An established fund manager expanding into digital assets faces a question that rarely has a clean answer on first read: how should custody for the fund's crypto holdings be arranged, and does the current setup hold up under a regulatory exam or a limited partner's due-diligence questionnaire? The wrong answer on custody is not merely an operational inconvenience. It is a structural defect that can invalidate a fund's regulatory authorization, trigger investor redemptions, and – in a cross-border context – expose the manager to liability in jurisdictions the fund never formally touched. This page sets out the regulated basis, the process, the decision points, and the common errors that established operators encounter when they revisit or build out their custody arrangements for digital-asset funds.
Why Custody Is a First-Order Legal Question for Digital-Asset Funds
Custody of digital assets is a regulated activity in every flagship fund domicile, and the legal requirements governing it have tightened materially as major fund regimes have moved to address crypto specifically. A fund that holds tokenized securities, stablecoins, or native digital assets cannot treat its private-key management as a purely operational matter. The applicable regime – whether MiCA in the EU, CIMA's Virtual Asset Service Providers Act in the Cayman Islands, the FSRA framework within ADGM, or the SFC's VASP licensing regime in Hong Kong – treats custody as a distinct regulated function. Performing it without the right counterparty, or against an unapproved structure, puts the fund manager and the vehicle itself in breach.
In our practice, we see established operators arrive at this issue from two directions. Some are traditional alternative investment funds adding a digital-asset sleeve; others are crypto-native operators who grew their AUM quickly and now face institutional investor expectations around custodial safeguarding that a self-custody or exchange-account model cannot meet. Neither profile is unusual. Both require a structured legal response, not a product sheet from a custodian's sales team.
The loss-aversion framing matters here. A fund that selects a custodian without legal analysis of the counterparty's regulated status, its segregation obligations, and the jurisdictional reach of its insolvency protections is not just taking operational risk. It is accepting a structural gap that will surface – at audit, at the next regulatory examination, or when a limited partner's counsel runs the standard infrastructure questionnaire.
Contact OBOLUS to scope your custody analysis before your next LP close or regulatory review. The process above describes the standard path. Your facts – the entity, the asset mix, the investor base, the existing service-provider relationships – change the analysis materially. Map your options.
What the Regulated Basis Actually Requires
The regulated basis for custody in a digital-asset fund context rests on three interlocking requirements: the custodian must hold the right authorization in its home jurisdiction; the fund document must correctly describe the custodial arrangement; and the cross-jurisdictional relationship between the fund domicile and the custodian domicile must be legally coherent.
Under MiCA, a crypto-asset service provider offering custody and administration of crypto-assets for third parties must hold a specific CASP authorization. That authorization passports across the EU and EEA, which matters for a fund domiciled in one member state using a custodian in another. The CASP regime imposes safeguarding obligations – including the segregation of client assets from the custodian's proprietary holdings – that track closely to the existing rules for investment firms under MiFID II. EU-domiciled funds that hold crypto outside a MiCA-authorized CASP are now structurally non-compliant, regardless of what they did pre-MiCA.
In the Cayman Islands, CIMA's VASP regime distinguishes registration from licensing. A custodian providing custody services for fund assets needs to be appropriately categorized. The fund's constitutional documents – the limited partnership agreement or the articles of the Cayman exempted company – should identify the custodian and the basis of its authorization. A mismatch between the offering documents and the actual service-provider structure is one of the most common findings in CIMA examinations of digital-asset funds.
The ADGM framework administered by the FSRA requires that virtual-asset custodians hold a Financial Services Permission in the relevant regulated activity. Funds domiciled in ADGM or using ADGM-based managers must satisfy themselves that the custodian's FSP covers the specific assets held – noting that FSRA maintains a "recognised" virtual-assets list with practical implications for which assets may be held in a regulated custodial context.
In Hong Kong, the SFC's VASP licensing regime for virtual-asset trading platforms includes requirements around the custody of client assets that affect fund managers operating under the SFC's oversight. The BVI Financial Services Commission under the BVI VASP Act 2022 likewise addresses custody. In each of these regimes, the principle is consistent: custody is not incidental infrastructure. It is a regulated activity with its own authorization, capital, and conduct requirements.
How Is the Custody Structure Built for a Digital-Asset Fund?
