EST · MMXXVI
Home/Services/Funds Investment Vehicles/Custody arrangements for funds: Legal Counsel for Digital-Asset Firms
Funds & Investment Vehicles

Custody arrangements for funds: Legal Counsel for Digital-Asset Firms

Custody arrangements for funds: Legal Counsel for Digital-Asset Firms. Cross-border digital-asset legal counsel for business – licensing, disputes and structuri

For a digital-asset fund manager selecting a custodian, the legal question is not merely operational — it sits at the intersection of fund domicile law, the applicable regulated-activity regime, and the contractual rights of investors who expect their assets to be genuinely segregated and recoverable. Custody of digital assets is a regulated activity in most flagship jurisdictions, including under MiCA (the EU's Markets in Crypto-Assets Regulation), the VARA regime in Dubai, the FSRA framework in Abu Dhabi, and the MAS Payment Services Act in Singapore. Getting the arrangement wrong costs more than a regulatory fine: it can make assets legally unrecoverable in an insolvency and expose the fund manager to personal liability. This page maps the legal basis, the practical process, the cross-border realities, and the common structural mistakes that OBOLUS counsel routinely identifies in fund custody arrangements.

Why Custody of Digital Assets Is a Regulated Activity

In every mature digital-asset regime, holding or controlling client crypto assets on behalf of a fund is a regulated activity, not a back-office function. Under MiCA, custody and administration of crypto-assets for third parties is an explicitly enumerated CASP (Crypto-Asset Service Provider) activity, requiring authorisation from the relevant national competent authority. The same principle applies under VARA in Dubai, where custody is a distinct licensed activity subject to the VARA rulebooks, and under the FSRA framework in Abu Dhabi, where virtual-asset custody carries its own regulated-activity designation.

This matters to a fund manager because the entity that holds the fund's digital assets must itself be properly authorised. An unlicensed custodian arrangement creates two immediate risks. First, the fund may be in breach of its own offering documents, which typically represent that assets are held with regulated, qualified custodians. Second, investors in regulated jurisdictions — particularly professional investors in the EU, the UK, or Singapore — may be unable to invest at all if the fund's custody structure does not satisfy the applicable qualified-custodian standard.

In our practice, we have seen fund managers proceed to investor onboarding with a custodian that held a registration but lacked the full authorisation required by the fund's target investor base. The structural repair required after the first investor query arrived was significantly more expensive than front-end diligence would have been. The lesson is direct: custody legal analysis comes before the offering document, not after it.

The process above describes the standard path. Your facts — the fund domicile, the asset mix, the investor base and the custodian's licence — change the analysis materially. For a scoped assessment of your custody structure before you go to market, contact OBOLUS at Map your options.

Custody legal work for a digital-asset fund spans four connected areas: regulatory due diligence on the custodian, contractual structuring of the custody agreement, investor-protection and segregation analysis, and ongoing compliance with the fund's home-jurisdiction requirements.

Regulatory due diligence means confirming that the proposed custodian holds the right authorisation in the right jurisdiction for the right asset types. A custodian authorised under MiCA to hold fungible tokens may not be authorised for tokenised securities, which typically require a separate financial-instrument custody authorisation. The same custodian operating in a second jurisdiction may hold only a registration-level approval, not a full licence — a distinction that matters when the fund's administrator or auditor applies the qualified-custodian test.

Contractual structuring covers the custody agreement itself: the segregation model (omnibus versus individually segregated accounts), the treatment of hard forks and airdrops, staking and yield-generation rights, the procedure for instructions and authentication, the indemnity and liability cap regime, and the termination and asset-return mechanics. Each of these clauses is a potential investor-protection gap if left on a custodian's standard terms without negotiation.

Segregation analysis is particularly significant for digital assets. Unlike traditional securities held through a depository, the legal title to digital assets is generally defined by on-chain control. A custody agreement that grants the custodian broad discretion to commingle assets creates insolvency risk that is structurally different from the risk in a traditional fund structure. We map the on-chain control model against the contractual terms and the fund's insolvency law to identify that gap before it becomes a dispute.

