Operational Due Diligence on Digital Asset Funds: What Allocators Test and What They Expect to See

Operational due diligence decides more digital asset allocations than performance does. An investment team can be persuaded by a track record, but the operational due diligence team holds a separate veto and exercises it on evidence rather than explanation. In digital assets it bites harder, because the risks it tests, custody failure and counterparty loss above all, are irreversible once realised. This article reconstructs the exam from the allocator's side: the seven domains tested, the evidence expected in each, and what separates a remediable finding from a structural veto.

Operational due diligence is the one part of the raise a manager fully controls. Returns depend on markets; the ODD outcome is decided months earlier, by whether the controls exist and the evidence is organised. We tell managers to build the pack first and the pitch second. Evan Judd, CFA, Director of CV5 Capital

Executive Summary

The operational exam is knowable and stable. It tests the same seven domains by the same method: documents first, interviews second, independent verification always. What changes in digital assets is the subject matter, not the standard of proof.

• Just over half of traditional hedge funds, 55 per cent, now hold digital asset exposure, against 47 per cent a year earlier, on the Alternative Investment Management Association's seventh annual global crypto hedge fund report of 6 November 2025.
• That survey covered 122 institutional investors and managers, and 71 per cent planned to increase exposure.
• Capital from funds of funds, consultants and institutions arrives with a diligence function that can block an allocation irrespective of the investment case.
• Custody and key management open the file, where prime brokerage would sit for a traditional strategy, because control of keys is the first irreversible risk.
• The classic disqualifying finding is not a weak control but an inconsistency between what the manager describes and what the administrator, auditor or custodian confirms.

The Seven Domains an ODD Team Tests

The capital has institutionalised, and each new investor category brings a diligence function with a veto. Where two credible strategies compete for one allocation, operational quality often decides it, because a track record is a representation about the past while a custody policy and an administrator reconciliation are testable today. Examiners order the domains below by loss experience: custody and counterparty failures have destroyed more digital asset fund value than strategy errors have.

Custody and Key Management

The examiner wants to know which legal entity holds the assets, under which permission, and what happens to client property if that entity fails. The operational questions follow. How keys were generated and by whom. What quorum is required to move value. Who sits in the signer set, and what record exists of each change to it.

Transaction policy is tested the same way. Whitelists, thresholds, delays and dual authorisation are only as good as their enforcement, so examiners ask for the exception report rather than the policy. A policy that has never produced an exception is either unused or unmonitored.

Managers registered with the United States Securities and Exchange Commission face a further line of enquiry. Rule 206(4)-2 under the Investment Advisers Act remains the operative custody rule after the Commission withdrew its 2023 safeguarding proposal on 17 June 2025. Examiners rarely ask for the qualified custodian conclusion alone; they ask how the adviser reached it and when it was last revisited.

Valuation, NAV Independence and the Traceability Test

Independence of the net asset value is close to binary. Either an independent administrator strikes the NAV from its own records, or the manager strikes it and the administrator agrees. The second changes the evidential burden entirely, and few institutional programmes accept it for a first allocation.

Beyond independence the questions are granular. Which venues price which assets. What time convention governs the valuation point, given that digital asset markets do not close. How staked, locked and vesting positions are valued, and who may override the policy.

The recurring test is traceability. An examiner selects one difficult position and follows it from the wallet or exchange account, through the administrator's reconciliation, into the NAV and into the audited accounts. Managers who have never run that trace discover the break while the allocator is watching.

A Cayman structure supplies part of the answer by construction. Audited financial statements and the Fund Annual Return must be filed with the Cayman Islands Monetary Authority within six months of the financial year end, and the audit must be signed by a CIMA approved Cayman Islands audit firm. The operators remain responsible for the accuracy of the return even where a service provider files it.

Counterparty Exposure, Governance and Compliance

Counterparty exposure

The examiner asks for the whole map, not the trading venues alone: exchanges, over the counter desks, lenders, staking providers, bridges and stablecoin issuers. Each needs a limit, an owner and a monitoring cadence. The revealing question is historical: what did the framework do in the last period of stress, and does the board minute record it? A limit structure with no recorded breach suggests nobody measures against it.

Governance and independence

Board composition is checked for genuine independence rather than the label. Examiners read the board pack to see what directors are given, then interview independent directors directly. A director who cannot describe the custody model is a finding against the fund, because the pack failed to inform them. The related question is authority: whether anyone can overrule the founder on a valuation or a movement of assets.

Compliance and financial crime

In a Cayman structure the examiner assumes fluency in the local obligations. Under regulations 3(1) and 33 of the Anti-Money Laundering Regulations, a fund must designate natural persons at managerial level as compliance officer, money laundering reporting officer and deputy reporting officer, and notify CIMA through its regulatory portal. The examiner then wants operating evidence: screening logs, analytics coverage and training records.

How the Examination Actually Runs

A document request and questionnaire arrive first, and the quality of that response determines everything downstream. A review meeting follows, in which the examiner tests whether the people match the paper. The chief operating officer walks through a withdrawal from instruction to settlement, the compliance officer opens an onboarding file, and a director describes the last difficult board decision.