Building a legally sound custody structure for a digital-asset fund follows a defined sequence, and skipping steps creates the compounding risk that experienced operators know from traditional fund infrastructure – except that on-chain, errors are harder to reverse.
The first step is asset classification. Digital assets held by the fund may be native tokens, tokenized securities, stablecoins classified as e-money tokens or asset-referenced tokens under MiCA, or interests in other on-chain structures. Each class may trigger a different regulatory requirement. A fund that holds what is legally an EMT under MiCA, for example, needs a custodian whose CASP authorization covers that specific asset class. A fund holding tokenized securities may also need to satisfy the depositary rules applicable to the relevant fund vehicle, depending on domicile.
The second step is custodian due diligence on the legal axis. This goes beyond the standard operational due diligence checklist. The fund manager's counsel should review the custodian's authorization document, its segregation model, the contractual basis for recovery in insolvency, and whether the custodian's home-jurisdiction insolvency law gives the fund a proprietary claim or merely an unsecured creditor position over assets held in a pooled structure. This distinction is material. In our cross-border practice, we regularly advise funds that discover – after the custodian relationship is established – that their legal position on the insolvency of the custodian is weaker than they assumed.
The third step is documentation. The custody agreement must reflect the regulatory requirements of the fund domicile, the custodian's home jurisdiction, and the nature of the assets. Standard-form custody agreements issued by custodians are not neutral documents. They are drafted to reflect the custodian's operational model and risk appetite. Fund managers at the established-operator level negotiate these agreements, and the negotiation surface is wider in digital-asset custody than in traditional securities custody, because the technology introduces novel risk allocations – around key management, wallet architecture, on-chain error, and the interaction between smart-contract execution and the custodian's liability scope.
The fourth step is integration with the fund's constitutional documents and offering materials. Offering memoranda and subscription documents for digital-asset funds are increasingly subject to regulatory review by fund domicile authorities. CIMA, FSRA, MFSA, and the Bank of Lithuania (for EU-regulated funds in the MiCA transition) each assess whether the disclosed custody arrangements are legally coherent and consistent with the regulatory framework applicable to the fund.
Decision Matrix: Custody Model by Fund Profile
Not every established operator needs the same custody architecture. The right model turns on the fund's domicile, investor base, asset mix, and AUM trajectory.
A multi-strategy fund domiciled in the Cayman Islands with predominantly institutional US and European limited partners will typically require a qualified custodian arrangement that satisfies both CIMA's expectations and the US Investment Advisers Act requirements that apply to the manager. The custodian must hold appropriate authorization; the agreement must address cross-border asset recovery; and the fund's offering documents must disclose the jurisdictional tension between Cayman custody law and the governing law of the custody agreement. The indicative timeline to establish a compliant structure – from custodian selection to executed custody agreement and updated offering documents – is typically measured in weeks, not days, assuming no structural redesign is required. Key risk: a custodian whose authorization is adequate in one jurisdiction but not in the investor's home jurisdiction.
A digital-asset fund domiciled in ADGM or the DIFC seeking to market to sovereign wealth funds and family offices across the GCC needs a custodian with an FSP that covers the specific assets in the mandate. The FSRA's recognised-assets framework means that novel or emerging token types may need pre-clearance before the fund can hold them in a regulated custodial context. Key risk: onboarding assets that are not yet on the recognised list, creating a structural mismatch that cannot be resolved by contract alone.
A European fund manager establishing a CASP-authorized vehicle under MiCA to offer crypto-asset management services to EU retail and professional investors faces the most granular custody requirements. MiCA's CASP framework applies specific safeguarding rules for client crypto-assets, and the interaction between those rules and the depositary obligations applicable under AIFMD for qualifying funds requires careful layering. Key risk: assuming that a custodian who holds a prior-regime VASP registration is automatically compliant with MiCA's CASP safeguarding requirements.
A crypto-native fund expanding from a BVI or Cayman vehicle to accept institutional capital needs to address the gap between its existing self-custody or exchange-account model and institutional-grade segregated custody. This is not just a commercial upgrade. It is a structural legal change that requires updated constitutional documents, a new or restated custody agreement, AML/KYC re-onboarding with the custodian, and – depending on the manager's home regulator – a regulatory notification or approval. Key risk: treating this transition as a backoffice project rather than a legal and regulatory event.
