Setting Up a Regulated Offshore Investment Adviser for a DeFi Hedge Fund

An offshore investment adviser for a DeFi hedge fund is a separate entity, commonly a Cayman company, that manages the fund's portfolio or advises separately managed accounts under its own regulatory status. Setting one up turns on four decisions: whether the instruments traded are securities under the Securities Investment Business Act, whether the adviser's control of wallets is a virtual asset service, where the portfolio managers take their decisions, and how protocol, key and onchain record risk is written into the compliance programme and client documents. The registration filing comes last.

DeFi teams often arrive with the strategy built and the entity question open. The entity is rarely just a filing. It is a set of decisions about where the portfolio managers sit, who holds the keys, which protocols the adviser may use and how each of those choices is recorded. When those are settled, the registration follows. When they are not, a registration does not settle them.

David Lloyd, Chief Executive Officer at CV5 Capital

Executive Summary

A Cayman adviser works for a DeFi team when its legal status, wallet architecture and operating location are designed together.

• Under the Securities Investment Business Act, a virtual asset is a security only where it represents, converts into or is a derivative of a Schedule 1 security.
• Perpetual swaps and futures used in basis and hedging trades commonly bring a DeFi adviser into the Act, through the futures and contracts for differences paragraphs of Schedule 1.
• An adviser holding keys to client wallets must test that against the virtual asset custody definition, and custody requires a licence.
• Where the adviser carries on fund management business, investment decisions must be taken in Cayman.
• An offshore adviser does not by itself remove onshore licensing exposure where decision-makers sit elsewhere.

Why a DeFi Team Needs Its Own Adviser Entity

A fund needs an appointed investment manager, and a separately managed account client needs an adviser to contract with. Teams leaving a trading firm, a protocol foundation or a proprietary book commonly have neither. The general case for forming a manager entity alongside a fund, and the choice between Cayman and other offshore centres, is set out in our guide to the offshore fund management company for emerging managers and in setting up an offshore management company alongside a fund launch. This article covers what DeFi changes.

Three things change. Onchain positions take forms the Act's schedule did not anticipate. Trading on a protocol means signing from a wallet rather than sending orders to a broker. And the record of what the adviser did is public, which helps reconciliation but exposes every gap.

Onshore Authorisation or a Cayman Adviser

Onshore regimes differ, so the comparison is structural.

The last row is the easiest to underweight. An offshore adviser settles which entity holds the mandate. It does not settle whether the individuals running the strategy carry on regulated activity where they live and work, which depends on that country's rules and on where decisions are in fact made. Where the portfolio managers sit is a design decision.

Which Cayman Status a DeFi Adviser Lands On

The Securities Investment Business Act regulates dealing in, arranging deals in, managing and advising on securities, as listed in Schedule 2. A portfolio manager manages securities belonging to another person with discretion, so whether the Act applies depends on whether the positions the adviser manages are securities as Schedule 1 defines them, a point developed in our analysis of SIBA registration for a crypto fund manager.

Virtual assets were added to Schedule 1 in 2020 on a narrow basis. Paragraph 14 covers virtual assets that represent or can be converted into a security listed in paragraphs 1 to 13, or that represent a derivative of one. A token that is none of those is not a security merely because it is digital. The derivatives paragraphs are broader. Futures over a commodity or property of any description made for investment purposes, and contracts for differences referencing the value of property of any description, are both in Schedule 1.

A basis or delta-neutral strategy pairing spot holdings with perpetual swaps will commonly bring the adviser inside the Act through the derivatives leg. A spot-only lending or liquidity strategy may sit outside it, but that is a conclusion on the instruments, not a default, and the virtual asset analysis remains.

Where the adviser is inside the Act, the registered person route under paragraph 2 of Schedule 4 is available to a person carrying on securities investment business exclusively for sophisticated persons, high net worth persons, or a company, partnership or trust whose investors are such persons, and which has a registered office or place of business in the Islands serviced by a licensed provider. The Act defines a high net worth person as an individual with net worth of at least CI$800,000 or any person with total assets of at least CI$4,000,000. CIMA must be satisfied that shareholders, directors and senior officers are fit and proper. The Securities Investment Business (Registration and Deregistration) Regulations (2026 Revision) set the registration fee and the annual fee at CI$6,000 each.

Fund Mandate or Separately Managed Accounts

Whether the adviser manages a fund, separately managed accounts or both changes three analyses.

Under the Securities Investment Business Act, every client must fall within the Schedule 4 categories for the registered person route to remain available. A qualifying fund is one client; each separately managed account client must qualify individually, so onboarding becomes part of the adviser's perimeter.