Provider verification runs in parallel and is not a formality. Administrators, auditors and custodians are contacted directly, and any gap between the manager's description and the provider's confirmation is treated seriously. Most gaps are drift rather than dishonesty, which is why descriptions should be re-verified annually.

Consistency is tested across the questionnaire, offering memorandum, deck and provider confirmations at once. The exam is also repeated, because post allocation monitoring re-runs a lighter version each year.

The Regulatory Posture the Exam Assumes

Nothing in operational due diligence is itself a regulatory requirement, since the exam is private ordering by allocators. Regulatory posture still shapes it. A regulated structure answers much of the question set by construction: a registration category, an appointed administrator, an annual audit signed locally, filed returns and appointed financial crime officers. Structures that avoid regulation transfer the burden of proof to the manager.

Managers considering tokenised share classes should expect a further module. From 24 March 2026 the Mutual Funds (Amendment) Act, 2026 and the Private Funds (Amendment) Act, 2026 brought tokenised funds into defined statutory categories. Records of token issuance, transfer and ownership must be securely maintained and made available to CIMA, transfers require the operator's approval under the offering document, and token specific risks must be disclosed. Examiners take those obligations as the baseline.

Building the Standing Evidence Pack

Managers who clear the exam quickly maintain a standing evidence base rather than assembling one per raise. The contents are predictable, which makes the discipline achievable.

• The industry standard questionnaire, kept current rather than rewritten under pressure.
• The governance set: board packs, minutes, conflicts register and engagement terms.
• The custody set: selection memorandum, segregation analysis, wallet policy and exception reports.
• The valuation set: policy, pricing source matrix, reconciliations and committee records.
• The counterparty grid, showing limits, actuals, owners and escalations.
• The compliance set: policies plus evidence they operate, with screening and onboarding samples.
• The resilience set: security policy, response runbook, continuity plan and dated test records.
• Provider engagement letters, verification consents and the latest audited accounts.

Where emerging digital asset managers fail

One owner, a quarterly refresh and version control are enough. Most managers find their first real control gaps while assembling the pack. The recurring failures below are failures of maintenance rather than intent.

• Treating the questionnaire as marketing, so optimistic answers are later contradicted by providers.
• Keeping response and continuity plans that have never been rehearsed, when examiners ask for the test date.
• Letting inconsistency accumulate, such as a deck claiming daily reconciliation done weekly.
• Relying on a provider's name in place of the manager's own controls.
• Concentrating operational knowledge in the founder, so key person risk demonstrates itself.

The CV5 Capital Platform Perspective

CV5 Capital provides institutional fund infrastructure in the Cayman Islands for third party investment managers. It is not the investment manager of any strategy and does not select investments. Funds established as segregated portfolios within CV5 SPC or CV5 Digital SPC inherit the architecture the exam tests: a regulated structure, independent administration and audit, board reporting, and documented custody and valuation policies.

The manager retains the strategy and its own regulatory obligations, and the directors retain their fiduciary duties. What changes is the starting position when the document request arrives, because the evidence base is maintained as a by-product of operating rather than built for the raise.

Key Takeaways

• Build the standing evidence pack before soliciting institutions, appoint an owner and diarise the quarterly refresh.
• Run a mock examination with an outside party, cold, and treat every finding as a preview of the real memo.
• Trace one difficult position from wallet to NAV to audited accounts, and fix the break before an allocator finds it.
• Re-verify your descriptions with the administrator, auditor and custodian annually, because drift is inevitable.
• Remediate material gaps before institutional solicitation rather than during it, because a first impression of a file is rarely revised.

Frequently Asked Questions

What is operational due diligence on a fund?

Operational due diligence is the independent examination of a fund's non-investment risks: custody, valuation, counterparties, governance, compliance, resilience and service providers. It is run by an allocator team able to block an allocation regardless of the investment case, and relies on documentary evidence and direct provider confirmation rather than interviews.

How is operational due diligence different for digital asset funds?

The method is unchanged and the subject matter extends. Custody and key management replace prime brokerage as the opening domain, exposure to exchanges and lenders becomes a standing risk, and on-chain verification supplements asset confirmation. The evidential standard and the veto stay the same.

What evidence should a manager have ready before approaching institutions?

At minimum, a current questionnaire, the custody policy set, the valuation policy with reconciliations, a counterparty limit grid, board packs and minutes, and financial crime policies with evidence of operation. Add a tested continuity plan and the latest audited accounts, each dated, owned and mutually consistent.

Can a fund recover after failing operational due diligence?

Findings classified as remediable are routinely fixed and re-reviewed, and conditional allocations are common. Structural vetoes, such as a NAV that is not independently struck, are rarely reversible within the same fundraise. Material gaps should be closed before institutional solicitation rather than negotiated during it.

Does a Cayman structure shorten operational due diligence?

A regulated Cayman structure answers part of the question set by construction, including registration category, independent administration, an annual audit signed by a CIMA approved local firm, and filed returns. That narrows the examination to matters specific to the strategy, but does not remove it, and the manager must still evidence how each control operates.