Key Takeaways

• A crypto fund is audited under the same standards as any other fund: U.S. GAAS for the audit and U.S. GAAP for the financial statements.
• The rule behind the audit sets the deadline: 120 days after year-end under the SEC custody rule, 90 days for a registered CPO.
• The audit starts with a complete list of every wallet, exchange account, and custodian the fund used during the year.
• Auditors prove control by confirming balances with custodians and having the fund sign messages from its own wallets.
• Each token is priced at fair value under ASC 820, using a principal market and a cutoff time set before year-end.

One of the more entertaining arguments we hear about crypto funds is that the blockchain makes audits unnecessary. Everything’s public, every transaction is recorded, and anyone can check the numbers. Sounds great. We’d happily take a few weeks back every March if it worked that way.

But say your fund is holding 40 bitcoin on December 31. We can pull up the wallet and see them sitting there. Great. Now prove the wallet belongs to your fund, nobody else has a claim on those coins, and the rest of your portfolio is worth what you’re telling investors it’s worth. Good luck getting all that from a blockchain explorer.

We’ve spent decades auditing hedge funds and commodity pools, and crypto hasn’t rewritten the rules of an audit. It’s just given us some new places to look and a few more ways for things to get complicated.

Even the SEC’s October 1 custody proposal doesn’t change your 2026 obligations. So let’s walk through the five steps of auditing a digital asset fund, including what we’ll be asking your team to produce and why.

Step 1: Pin Down Your Audit Deadline

Before we start tracing wallets and figuring out who controls what, we need to know how much time we’ve got. Your regulator decides that, and holding crypto doesn’t buy you any extra.

If you’re an SEC-registered adviser using the custody rule’s annual audit provision, investors generally need audited financials within 120 days of year-end. That’s April 30 for a calendar-year fund, and your auditor must be PCAOB-registered and subject to inspection. Otherwise, surprise custody examination requirements may apply.

Registered commodity pool operators have a tighter clock. CFTC Rule 4.22 generally gives you 90 days to deliver audited annual reports to investors and the NFA. That’s March 31.

Subject to both? We’re working toward March 31. And to have any hope of meeting it, we first need to figure out exactly where your crypto is sitting.

Step 2: List Everything the Fund Holds

Now comes the part that can consume a surprising amount of your audit calendar: figuring out exactly where all your crypto went.

We’ll need every wallet address, exchange account, custodian, and DeFi protocol your fund used during the year, along with who’s authorized to move the assets. And we won’t just take your spreadsheet’s word for it. We’ll trace transactions on-chain, follow transfers between wallets, and check whether anything’s been left off the list.

You’d be surprised how often a forgotten wallet can hold up an otherwise straightforward audit. Spending an afternoon sorting this out in November beats discovering it in March.

We’re also looking for things your trade reports might miss, like staking rewards, airdrops, and tokens you’ve lent out. Those lending arrangements can get particularly challenging when it comes to ownership, which is where the AICPA’s digital asset guidance comes into play.

Step 3: Prove the Fund Controls Its Crypto

Once we know where everything is, we prove the fund controls it. In crypto, whoever holds the keys owns the coins, so this step gets the most attention.

If your assets are sitting with a custodian, it’s fairly straightforward. We’ll confirm the balances directly, much like we would with a bank, and review its SOC 1 report to see whether its controls held up throughout the year.

Things get more interesting when your fund holds its own keys. We’ll ask you to sign a message from each wallet or make a small test transfer, walk us through who can authorize transactions, and reconcile the balances against your books.

SEC-registered advisers generally need qualified custodians for client funds and securities, subject to exceptions. Even when the rule doesn’t apply, we’d recommend using one. It saves everyone a headache during the audit and gives investors more confidence in how their assets are protected.

Step 4: Price Every Token at Year-End

With control proven, we test what the crypto was worth. Your fund carries it at fair value, so we check every token’s price as of year-end.

