Digital Asset Funds
Separately Managed Accounts
Legal Risk
Cayman Regulation
The Hidden Legal Risk in SMA Crypto Structures
Separately managed accounts are an attractive proposition for digital asset managers seeking flexibility and for investors who want direct asset ownership rather than pooled fund exposure. But the legal architecture of most crypto SMA arrangements contains structural vulnerabilities that are not apparent from the commercial terms alone, and that become consequential precisely when they are least convenient to discover.
"The SMA conversation in crypto almost always starts with custody and trading access. Those are important. But the questions that matter most in a stress scenario are different ones: who owns the assets as a matter of law, what mandate governs the manager's authority, and what happens to the client if the manager becomes insolvent or acts outside that mandate. Most SMA arrangements in this market cannot answer those questions cleanly."
David Lloyd, Chief Executive Officer of CV5 Capital
What a Crypto SMA Actually Is, and What It Is Not
A separately managed account is an arrangement under which an investment manager trades a portfolio of assets on behalf of a single client, within parameters agreed between the parties, using an account or set of accounts that are designated for that client rather than pooled with other investors' capital. The client retains legal title to the assets. The manager has trading authority but is not the beneficial owner of what it trades.
In traditional asset management, this model is well established and well regulated. The manager operates under a discretionary investment management agreement, the client's assets sit in a custody account at a regulated institution in the client's name, and the legal separation between the manager's own assets and the client's assets is maintained by regulated infrastructure that has been tested through decades of insolvency events and regulatory enforcement.
In the digital asset context, the same commercial intention is frequently implemented through arrangements that lack most of these structural protections. An investment manager may be granted API-level trading access to an account held at a centralised exchange in the manager's name. The client may transfer assets to a wallet controlled by the manager and receive a contractual promise of segregation. The trading mandate may be set out in a term sheet or a brief letter agreement rather than a comprehensive discretionary management agreement with defined scope, exclusions, and governance. Each of these arrangements describes a crypto SMA in commercial terms. None of them delivers what a properly structured SMA actually provides.
The Six Legal Risk Categories That Most Crypto SMAs Ignore
The legal vulnerabilities in crypto SMA structures cluster around six categories. Each can be managed with the right documentation and infrastructure. In practice, most arrangements in this market address none of them fully, and many address none of them at all.
1. Asset Title and Ownership
Where assets are held in the manager's wallet or exchange account, the client may not hold legal title. In an insolvency of the manager, client assets may form part of the manager's estate rather than being recoverable as segregated property.
2. Mandate Scope and Enforceability
Without a comprehensive discretionary management agreement, the boundaries of the manager's trading authority are poorly defined. Actions outside those boundaries may be difficult to challenge or reverse, and the client's recourse may be limited to a damages claim rather than an injunction or asset recovery.
3. Regulatory Status of the Manager
A manager operating a crypto SMA programme may be providing regulated investment services without holding the relevant authorisation. The regulatory consequences of this fall on both the manager and, in some cases, the client, and are not resolved by the parties' contractual arrangements.
4. AML and KYC Obligations
The manager of a crypto SMA has AML/CFT obligations in relation to its client and, where it controls wallets through which client assets move, potentially in relation to the source and destination of those assets. Inadequate AML procedures expose both parties to regulatory risk.
5. Counterparty Risk at Exchange Level
Where the SMA strategy requires assets to be deployed on centralised exchanges, those assets become unsecured creditor claims against the exchange rather than segregated property of the client. The client bears this risk without necessarily understanding its legal character.
6. Governing Law and Dispute Resolution
Many crypto SMA agreements do not specify governing law, jurisdiction, or dispute resolution mechanism. In a cross-border arrangement involving a Cayman manager, a BVI entity, and a European or Asian client, the absence of these provisions creates material uncertainty about where and how disputes are resolved.
The Asset Title Problem: Where It Goes Wrong
The most fundamental legal risk in a crypto SMA is also the one most consistently underestimated. In a correctly structured SMA, the client holds legal title to the assets throughout the life of the arrangement. The manager has authority to trade those assets pursuant to the investment mandate, but that authority does not transfer ownership. If the manager becomes insolvent, the client's assets are not available to the manager's creditors because they are not the manager's assets.