How Does Fund Domicile Affect Custody Requirements?

The choice of fund domicile directly determines which custody rules apply and which custodians are eligible — making domicile selection and custody selection inseparable decisions. A fund domiciled in a Cayman Islands structure under the CIMA regime operates under different custody expectations than a fund authorised under the MFSA framework in Malta or the FSRA framework in Abu Dhabi's ADGM.

Cayman and BVI structures — common choices for offshore investment vehicles targeting institutional and professional investors — have historically offered significant flexibility in custodian selection, but that flexibility is narrowing. Institutional allocators, particularly those subject to the EU's AIFMD-equivalent requirements or the UK FCA's investment management rules, increasingly impose their own qualified-custodian standards by contract. A Cayman-domiciled fund whose investors are predominantly EU-based professionals must effectively satisfy two custody regimes simultaneously: the Cayman CIMA expectations and whatever standard the investors' own regulators impose.

For funds considering an EU-domiciled vehicle, MiCA and the applicable national CASP framework require the fund or its manager to use an authorised CASP for custody. Passporting under MiCA means a CASP authorised in one EU member state can provide custody services across the EU — a significant practical advantage for managers building a multi-market distribution strategy.

Jurisdictions like Singapore and Hong Kong impose their own standards. Under the MAS Payment Services Act, a Digital Payment Token (DPT) service provider holding assets for clients must meet specific segregation and safeguarding requirements. The SFC in Hong Kong applies similarly prescriptive rules to licensed virtual-asset trading platforms that also provide custody services.

The wrong domicile does not merely create a regulatory inconvenience. It can lock in structural tax leakage, limit which investors can participate, and impose custody rules that are incompatible with the fund's target asset mix. We regularly advise on the domicile decision as an integrated question of custody law, tax efficiency, and investor-base compatibility.

What Does the Custody Arrangement Process Look Like in Practice?

A well-structured custody process for a digital-asset fund runs in five defined stages, each with legal significance. The timeline across all five stages is typically measured in weeks, not months, where the custodian and the fund manager move with focus — though regulatory approval steps on the custodian's side are outside counsel's direct control.

Stage one is custodian identification and regulatory due diligence. Counsel reviews the proposed custodian's regulatory status across every jurisdiction in which the fund will operate or seek investors. This includes verifying the specific activities authorised, the jurisdictions covered, and any material conditions or restrictions on the custodian's licence. Where the custodian operates through allied entities in multiple jurisdictions, the authorisation chain requires separate verification at each link.

Stage two is custody agreement review and negotiation. The starting point is almost always the custodian's standard-form agreement — a document written to protect the custodian, not the fund or its investors. Key negotiation points include the segregation model, the liability cap (particularly for losses arising from private-key compromise, validator failure, or protocol-level events), the authentication and instruction-release procedure, the treatment of income-generating activities such as staking, and the termination mechanics. We track the gap between the custodian's draft and the fund's investor-protection obligations systematically.

Stage three is fund-document integration. The custody arrangement must be accurately reflected in the fund's offering memorandum, subscription documents, and constitutional documents. Mismatches between what the offering document says and what the custody agreement provides are a common source of investor claims and regulatory inquiry. Counsel reconciles the two.

Stage four is AML and onboarding. Most regulated custodians require their own KYC/AML onboarding of the fund entity and sometimes of the fund manager and its UBOs. This step can introduce delay if the fund's corporate structure is multi-layered or if the fund manager is located in a jurisdiction the custodian's compliance team treats as elevated risk. We prepare the custodian onboarding pack in parallel with the agreement negotiation to compress the timeline.

Stage five is operational go-live and ongoing review. This includes confirming the custody agreement is properly executed, confirming the on-chain wallet architecture matches the contractual segregation model, and establishing the periodic review cycle for compliance with the fund's regulatory obligations.

Common Mistakes in Digital-Asset Fund Custody Arrangements

The most consequential mistakes in digital-asset fund custody follow a consistent pattern. Identifying them early is the primary value of front-end legal counsel.

