Considerations for Auditing Cryptocurrencies

Aug 29, 2026

Uploaded by Mia

Publication outlining common audit risks for cryptocurrencies and providing example procedures to address them. Covers how blockchain type and transaction characteristics influence audit risk and evidence gathering, including permissionless versus permissioned networks and implications for transparency and verification. Breaks down cryptocurrency categories and how different interactions (holding, custody, trading, staking, mining) affect audit planning. Emphasizes ethical considerations and relevant auditing/ethical standards, and notes scope limits: stablecoins, other digital assets, mining/staking audits, and custodian coverage are not comprehensively addressed.

LanguageEnglish

CategoryResearch & Report

FormatPDF

Pages25

Reading Time1 h 3 min

AccessFree to download

Introduction

Ethical considerations

Risk assessment

Understanding the entity

Specific risks

Next steps

Appendix 1 – What is blockchain

19 September 2024 This publication highlights common risks in the audit of cryptocurrencies and provides examples of procedures that can be performed to address these risks. It is not intended to be a guide, and it does not provide a comprehensive list of risks or audit procedures. CONTENTS Introduction .............................................................................................................................. 2 Ethical considerations .............................................................................................................. 3 Risk assessment...................................................................................................................... 4 Understanding the entity ................................................................................................... 4 Entity’s risk assessment.................................................................................................... 4 Wider processes and controls ........................................................................................... 5 Specific risks ............................................................................................................................ 9 Onboarding ....................................................................................................................... 9 Valuation Risks ............................................................................................................... 11 Ownership and Control ................................................................................................... 16 Risks around accuracy of data ........................................................................................ 18 Next steps.............................................................................................................................. 22 About ICAEW's Digital Asset Working Party and Tech Faculty .............................................. 23 Appendix 1 – What is blockchain ........................................................................................... 24 .............................................................................................................................................. 25 INTRODUCTION The term 'crypto assets' encompasses a wide range of virtual assets which reside on a blockchain and are cryptographically secured and controlled. The type of blockchain on which acryptocurrency resides will affect the audit risks and procedures to be performed when auditing it. For example, with a permissionless blockchain network getting data may be more straightforward as data is publicly available and easier to access. However, as there is no verification of participants, transactions and wallet balances may be pseudo-anonymous, limiting transparency. Conversely, for cryptocurrencies on private and permissioned blockchains anonymity is typically less of a challenge. A high-level overview of blockchain technology is provided in Appendix 1. Crypto assets can be broken down into various categories including asset backed tokens (ABTs), non-fungible tokens (NFTs), security tokens, utility tokens, cryptocurrencies (including stablecoins), and central bank digital currencies (CBDCs) . While these categories are distinct, there are similarities and differences in the nature of the assets, which may impact audit risks and procedures. For example, many digital assets have similar risks relating to proof of ownership and control and valuation. However, audit procedures to obtain evidence to address these risks may be different. In addition, individuals and organisations can interact with digital assets in various ways including holding, providing custodian services, payments, trading, staking, and mining. The nature of the interaction will determine the associated audit risks and procedures. The focus of this publication is the audit of cryptocurrencies, and ent

FAQs

How does the type of blockchain affect cryptocurrency audit risks and procedures?

The blockchain’s permission model influences audit evidence access and verification. Permissionless networks often provide publicly available data but may limit transparency due to pseudo-anonymity. Private/permissioned chains typically reduce anonymity challenges.

What areas of interaction with crypto assets are considered for audit planning?

Entities may hold cryptocurrencies directly or via a custodian, trade, provide exchange services, or be exposed indirectly through instruments like crypto-related ETFs. The nature of interaction drives the associated audit risks and procedures.

Does the publication provide a comprehensive list of risks and audit procedures?

No. The publication is intended to introduce core concepts, highlight key ethical considerations and common risks, and provide example procedures. It explicitly states it does not contain a comprehensive list.

Aug 29, 2026

Uploaded by Mia