What Goes Wrong: Common Mistakes Established Operators Make
The most consequential mistakes in digital-asset fund custody arrangements are almost always structural rather than operational, and they are consistently more common among operators who already run a successful fund and assume that what worked at lower AUM or in a pre-MiCA environment will hold up under scrutiny.
The first common mistake is selecting a custodian without verifying the scope of its authorization in the fund's domicile jurisdiction. A custodian may be licensed in one jurisdiction and operate across several others on a cross-border basis. The cross-border basis matters. If the fund is domiciled in a jurisdiction that requires the custodian to hold a local authorization – or where the fund's regulator treats the cross-border provision of custody services as requiring notification or approval – the fund may be operationally functional but legally exposed.
The second common mistake is failing to match the custodial structure to the asset-class breakdown. A custody agreement drafted for Bitcoin and Ethereum holdings may not adequately address custody of tokenized securities, DeFi positions, or staking arrangements. Each of these asset types introduces a different legal characterization question and a different risk allocation in the custody agreement. We have seen custody agreements that are silent on the treatment of staking rewards – which creates an ambiguity about who owns the incremental asset and on what terms.
The third common mistake is misalignment between the custody agreement and the fund's offering documents. Institutional investors expect that the offering memorandum, the limited partnership agreement, and the custody agreement form a coherent legal whole. Where they do not, the investor's counsel flags it, the subscription timeline extends, and in some cases the investor declines to proceed. This is a direct cost to the fund manager at a moment when the cost is most visible.
A fourth mistake is overlooking the Travel Rule. The Travel Rule – the obligation under the FATF Recommendations to pass originator and beneficiary data with a virtual-asset transfer – applies to transfers between the fund and its custodian as well as to investor-level transfers. Custodians subject to the Travel Rule in their home jurisdiction will require their fund clients to be in compliance. Funds that have not implemented Travel Rule processes create friction at the custodian-relationship level that can delay asset transfers and, in some cases, result in the custodian declining to process specific transactions.
If a prior custody structure stalled an LP close or drew a regulatory finding, a second read of the existing arrangement can surface the structural reason. Contact OBOLUS at info@oboluslaw.com to scope a custody review.
Cross-Border Complexity: Where the Fund Domicile Meets the Investor Jurisdiction
The cross-border dimension of custody for digital-asset funds is not a secondary consideration. It is, for most established operators, the primary source of legal complexity. A fund domiciled in Cayman, managed from Singapore or Dubai, with custodians holding assets in Europe and investors across the US, Europe, and the GCC is – from a custody perspective – a multi-jurisdictional legal structure, and every link in that chain carries its own regulatory expectations.
The intersection of the manager's home-regulator requirements and the fund domicile's regulatory framework is the first pressure point. A Singapore-based manager operating under the MAS Payment Services Act framework managing a Cayman-domiciled fund must satisfy both MAS's expectations around the DPT service relationship and CIMA's expectations for the fund vehicle. Where the two regimes impose different requirements on the custodian relationship – in terms of authorization, segregation, or documentation – the manager must find a custody structure that satisfies both, not the more permissive of the two.
The investor's home-jurisdiction law is the second pressure point. US investors, particularly regulated entities such as pension funds and endowments, impose the qualified-custody requirement through the Investment Advisers Act framework. European professional investors are increasingly governed by AIFMD's depositary requirements, which apply directly where the fund is marketed into Europe and the manager is subject to AIFMD or its national-law equivalents. A Cayman fund marketed to European investors without an AIFMD-equivalent depositary arrangement may be legally distributable to those investors only in restricted circumstances.
For funds with GCC investor bases, the ADGM and DIFC investor-protection frameworks impose their own expectations. A fund manager seeking to raise capital from institutional investors in the GCC through a regulated distribution channel in ADGM needs a custody structure that the FSRA would regard as appropriate. The intersection of CIMA's expectations, FSRA's requirements, and the custodian's authorization map is an area where allied counsel in the relevant jurisdictions must work in coordination.