This separation depends entirely on the structural and legal arrangements in place. It does not arise automatically from the commercial intention of the parties. In the digital asset context, the asset title analysis depends on who controls the relevant private keys and in whose name the relevant accounts or wallets are held.
The Manager-Controlled Wallet Problem
Where a client transfers digital assets to a wallet whose private keys are controlled by the manager, the client has, as a matter of on-chain reality, transferred control of those assets to the manager. The legal documentation may characterise this as a custody arrangement in which the manager holds assets as agent or nominee for the client. Whether that characterisation is enforceable in an insolvency depends on the applicable law, the quality of the documentation, and whether the assets can be identified as the client's property rather than the manager's general pool.
Cayman insolvency law, like most common law systems, applies the principle that assets held on trust or as nominee for a third party are not available to the insolvent's general creditors, provided the trust or nominee relationship is sufficiently established by the documentation and the conduct of the parties. Where it is not established clearly, the client becomes an unsecured creditor. For a client whose entire SMA portfolio is held in a manager-controlled wallet, that distinction is the difference between recovering assets and recovering a fraction of a creditor distribution.
The Exchange Account Problem
Where the SMA strategy requires trading on centralised exchanges, and the exchange accounts are held in the manager's name rather than the client's name, the client has no direct relationship with the exchange and no direct claim to the assets held there. The manager's exchange account balance is a claim against the exchange, and the client's entitlement to that claim is governed by the agreement between the client and the manager. If the exchange fails, the client's recovery is mediated through the manager's creditor claim against the exchange estate. If the manager fails at the same time as the exchange, or if the manager's exchange account has been used improperly, the client's position is severely compromised.
The importance of institutional custody as the primary safekeeping arrangement for digital assets, with exchange holdings managed as a counterparty exposure rather than a custody solution, is addressed in detail in the CV5 Capital analysis of digital asset fund custody models. The same principles apply with equal force in the SMA context.
The Mandate Problem: Authority Without Boundaries
A discretionary investment management agreement is not simply a document that gives a manager permission to trade. It is the instrument that defines and limits the manager's authority, specifies the client's investment objectives and risk parameters, establishes the reporting and oversight framework, and creates the contractual basis on which the client can hold the manager accountable for mandate compliance. In the absence of a comprehensive agreement, the manager's authority is undefined, and the client's remedies for conduct outside the intended scope are significantly weakened.
What a Comprehensive Mandate Document Must Cover
For a crypto SMA to be legally robust, the discretionary management agreement must address the following at minimum:
- The investment objective and the specific asset classes, instruments, and protocols within which the manager may invest. Any asset class or instrument not expressly permitted should be treated as outside mandate.
- Concentration limits by asset, exchange, protocol, and counterparty. Without defined limits, the manager has discretion to concentrate the entire portfolio in a single asset or venue, which may not reflect the client's risk tolerance.
- Leverage parameters, including whether leverage is permitted, the maximum permitted level, and the margin facilities through which it may be obtained.
- Permitted exchanges and counterparties. A manager should not have authority to deploy client assets on any exchange or through any counterparty not pre-approved in the agreement or its schedules.
- Reporting obligations, including the frequency and content of performance and portfolio reports, and the client's audit and inspection rights.
- The procedure for the client to issue standing instructions or impose temporary restrictions on trading, and the manager's obligation to comply.
- The termination procedure, including the manager's obligation to liquidate positions and return assets to the client within a defined period, and the treatment of positions that cannot be immediately liquidated.
- The governing law and dispute resolution mechanism, with a clear specification of the jurisdiction whose courts have authority to determine disputes between the parties.
Managers operating crypto SMA programmes who are working from brief term sheets or exchanged emails rather than comprehensive discretionary management agreements are operating without the contractual framework that protects both parties. The absence of defined mandate scope is a risk to the client in normal market conditions and a potential liability for the manager in adverse ones.
The Regulatory Status Problem: Who Is Actually Authorised
Operating a discretionary investment management service, whether through a pooled fund or a separately managed account, constitutes a regulated activity in most jurisdictions. In the Cayman Islands, the management of a client's investment portfolio on a discretionary basis falls within the scope of activities regulated under the Securities Investment Business Act (SIBA). A manager providing this service must hold the appropriate SIBA licence or operate under a recognised exemption.