Under the Virtual Asset (Service Providers) Act, the issue is control. A virtual asset custody service is the business of safekeeping or administration of virtual assets, or of the instruments that enable the holder to exercise control over them, and providing custody requires a virtual asset service licence. CIMA's published VASP FAQs state that, from 1 April 2025, entities wishing to provide virtual asset custody services in or from the Cayman Islands apply for a licence. An adviser holding a client's key, or a key share that can move the assets, should expect that to be tested against the custody definition, as our note on why non-custodial is not a regulatory status explains. Section 16 of that Act allows CIMA to waive the licence or registration requirement for a person already supervised by CIMA under another regulatory law, where the virtual asset service does not materially change the nature of its business and existing supervision is sufficient. That is CIMA's decision on the facts.

The third analysis, economic substance, is covered below.

Wallet Control and Signing Authority

In a DeFi fund the transaction is signed from a wallet, so the signing architecture is the control environment. Three models are common: a qualified custodian's wallet with policy-controlled access to approved protocols, a multi-signature or multi-party computation wallet owned by the fund with signers drawn from the fund and the adviser, and, for separately managed accounts, a client-owned wallet with delegated trading rights.

Whatever the model, the documents should answer the same questions. Who owns each wallet. Which keys or key shares the adviser holds, and which the fund, its custodian or the client holds. What signing threshold applies to trades, internal transfers and withdrawals to new addresses. Which rules the policy engine enforces before signing: approved contract addresses, size limits and blocked functions. How signers are added, removed and recovered, and who approves it.

The key separation is between trading and changing the rules. A portfolio manager trades within the policy but cannot alone widen it, whitelist a protocol or change signers. Our analysis of governance for institutional DeFi access explains why custody controls are only half of that framework: the fund board approves protocols and limits, and the wallet policy enforces them.

Protocol Risk Governance Inside the Adviser

A protocol is a counterparty made of code. An approval file commonly records the contracts and chains used, audit history and any exploit record, whether the contracts are upgradeable and who holds the admin or upgrade keys, any timelock on upgrades, the oracle design, liquidity depth and the protocol's governance process.

Approval is not a one-off event. A protocol approved in one quarter can operate under different rules in the next, so the adviser needs to monitor governance proposals and contract upgrades, with a defined response when a change alters the risk.

Two exposures cut across protocols and need their own limits. Stablecoins carry issuer, reserve and redemption risk, and a depeg hits every position in that stablecoin at once. A bridged token is a claim on a bridge contract, not the native asset, so the adviser should record whether each position is native or bridged and limit bridged holdings separately.

Onchain Records, NAV and Audit

The blockchain records what happened but is not a set of books. The administrator and auditor work from records the adviser must produce: a register mapping every wallet address to the fund or client that owns it, transaction hashes linked to trade records, and a fixed valuation point expressed as a time and, where needed, a block height on each chain.

Pool and lending positions need a written valuation basis before they are opened. A pool token is a claim on a changing basket plus accrued fees, a receipt token accrues interest, and reward tokens may trade thinly. Gas, unclaimed rewards and multi-chain positions need a defined treatment agreed with the administrator. For separately managed accounts the same records support client reporting and fees.

Economic Substance: Where Decisions Are Actually Taken

The International Tax Co-operation (Economic Substance) Act defines fund management business as the business of managing securities, as set out in paragraph 3 of Schedule 2 to the Securities Investment Business Act, carried on by an entity licensed or otherwise authorised under that Act, for an investment fund. Three points follow. Managing separately managed accounts is not fund management business, because the client is not an investment fund. Advising without discretion is not managing. And the substance position follows the adviser's securities analysis. Every entity still makes the annual notification. See economic substance for Cayman fund managers on reporting.

Where the adviser carries on fund management business, it must conduct core income generating activities, be directed and managed in Cayman, and have adequate expenditure, presence and qualified personnel there. The Act lists the core income generating activities as taking decisions on the holding and selling of investments, calculating risk and reserves, taking decisions on currency or interest fluctuations and hedging positions, and preparing reports to investors or CIMA, and it states that they must be carried on in the Islands. Directed and managed means board meetings in Cayman at adequate frequency with a quorum present, minutes recording strategic decisions, and records kept in Cayman. The Act allows those activities to be conducted by another person where the adviser can monitor and control them.

The operating model has to reflect this. Hosted execution infrastructure and an office in Cayman support substance, but they do not substitute for investment decisions actually being taken and directed in Cayman. A team deciding trades from another country has not met the test by running its servers in George Town, and it still has the onshore licensing question to answer.

Officers, Directors and the Compliance Programme

A company registered under paragraph 1 or 2 of Schedule 4 is a covered entity under the Directors Registration and Licensing Act, and a person may not act as its director unless registered with CIMA under that Act. The Anti-Money Laundering Regulations require a person carrying out relevant financial business to designate an Anti-Money Laundering Compliance Officer, a Money Laundering Reporting Officer and a deputy, and the registration application asks for the officer's details.

A DeFi adviser's compliance programme covers what the strategy does: protocol approval and monitoring, wallet and signer controls, screening of counterparty addresses where identifiable, personal dealing in tokens the adviser trades, and an incident procedure for an exploit or depeg. The same content flows into the documents. The investment management or account agreement defines permitted protocols and chains, the wallet model and key holders, exposure limits and the valuation basis. The offering document discloses smart contract, oracle, bridge and stablecoin risk specifically.