In a recent matter, a fund manager with an existing Cayman vehicle and a Singapore-based management entity sought to expand marketing into the EU and accept subscriptions from German institutional investors. The custody arrangement – a regulated custodian holding assets under a Cayman-law custody agreement – was adequate for the existing investor base but did not satisfy the AIFMD-equivalent requirements that the German investors' counsel identified. We worked with the manager to restructure the custody layer, update the offering documents, and introduce an appropriate depositary arrangement that satisfied both the Cayman regulator and the European investors' requirements. The revised structure was in place before the first German subscription closed.
Self-Assessment Checklist for Established Operators
Established operators reviewing or rebuilding their custody arrangements should be able to answer the following questions cleanly before proceeding to a regulatory examination, a new investor close, or a marketing expansion into a new jurisdiction.
Is the custodian authorized in its home jurisdiction for the specific custody service it provides to the fund – covering the specific asset classes in the fund's mandate? Is the custodian's authorization consistent with the fund domicile's regulatory requirements for the custody of those assets? Does the custody agreement address segregation, insolvency treatment, key management, on-chain error, and the interaction between smart-contract execution and the custodian's liability? Are the offering documents consistent with the actual custody arrangement, and have they been reviewed since the custody agreement was last amended? Has the fund's Travel Rule posture been reviewed in light of the custodian's home-jurisdiction requirements? For funds with European investors, is there an appropriate depositary or equivalent arrangement in place? For funds with US investors, does the arrangement satisfy the qualified-custody analysis applicable to the manager?
A common assumption is that any offshore fund vehicle – Cayman, BVI, ADGM – works equally well as a wrapper for a digital-asset fund and that the custody arrangements can be resolved as a commercial matter between the manager and the custodian. That assumption does not hold. The domicile determines the regulatory requirements that apply to the custody arrangement. The investor base determines additional requirements on top of those. And the asset mix determines the specific scope of authorization that the custodian must hold. The interaction among these three variables is the legal work.
Related at OBOLUS
- Funds & Investment Vehicles for Digital-Asset Businesses – the full practice overview for fund structuring, domicile selection, and regulatory positioning
- Alternative Investment Funds for Digital Assets in the Cayman Islands – structuring, CIMA registration, and custody requirements for Cayman-domiciled digital-asset AIFs
- Smart Contract Disputes: Code, Intent, and the Courts – how courts are resolving disputes where on-chain execution diverges from commercial intent
FAQ
Where should a crypto fund be domiciled?
Domicile selection for a digital-asset fund turns on the investor base, the asset mix, the manager's home jurisdiction, and the regulatory requirements that apply to the fund vehicle and its custody arrangements. The Cayman Islands, ADGM, BVI, and EU member states under MiCA are each viable for specific operator profiles. The wrong domicile creates tax leakage, limits the investor pool, and may impose custody requirements that are misaligned with the fund's operational model. We match domicile to those variables, not to a default offshore preference.
Does a digital-asset fund manager need a licence?
In most leading jurisdictions, yes. The manager of a digital-asset fund will typically require either a specific digital-asset manager authorization or a broader investment-management licence that covers the relevant asset classes. Under MiCA, a manager providing portfolio management of crypto-assets requires CASP authorization. Under MAS's Payment Services Act, DPT service licensing applies to specific activities. In ADGM, the FSRA's Financial Services Permission framework applies. The specific licence required depends on the activity, the assets, and the domicile of both the manager and the fund.
How is custody arranged for a crypto fund?
Custody for a crypto fund is arranged by selecting a custodian that holds the appropriate regulatory authorization in its home jurisdiction for the specific asset classes in the fund's mandate, negotiating a custody agreement that reflects the fund domicile's legal requirements around segregation and asset protection, and ensuring that the arrangement is correctly described in the fund's constitutional documents and offering materials. The custodian's authorization, insolvency treatment, and Travel Rule posture all require legal review before the custody agreement is executed.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise funds, managers, custodians, and investment vehicles on custody structuring, fund domicile selection, and the regulatory requirements that govern digital-asset investment across more than 70 jurisdictions. We match custody architecture to investor base, asset mix, and redemption profile – and we work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications where custody failures give rise to disputes. Digital assets are the whole of our practice. To discuss your custody structure, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Lydia Brennan, Tax & Structuring Analyst – specialising in cross-border fund structuring, custody tax treatment, and the interaction between investment-vehicle domicile and investor-jurisdiction requirements for digital-asset funds.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.