Many managers offering crypto SMA arrangements have not analysed this question carefully. They may operate through a Cayman entity that was established for a different purpose, or through an entity in a jurisdiction whose regulatory perimeter for digital asset activities has not been definitively established. The regulatory status question is further complicated where the client is located in a jurisdiction with its own regulatory requirements for the provision of investment management services to its residents, which may apply regardless of where the manager is incorporated.
Why This Matters for Both Parties
The regulatory status of the manager affects the enforceability of the arrangement and the recourse available to the client. An investment management agreement entered into by a manager that was not authorised to provide the relevant services may be unenforceable, depending on the applicable law. The client who has paid fees to an unauthorised manager and suffered losses may have claims that would not be available against a properly regulated counterparty. The manager faces regulatory sanction, which in more serious cases includes criminal liability in certain jurisdictions.
For managers who wish to establish a properly regulated SMA programme, the most defensible approach in the Cayman context is to operate through a CIMA-regulated platform that already holds the relevant licences and governance infrastructure. The CV5 Capital hedge fund platform supports SMA programmes under its regulated framework, with each programme operating under documented mandate terms, a compliant manager entity, and the full institutional service provider stack that regulatory and investor expectations require.
The AML Gap: Client Screening Is Not Sufficient
A manager operating a crypto SMA programme has AML/CFT obligations that extend beyond the initial KYC screening of the client. These obligations arise under the Anti-Money Laundering Regulations of the Cayman Islands and, where applicable, under the laws of the client's home jurisdiction, and they are not satisfied by conducting due diligence on the client entity at the outset of the relationship.
Ongoing Transaction Monitoring
Where the manager controls wallets through which client assets flow, the manager has ongoing obligations to monitor transactions for indicators of money laundering or sanctions exposure. This includes screening the on-chain sources of assets deposited into the SMA, monitoring transactions for unusual patterns or high-risk counterparties, and maintaining records sufficient to satisfy a regulatory examination or law enforcement request. These obligations apply regardless of whether the client is a sophisticated institutional investor. They apply to the manager's activity on behalf of that client.
The Commingling Risk
Where a manager operates multiple SMA clients through a shared wallet infrastructure without adequate sub-ledger segregation, and one client's assets are found to have exposure to sanctioned or illicit activity, the manager faces the question of whether the taint propagates to other clients' assets within the same infrastructure. This is not a theoretical concern. It is a practical question that regulators and auditors will ask in any examination of a crypto SMA programme with a shared wallet architecture. The answer depends on the quality of the segregation arrangements, the documentation of those arrangements, and the robustness of the manager's transaction monitoring records.
How a Regulated Cayman Platform Addresses These Risks
Each of the risk categories described above has a documented solution within a properly structured regulatory and legal framework. The challenge for most managers is not that the solutions are unavailable. It is that assembling the full suite of protections independently, from scratch, requires a combination of legal structuring, regulatory engagement, custody negotiation, and compliance infrastructure that is time-consuming and expensive to build for an SMA programme that may begin with a small number of clients.
A CIMA-regulated platform model addresses this by providing the framework within which individual SMA arrangements are documented and operated. The platform holds the relevant regulatory licences, maintains the AML/CFT programme, has established custody and administrator relationships, and provides the standard form legal documentation from which individual client mandates are negotiated. The investment manager operates within that framework, focused on investment decisions and client relationships rather than structural and compliance infrastructure.
Minimum Structural Requirements for a Legally Robust Crypto SMA
- Client assets held at an institutional custodian in the client's name or in a clearly documented nominee arrangement, with the custodian independent of the manager.
- Exchange exposure managed within a documented counterparty risk framework, with maximum exposure limits per venue and a defined review process for exchange counterparty quality.
- A comprehensive discretionary management agreement covering mandate scope, concentration limits, leverage, permitted venues, reporting obligations, termination procedure, governing law, and dispute resolution.
- The investment manager operating through a Cayman entity that holds the relevant SIBA licence or operates under a documented and applicable exemption, with analysis of the regulatory position in the client's home jurisdiction where relevant.
- A documented AML/CFT programme covering initial client KYC, on-chain source of funds screening for asset inflows, ongoing transaction monitoring, and record-keeping to regulatory standard.
- Periodic independent reporting to the client on portfolio valuation and performance, produced by or verified against a source independent of the manager.
