Navigating the Next Wave of Crypto Institutionalization: A Due Diligence Primer

As FTX showed, operators in digital asset markets need to improve corporate governance standards. Here are the critical components as the industry readies for another possible bull run.

Leading financial services institutions in the US are keenly awaiting the SEC’s decision on their Bitcoin ETF applications, with critical deadlines from January to May 2024. The anticipated approval of these ETFs, already influencing Bitcoin’s price with a 26% surge in the last three months, marks a pivotal moment in market evolution.

The crypto sector is drawing attention due to factors like the upcoming Bitcoin halving (due to fall in April 2024), its status as an uncorrelated asset class, the “digital gold” narrative and prevailing macroeconomic conditions.

Bull runs in crypto markets have historically attracted significant interest from institutional investors and financial service providers that work with Virtual Asset Service Providers (VASPs) to offer trading, custody, and structured products, enabling an expansion beyond bitcoin into areas like tokenisation, stablecoins, staking and private equity.

The entry or re-emergence of institutions in this space highlights the need for robust due diligence. A lack of understanding about the unique risks associated with digital assets and their management became evident following the collapse of FTX and findings from the recent trial.

A comprehensive due diligence framework that captures the unique risks in the digital asset space is essential in guiding institutions through this complex landscape. It should include:

1. Governance & Operational Resilience: This involves risk management frameworks and control functions to address board effectiveness, roles, responsibilities, and leadership accountability. Operational resilience covers business continuity, disaster recovery, third-party oversight, and segregation of duties. It also includes understanding the governance and decentralisation of Layer 1 and Layer 2 blockchains, where applicable.
2. Regulatory Compliance: VASPs should implement robust processes for evolving regulations, encompassing KYC/AML controls and crypto intelligence tools, trust structures, client asset segregation, data protection, conflict of interest and ethics.
3. Digital Asset Operations: Prioritising the secure custody of digital assets is crucial. Technology controls should cover key lifecycle management, stablecoin management, staking activities, account management, transaction handling, change management, and an understanding of tokenomics and blockchain technology. Contrary to popular belief, there may need to be more than reviewing a SOC report to address the risks in these business operations.
4. Financial Analysis & Reporting: VASPs should focus on financial metrics beyond traditional assessments, including on-chain reviews for insights into management and transactions, initial distributions, key personnel holdings, and related party transactions. Understanding reserve asset management, customer liabilities, balance sheets, and digital asset encumbrances is vital. Additionally, evaluating accounting treatments and counterparty risks provides a comprehensive view of financial health and exposure. While proof of reserve is gaining momentum, there currently needs to be standards from professional accounting bodies to ensure its sufficiency.
5. Financial Risk Management: Strategies for liquidity risk management, funding strategy assessment, digital asset liquidity and quality, and supporting systems are necessary. VASPs should also have mitigants for financial risk metrics, stress testing for liquidity events, capital management processes, and credit, interest rate, and currency exchange risk frameworks. The presence of an internal audit department is a positive indicator.

Each category in this framework demands thorough exploration to uphold higher standards in managing risks effectively, fostering a more mature and secure crypto industry.

As the crypto market continues to evolve and intersect with traditional financial systems, the importance of these due diligence practices cannot be overstated. They are not just compliance checkboxes but vital tools to safeguard the integrity of the financial market and protect investor interests.

Institutions must move beyond mere participation in the crypto space to becoming informed, responsible actors. This responsible approach is crucial for realising the crypto market’s potential fully, paving the way for sustainable growth and integration into the broader financial landscape.