existence asks whether the position was there at the reporting date, answered by a balance or contract state read at a fixed block. Managers over-rely on it, because a visible balance says nothing about who controls it. Ownership asks whether the fund holds the position rather than the manager, and it fails most often.

Rights and obligations ask what the fund can actually do. A staked asset in an unbonding period and a deposit pledged as collateral are different assets in audit terms.

Valuation, the fourth assertion, is a methodology question rather than an evidence question. The mechanics of accounting for staking, yield farming and pool positions and the construction of a valuation policy the board can apply are treated separately.

Who Is the Custodian of Record When Control Is a Set of Keys

Auditors and administrators begin with one question: who is the custodian of record for each asset. In traditional structures it is an institution that confirms holdings directly. On-chain it is whoever controls the private key material, established as documented fact.

Behind a multi-signature arrangement, the fund is the custodian of record and the arrangement itself is the control. The auditor tests the signer inventory, the threshold, who holds each key, and whether any signer sits outside the fund's governance. A threshold the manager can meet alone is not a control. Those decisions are set out in the wallet authority architecture the auditor will test.

Where a custody service or distributed key management provider is used, the custodian of record may be that institution, or it may remain the fund where the provider holds only part of the key material. The distinction determines whether independent confirmation is available, and should be settled before onboarding.

How the Administrator Verifies On-Chain Holdings Independently

An administrator that accepts the manager's reported figures has verified nothing. Independent verification means reaching the position through its own route and reconciling against the manager's records. That route must exist for every venue and protocol the fund touches.

For directly held assets, the fund supplies a complete address list at onboarding, the list is placed under change control, and the administrator queries balances at the agreed valuation point using its own infrastructure. For protocol positions the mechanism is a read against contract state, covering deposit and borrow balances, accrued interest, pending rewards and pool shares. That capability is settled during selection of a digital asset fund administrator, not after appointment.

Verification fails for two recurring reasons. Addresses are added mid-period without notice, so a position exists that the reconciliation never sees. Or the fund transacts somewhere the administrator cannot query, leaving a gap treated as unverified. The path from balances to a struck valuation is described in the route from on-chain balances to net asset value.

Address Attestation and Proof of Control

Showing that an address exists and holds a balance is trivial. Showing that the fund controls it is the work. Proof of control converts a public data point into an asset of the fund.

The standard method is a signed message. A message specified by the auditor is signed by the address and verified against the public key, under observation at or close to the reporting date. Where signing is impractical, a small transfer to an auditor-nominated address serves a similar function.

Both evidence control at a point in time, so an auditor reads them alongside key ceremony records, the signer inventory and the change control log. Some positions cannot sign at all, because a contract holds them rather than a key. There the evidence is the withdrawal path: only the fund's controlled address can withdraw.

Positions With No Address Balance Are Where the Evidence Breaks

The break point is the position that does not appear as a token balance at the fund's address. A claim on pool reserves, a receipt token whose redemption value moves independently of quantity, and a reward accrued but never claimed are all harder than a native asset in a wallet.

Receipt tokens illustrate the problem. Quantity may not change while the entitlement grows, so quantity evidences nothing about value. Other designs adjust quantity and hold redemption value constant. The auditor needs the mechanism documented, because each demands different procedures.

Pool positions add composition drift: the entitlement is a share of reserves at redemption, not the amounts deposited, and the divergence is what the market calls impermanent loss. Unclaimed rewards sit outside the position and must be found through contract reads. Locked, vesting and bridged positions go further, because existence may be evidenced on one network while the entitlement sits on another.

Protocol Risk, Exploits and the Year End Cut Off

On-chain positions accrue continuously while financial statements are struck at a point. Reconciling those facts requires a documented cut-off convention: a specific block height, or the first block at or after a stated time, applied consistently across every network. Without it, balances read minutes apart produce unexplained differences.

The convention belongs in the valuation policy and should be approved before the first period. Auditors test consistency of application as hard as the convention itself. Changing the cut off mid-period without board approval creates work the fund will pay for.

Protocol risk is a measurement and disclosure matter, not a generic risk factor. Where recoverability of a deposit is in doubt at the reporting date, the question is whether the carrying amount should be written down on the evidence then available. Concentration by protocol, contract and network belongs in the notes.

Where a protocol is exploited or paused during the period, three questions arise. What was the position at the cut off, what is the recoverable amount, and is a later development an adjusting or non-adjusting event. Funds documenting the incident contemporaneously answer from records rather than memory.

The Evidence Pack, Declinable Engagements and What to Fix First

The evidence an auditor asks for is an inventory rather than a procedure, and each item has an owner.

• A complete address inventory with the purpose of each address, approved by the board.
• The signer inventory, threshold and key ceremony records.
• Independent balance and contract state reads at the cut-off block.
• Reconciliations between those reads and the manager's records, with breaks resolved.
• Signed message attestations or withdrawal path tests for each material position.
• The board-approved valuation policy, with the cut-off convention and price sources.
• Transaction history exported by address and protocol interaction, not in aggregate.

An engagement becomes declinable when that pack cannot be produced. The causes are consistent: assets inseparable from the principal's own holdings, venues the administrator cannot verify, and address lists that grew with no record of who authorised each addition.

Several of these decisions belong at the fund terms stage. A schedule of permitted protocols and venues, a dealing frequency matched to the exit windows of the positions, address change control in the operating procedures, and redemption terms acknowledging lock-ups all reduce the audit surface. The treatment of protocol-deployed holdings is set out in custody and NAV treatment for staked assets, within the framework of digital asset fund operations.

Key Takeaways

• Fix the cut-off convention, by block height, in the valuation policy before the first period.
• Place the address inventory under board-approved change control on day one, notifying the administrator before use.
• Confirm at administrator selection that verification covers every protocol and venue used.
• Separate fund key material from personal and operating business holdings, and document the separation.
• Record signer inventories, key ceremonies and protocol incidents contemporaneously, because none can be reconstructed.
• Constrain permitted protocols and dealing terms at the fund terms stage, so the evidence chain is designed.

Frequently Asked Questions

Can a DeFi fund be audited at all?

Yes, where the holding arrangement produces independent evidence of existence, ownership and rights for every position. The constraint is rarely the strategy. It is whether an independent verification route exists between protocol and administrator.

Who is the custodian of record when a fund uses a multi-signature wallet?

The fund is, through the signing arrangement itself. The auditor tests the signer inventory, the threshold and whether any signer sits outside the fund's governance. A threshold the manager can meet alone is not a control.

How does an administrator verify on-chain holdings independently?

By querying balances and contract state for the fund's addresses through its own infrastructure at the cut-off block, then reconciling to the manager's records. Manager-reported figures are not verification.

What is address attestation in a fund audit?

It is evidence that the fund controls an address, usually a message specified by the auditor and signed by that address under observation. A transfer to an auditor-nominated address serves the same purpose.

How are unclaimed rewards and pool positions evidenced?

Through contract state reads for the fund's address rather than token balances, because neither appears as a holding. A pool position is a claim on reserves at redemption, not the amounts deposited.

What can still be fixed before the financial year end?

Key separation, disclosure of the full address inventory and restriction of activity to verifiable venues can be applied in the current period. What cannot be created retrospectively is contemporaneous evidence: change control records and key ceremony documentation.