The first mistake is using a custodian selected for operational convenience rather than regulatory fit. A custodian that is excellent for a corporate treasury may lack the fund-specific segregation structure, the reporting obligations, or the authorisation level that a fund's investors and regulator require. The operational relationship does not substitute for regulatory authorisation.

The second mistake is accepting custodian standard terms without negotiation, particularly on liability caps and on the treatment of private-key events. Standard custodian agreements frequently cap liability at the fee paid in the prior quarter — a figure that bears no relationship to the assets under custody. Digital-asset specific risks, including loss through key compromise, validator failures, or smart-contract events, are often excluded entirely.

The third mistake is failing to address hard-fork and airdrop entitlements. When a protocol forks or an airdrop is distributed to holders of record, who receives the new tokens — the custodian or the fund? The answer in most standard agreements is the custodian, unless the fund's counsel explicitly negotiated otherwise. That is a direct wealth transfer from investors to the custodian.

The fourth mistake is a mismatch between the custody arrangement and the fund's stated approach to staking and yield generation. If the fund's offering documents state that staked assets remain in custody, but the custody agreement permits the custodian to re-delegate or rehypothecate those assets, the offering document contains a misrepresentation. We have seen this exact gap trigger investor disputes.

A common assumption is that any established offshore custodian with a reasonable technology stack will satisfy institutional investor standards. It will not. Institutional allocators in the EU, the UK, and Singapore apply specific regulatory tests for qualified custody, and a custodian that passes the operational test may fail the regulatory one. The distinction matters when a sovereign wealth fund or a regulated insurer is making the allocation decision.

Cross-Border Custody Considerations for Multi-Jurisdiction Funds

A digital-asset fund that raises capital across borders — from EU professional investors, US qualified purchasers, and GCC family offices simultaneously — operates under layered custody expectations from each source jurisdiction. Managing those layers is not a compliance exercise; it is a structural design decision made at fund formation.

EU investors subject to AIFMD-equivalent rules expect custody with an authorised CASP under MiCA or a sub-custodian that meets the depositary's delegation standards. The ESMA guidelines on outsourcing and delegation add a further layer: the fund's depositary, if it uses one, must conduct documented due diligence on every sub-custodian in the chain, including the digital-asset custodian. A fund manager who appoints a custodian without depositary-compatible documentation creates a gap in the fund's distribution eligibility into regulated EU channels.

US investors introduce a separate complexity. The SEC's custody rule — applied to investment advisers registered or filing under the applicable regime — imposes its own standards for what constitutes a qualified custodian. Digital assets held with an offshore CASP-authorised custodian may not satisfy that test without additional structural steps. We coordinate with allied counsel in the relevant jurisdiction to map US-specific custody requirements without the US analysis driving the entire structure at the expense of the majority investor base.

For funds in the GCC region, VARA in Dubai and the FSRA in Abu Dhabi each have custody-specific expectations. A fund manager operating from the DIFC or from onshore Dubai faces different obligations, and a custody arrangement that works for one regulatory perimeter may not work for the other. We have seen fund managers attempt to use a single global custody agreement across multiple GCC entities, only to discover that one entity's regulatory posture required a materially different contractual structure.

If a prior fund structure stalled at investor onboarding or a custody arrangement was rejected by a prospective institutional allocator, a structured review can identify the gap and the route forward. Contact OBOLUS at Map your options.

Decision Matrix: Matching Custody Structure to Fund Profile

The right custody structure depends on the fund's domicile, asset mix, investor base, and the manager's own regulatory status. The following profiles describe the decision logic we apply in practice.

Profile A — Offshore closed-end fund, institutional investors only, no EU distribution. A Cayman Islands or BVI structure with a custodian holding CIMA or BVI FSC recognition may be sufficient. The key variable is the investors' own regulatory requirements. Pension fund investors often impose qualified-custodian standards by side letter that are more demanding than the fund's home-jurisdiction rule. Custody counsel must review the side-letter obligations alongside the fund documents.