Managers considering the SMA model as a route to managing institutional capital should review the CV5 Capital guide to Cayman fund and managed account structures for an overview of the vehicle options, regulatory considerations, and service provider requirements applicable to both fund and SMA formats. The choice between a pooled fund and an SMA programme is not simply a commercial one. It is a legal and regulatory decision with material implications for both the manager and its clients.
What Institutional Clients Are Starting to Ask
The institutional capital base for digital asset management is becoming more sophisticated in its operational and legal due diligence. Family offices, funds of funds, and corporate treasury clients who are evaluating crypto SMA arrangements are increasingly asking questions that were rarely asked two years ago. These include requests for the discretionary management agreement template before signing, questions about the custodian's identity and regulatory status, requests for evidence of the manager's regulatory authorisation, and questions about what happens to client assets if the manager is unable to continue operating.
Managers who cannot answer these questions with documentation, rather than reassurance, will find that the most commercially attractive institutional mandates are closing to them. The legal risk in a crypto SMA is not only a risk to the client. It is a business risk to the manager, whose ability to raise and retain institutional capital depends on being able to demonstrate that its SMA programme is structured to the standard that institutional investors and their advisers require.
For managers evaluating how to bring that standard of structure to their SMA programme, the CV5 Capital digital asset fund and managed account platform provides a regulated, institutionally documented framework within which SMA arrangements can be established and operated without requiring the manager to build the underlying compliance and legal infrastructure from scratch. The FATCA/CRS compliance framework applicable to managed account clients is also addressed as part of the platform's standard onboarding procedures.
Key Takeaways
- Most crypto SMA arrangements are legally deficient in ways that are not visible from the commercial terms. The six principal risk categories are asset title and ownership, mandate enforceability, regulatory status of the manager, AML/CFT compliance, exchange-level counterparty risk, and the absence of governing law and dispute resolution provisions.
- Where client assets are held in a manager-controlled wallet or in the manager's exchange account, the client may not hold legal title. In a manager insolvency, those assets may be available to the manager's general creditors rather than recoverable as segregated client property.
- A discretionary management agreement must define mandate scope, concentration limits, leverage parameters, permitted venues, reporting obligations, and termination procedures in sufficient detail to create enforceable boundaries on the manager's authority. A term sheet or informal letter agreement does not satisfy this requirement.
- Operating a discretionary crypto SMA programme without the relevant regulatory authorisation under SIBA or an applicable exemption exposes the manager to regulatory sanction and may render the management agreement unenforceable, with material consequences for both parties.
- AML/CFT obligations in a crypto SMA programme extend beyond initial KYC to include on-chain source of funds screening for asset inflows and ongoing transaction monitoring. These obligations are not discharged by the sophistication of the client.
- A CIMA-regulated platform model resolves each of these structural deficiencies by providing the regulatory licences, standard form documentation, custody infrastructure, and AML/CFT programme within which individual SMA mandates are established and operated.
Structure Your SMA Programme on a Regulated Foundation
CV5 Capital's CIMA-regulated platform provides investment managers with the legal documentation framework, regulatory infrastructure, custody relationships, and AML/CFT programme needed to operate a crypto SMA programme to institutional standard.
Speak with our team to understand how the CV5 Capital platform supports separately managed account structures and what the onboarding process looks like for your strategy and client base.
Speak with Our Team
This article is produced by CV5 Capital Limited for informational purposes only and does not constitute legal, regulatory, investment, tax, or financial advice. The content reflects general market commentary and the views of CV5 Capital on structural and legal considerations in separately managed account arrangements for digital assets. It does not address the specific legal, regulatory, or tax treatment of any particular SMA arrangement, manager, or client in any jurisdiction. References to legal risk categories and structural requirements are illustrative of institutional best practice and do not constitute a representation that any specific legal outcome will be achieved in any particular case. The regulatory treatment of digital asset investment management activities is subject to ongoing development across multiple jurisdictions, and managers and clients should seek independent professional advice appropriate to their specific circumstances and jurisdiction before entering into any managed account arrangement. CV5 Capital Limited is registered with the Cayman Islands Monetary Authority (CIMA Registration No. 1885380, LEI: 984500C44B2KFE900490).
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)
.svg)