Two things matter here: which market you’re using and when you’re taking the price. Your principal market is generally the highest-volume exchange your fund can access, but timing gets interesting when crypto trades around the clock. A transaction at 9 p.m. Eastern on December 31 is already January 1 on the blockchain. We want your cutoff policy documented before year-end, so we’re not arguing about it in March.

Bitcoin and Ether are usually easy enough to price. Locked, vesting, or thinly traded tokens are where we spend more time, especially when valuations depend on models. We’ll examine the assumptions and supporting evidence, because as SEC staff put it, auditors “should not accept less than persuasive evidence.”

Step 5: Sign Off and Deliver on Time

Now that we’ve settled the valuations, we’re ready to wrap up the audit. But we’re not finished until we’ve signed our opinion and your financial statements are delivered. That’s generally March 31 for calendar year CPOs and April 30 under the SEC custody rule.

We’ve found that funds meeting those deadlines without a last-minute headache usually have their paperwork ready before we come asking. We’re talking wallet lists, custodian SOC 1 reports and bridge letters, written pricing policies, monthly blockchain reconciliations, and records of staking, airdrops, and lending, alongside the usual audit documents.

And there’s good reason to get everything squared away early. Your investors’ K-1s depend on those numbers, while NFA members should expect examiners to review many of the same records. Especially now that NFA’s crypto rule extends beyond bitcoin and ether.

Your 2026 Crypto Fund Audit Starts Now

The crypto part of a crypto fund audit is mostly preparation. Get the wallet list right, write down your pricing policy, collect your custodian’s reports, and reconcile to the blockchain monthly, and the five steps above become routine. Our 2026 audit checklist covers the rest.

The same records pay off with regulators. The SEC’s 2027 exam priorities flag advisers that start advising on new asset classes, and an examiner will want to see the same wallet list we do.

Michael Coglianese, CPA, P.C. has audited alternative investment funds for more than three decades. Michael himself ran compliance and financial audits at the NFA before he founded the firm, and our bench includes former SEC, NFA, and PCAOB staff along with Big Four alumni, so we read a file the way a regulator will.

Not to mention, we’re PCAOB-registered and handle the audit, the NFA filings, and the K-1s for crypto funds, traders, and miners under one roof, with a partner you can reach and a fee sized to your fund.

If your fund will hold crypto on December 31, talk to an expert now, while there’s still time to get that wallet list right.

Frequently Asked Questions

Does a Crypto Fund Need a PCAOB-Registered Auditor?

Yes, if your SEC-registered adviser relies on the custody rule’s audit provision. The auditor has to be registered with, and subject to regular inspection by, the PCAOB. The SEC’s October 2026 proposed release would drop that requirement, but nothing changes until a final rule takes effect.

Is a Proof-of-Reserves Report the Same as an Audit?

No, and the PCAOB said so in a March 2023 investor advisory. Proof-of-reserve reports capture assets at a single moment, often skip liabilities, and say nothing about internal controls. Your investors and regulators still need audited financial statements.

Does the SEC Custody Rule Cover Crypto Assets?

Only crypto that counts as client funds or securities. SEC staff has confirmed that Rule 206(4)-2 reaches nothing else, so the analysis runs token by token. The October 2026 proposal would add crypto-specific provisions, including state trust company custody and limited self-custody.

Does ASU 2023-08 Change How Crypto Funds Account for Crypto?

Barely. Investment companies already carried crypto at fair value under ASC 946 and keep their ASC 946 presentation. ASU 2023-08, effective for fiscal years beginning after December 15, 2024, mostly moved other holders, like management companies and miners, from cost-less-impairment to fair value.

How Are Crypto Miners Audited Differently From Crypto Funds?

Miners aren’t investment companies, so the bitcoin they hold falls under ASU 2023-08’s fair value model, and much of the audit centers on revenue. The AICPA’s August 2026 practice aid update added an auditing chapter on mining revenue, including deals with mining pools and data center hosts.