Profile B — EU-facing fund or manager, MiCA-jurisdiction domicile. A CASP-authorised custodian in an EU member state is the baseline requirement. Passporting under MiCA reduces operational complexity. The depositary model adds cost but enables distribution through regulated EU channels. The timeline from custodian identification to go-live in this profile is typically longer than in the offshore model, because the custodian's own authorisation process under MiCA introduces lead time that is outside the fund manager's control.

Profile C — Asia-Pacific fund, MAS or SFC regulated manager. Singapore-based funds using a licensed DPT service provider for custody must meet MAS safeguarding requirements. Hong Kong-based structures sit within the SFC's VASP licensing regime. In both cases, the custody agreement must reflect the local regulator's specific expectations, which differ in important respects from European and offshore standards. A fund manager running parallel Singapore and Hong Kong structures must maintain two custody agreements that are compatible but not identical.

Profile D — Multi-jurisdiction fund raising across EU, GCC, and Asia-Pacific simultaneously. This profile requires a primary custody arrangement designed around the most demanding applicable standard, supplemented by sub-custody or mirror arrangements in secondary jurisdictions. The depositary model, where applicable, provides the delegation framework to manage the chain. Legal counsel must map each investor cluster to the applicable custody standard before the offering document is finalised.

How a Custody Arrangement Dispute Was Resolved Before It Reached Litigation

In a recent matter involving a digital-asset fund manager, a prospective anchor investor — an EU-regulated insurance vehicle — raised a qualified-custodian objection during due diligence. The fund's existing custody agreement, negotiated on the custodian's standard terms, did not satisfy the investor's internal segregation standard, and the liability cap was commercially unacceptable for an allocation of the proposed scale. The manager faced losing the anchor commitment entirely. We reviewed the custody agreement, identified the specific structural gaps against the investor's stated requirements, and negotiated amendments with the custodian on an expedited basis. The revised agreement met the investor's qualified-custodian standard. The subscription completed in the same fundraise cycle, and the fund went on to close at its target size.

Related at OBOLUS

FAQ

Where should a crypto fund be domiciled?

Domicile depends on the investor base, the asset mix, the fund manager's own regulatory status, and the target distribution channels. Cayman Islands and BVI structures remain common for institutional offshore funds. EU-facing funds increasingly require an EU-domiciled vehicle to access MiCA-authorised custodians and regulated distribution. GCC-based managers may find Abu Dhabi's ADGM or Dubai's VARA environment better matched to their investor profile. There is no universal answer: domicile is a decision matrix, not a default.

Does a digital-asset fund manager need a licence?

In most flagship jurisdictions, yes. Managing a fund that holds digital assets as a regulated activity — whether under MiCA as a CASP, under the MAS Payment Services Act, or under the SFC's VASP regime — requires the manager to hold the applicable authorisation or to operate within an exemption. The precise threshold varies by jurisdiction and by the nature of the assets managed. Operating without the right authorisation while marketing to investors in regulated jurisdictions creates personal liability for the manager and distribution risk for the fund.

How is custody arranged for a crypto fund?

Custody for a digital-asset fund is arranged through a regulated custodian that holds the applicable authorisation in the fund's home jurisdiction and in any investor jurisdiction that imposes its own qualified-custodian standard. The process involves regulatory due diligence on the custodian, negotiation of the custody agreement (particularly on segregation, liability, and fork/airdrop treatment), integration with the fund's offering documents, and AML onboarding with the custodian. The operational arrangement must be consistent with the on-chain wallet architecture to ensure the contractual and the technical segregation models align.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We match fund domicile to investor base, asset mix and redemption profile — and our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums when custody arrangements break down. To discuss your situation, contact info@oboluslaw.com.

By Lydia Brennan, Tax & Structuring Analyst — specialising in fund structuring, cross-border tax analysis and custody arrangements for digital-asset investment vehicles.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.

Tell us the task — we'll map your options in 30 minutes.

Fixed-fee packages with defined scope and SLAs. The first call is free and under NDA. Business clients only.

Map your optionsinfo@oboluslaw.com · t.me/oboluslaw · reply < 2 hours