Share this article

Navigating the Next Wave of Crypto Institutionalization: A Due Diligence Primer

As FTX showed, operators in digital asset markets need to improve corporate governance standards. Here are the key components as the industry readies for another possible bull run.

(Silas Baisch/Unsplash)
(Silas Baisch/Unsplash)

Leading financial services institutions in the US are keenly awaiting the SEC's decision on their Bitcoin ETF applications, with critical deadlines from January to May 2024. The anticipated approval of these ETFs, already influencing Bitcoin’s price with a 26% surge in the last three months, marks a pivotal moment in market evolution.

Source: Coindesk - Nov 13, 2023
Source: Coindesk - Nov 13, 2023
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

The crypto sector is drawing attention due to factors like the upcoming Bitcoin halving (which is due to fall in April 2024), its status as an uncorrelated asset class, the “digital gold” narrative and prevailing macroeconomic conditions.

Bull runs in crypto markets have historically attracted significant interest from institutional investors and financial service providers that work with Virtual Asset Service Providers (VASPs) to offer trading, custody, and structured products, enabling an expansion beyond bitcoin into areas like tokenization, stablecoins, staking and private equity.

You’re reading Crypto Long & Short, our weekly newsletter featuring insights, news and analysis for the professional investor. Sign up here to get it in your inbox every Wednesday.

The entry or re-emergence of institutions in this space highlights the need for robust due diligence. A lack of understanding about the unique risks associated with digital assets and their management became evident following the collapse of FTX and findings from the recent trial.

A comprehensive due diligence framework that captures the unique risks in digital asset space is essential in guiding institutions through this complex landscape. It should include:

  • Governance & Operational Resilience: This involves risk management frameworks and control functions to address board effectiveness, roles, responsibilities, and leadership accountability. Operational resilience covers business continuity, disaster recovery, third-party oversight, and segregation of duties. It also includes understanding the governance and decentralization of Layer 1 and Layer 2 blockchains, where applicable.
  • Regulatory Compliance: VASPs should implement robust processes for evolving regulations, encompassing KYC/AML controls and crypto intelligence tools, trust structures, client asset segregation, data protection, conflict of interest and ethics.
  • Digital Asset Operations: Prioritizing the secure custody of digital assets is crucial. Technology controls should cover key lifecycle management, stablecoin management, staking activities, account management, transaction handling, change management, and an understanding of tokenomics and blockchain technology. Contrary to popular belief, reviewing a SOC report may not be sufficient to address the risks in these business operations.
  • Financial Analysis & Reporting: VASPs should focus on financial metrics beyond traditional assessments, including on-chain reviews for insights into management and transactions, initial distributions, key personnel holdings, and related party transactions. Understanding reserve asset management, customer liabilities, balance sheets, and digital asset encumbrances is vital. Additionally, evaluating accounting treatments and counterparty risks provides a comprehensive view of financial health and exposure. While proof of reserve is gaining momentum, there are currently no standards from professional accounting bodies to ensure its sufficiency.
  • Financial Risk Management: Strategies for liquidity risk management, funding strategy assessment, digital asset liquidity and quality, and supporting systems are necessary. VASPs should also have mitigants for financial risk metrics, stress testing for liquidity events, capital management processes, and frameworks for credit, interest rate, and currency exchange risk. The presence of an internal audit department is a positive indicator.

Each category in this framework demands thorough exploration to uphold higher standards in managing risks effectively, fostering a more matured and secure crypto industry.

As the crypto market continues to evolve and intersect with traditional financial systems, the importance of these due diligence practices cannot be overstated. They are not just compliance checkboxes but vital tools to safeguard the integrity of the financial market and protect investor interests.

It's imperative for institutions to move beyond mere participation in the crypto space to becoming informed, responsible actors. This responsible approach is crucial for ensuring that the crypto market's potential is fully realized, paving the way for its sustainable growth and integration into the broader financial landscape.

All views are personal.

Note: The views expressed in this column are those of the author and do not necessarily reflect those of CoinDesk, Inc. or its owners and affiliates.

Kunal Bhasin

Kunal Bhasin is a Partner and Co-Leader for KPMG Canada’s Crypto-assets and Blockchain practice. He has been involved in the blockchain and crypto space since 2015 and continues to work with the community, regulators, as well as financial services and institutional investors in both the traditional finance and crypto space globally on educating and enabling the digital asset strategy for these institutions. He has led many due diligence, risk and regulatory compliance assessments, and technology audits for digital asset clients. Kunal sits on the board of Canadian Blockchain Consortium and chairs its Virtual Asset Service & Technology Provider (VASTP) Committee, where he brings leaders together to address key challenges faced by the industry.

Kunal Bhasin