The order of work:

1. Map every instrument, protocol and mandate against Schedule 1 and the virtual asset service definitions, and record the conclusion.
2. Decide where the portfolio managers sit and decisions are taken, and test the onshore and substance positions on those facts.
3. Incorporate the adviser, appoint and register its directors, and designate its anti-money laundering officers.
4. Register with CIMA where the Act applies, and address any virtual asset licence or waiver question raised by key control.
5. Build the wallet architecture, signing policy, protocol approval file and exposure limits.
6. Reflect those controls in the agreements and the offering document.
7. Onboard venues, custodians and the administrator, and trade only once the adviser's status is in place.

Common Mistakes

• Assuming a spot DeFi strategy is outside the Securities Investment Business Act without analysing the derivatives used to hedge it.
• Holding keys to separately managed account wallets without testing the arrangement against the virtual asset custody definition.
• Treating a Cayman office and Cayman servers as economic substance while investment decisions are taken elsewhere.
• Approving a protocol once and not monitoring its upgrades, admin keys or governance changes.
• Letting the person who trades also change the whitelist or the signer set.

The CV5 Implementation Perspective

CV5 Capital is the Cayman-headquartered institutional fund infrastructure platform for hedge fund and digital asset managers who need to launch quickly, operate properly and satisfy serious investors from day one. It operates CV5 SPC for traditional strategies and CV5 Digital SPC for digital asset strategies, both registered with CIMA under the Mutual Funds Act. Each manager receives a segregated portfolio with an independent board and coordinated fund administration, audit, banking, custody and compliance arrangements. CV5 Capital is not the investment manager of the strategies on its platforms.

For a DeFi team that needs its own adviser, CV5 Capital provides from its offices in Cayman the set-up of the offshore adviser entity and, where the Securities Investment Business Act applies, its registration with CIMA, directors registered with CIMA, compliance officers, administration, hosted execution infrastructure in Cayman with CV5-hosted servers running the adviser's trading and wallet systems, a business-class office suite, and ongoing support so the adviser can meet economic substance. The adviser can manage a fund, including a segregated portfolio on the CV5 digital asset fund platform, or advise separately managed accounts. The adviser's own team makes the investment decisions; CV5 Capital provides the infrastructure around them.

Key Takeaways

• Classify every token, pool position and derivative against Schedule 1 first.
• Treat the derivatives leg of a basis or hedged strategy as the likely route into the Securities Investment Business Act.
• Decide who holds the keys for each fund and account, and test any adviser key control against the virtual asset custody definition.
• Put the portfolio managers and their decisions where the substance and onshore analyses require them to be.
• Write protocol approval, upgrade monitoring, stablecoin and bridge limits into the compliance programme and the client documents.

Frequently Asked Questions

Does a DeFi fund manager need to register with CIMA?

It depends on the instruments. The Securities Investment Business Act applies where the adviser manages securities, and a virtual asset is a security only if it represents, converts into or is a derivative of a security listed in Schedule 1. Futures and contracts for differences over other property are also securities, so DeFi strategies that use perpetual swaps or futures commonly bring the adviser within the Act.

Can a Cayman adviser manage separately managed accounts for DeFi clients?

Yes. A Cayman adviser can manage a fund, advise separately managed accounts, or both. If the adviser relies on the registered person route, each account client must be a sophisticated person or high net worth person as the Act defines them. The adviser must also analyse whether its control over each client's wallet is a virtual asset service.

Does holding the keys to a client's wallet require a virtual asset licence?

The Virtual Asset (Service Providers) Act defines virtual asset custody as the safekeeping or administration of virtual assets or of the instruments that enable control over them, and custody requires a licence. An adviser that holds a client's key or a key share capable of moving the assets should expect that arrangement to be tested against that definition. CIMA may grant a waiver to a person it already supervises.

Does advising separately managed accounts count for Cayman economic substance?

No. The Economic Substance Act defines fund management business as managing securities for an investment fund by an entity licensed or otherwise authorised under the Securities Investment Business Act. Managing separately managed accounts falls outside that category, as does advising without discretion. Every entity still makes the annual economic substance notification, and an adviser that also manages a fund must meet the test for that activity.

Can the portfolio managers stay outside the Cayman Islands?

That choice has two consequences. Where the adviser carries on fund management business, taking decisions on the holding and selling of investments is a core income generating activity that the Economic Substance Act requires to be carried on in Cayman. Separately, portfolio managers working in another country may need to consider whether that country's licensing rules apply to them.

What does SIBA registration cost for a DeFi adviser?

The Securities Investment Business (Registration and Deregistration) Regulations (2026 Revision) set a registration fee of CI$6,000 and an annual fee of CI$6,000, payable to CIMA. Entity formation, registered directors, anti-money laundering officers, office and substance costs are separate and depend on the adviser's facts. Registration is an entry on CIMA's register, not a licence.