BCG+下一波数字货币的风险管理

Managing

Risk

for

theNext

Wave

of

DigitalCurrenciesJuly2023By

BernhardKronfellner,

StevenAlexanderKok,

James

Mackintosh,

andChristianN.

Schmid(BCG);MikeBalestrino(BCapital);

andSamirGhosh(FalconX)ManagingRiskfor

theNextWave

ofDigital

CurrenciesThe

digital-currency

marketplace

has

been

in

turmoil

since

the

current“crypto

winter”

began

in

mid-2022.

Holdings

have

been

breached,fraudulent

and

illicit

schemes

have

been

revealed,

and

digital-currencyofferings

have

lost

value,

making

the

risks

more

evident.(For

anoverviewofwhatledto

thecryptowinter,

andofwherethingsstandnow,

seethesidebar“DeFiSummer,CryptoWinter,

andtheFuture.”)Recentactionsby

theUSSecuritiesandExchangeCommission(SEC)have

furtherensuredthattherisksofdigitalcurrencywillbe

topofmindfor

investorsfor

sometimeto

come.Inthisarticle,

weaimto

describetherisksthatcomewithsupportingandofferingdigitalcurrencies,

aswellasappro-priatetoolsandmethodsto

mitigatethem.

Aslongasclientsdemandaccessto

digitalcurrencies,

frombasiconesto

stablecoinsandevencentralbankdigitalcurren-cies(CBDCs),

theserisk-mitigationtoolsshouldbecomepartoftheoperatingmodelofmostbanksandfinancialservicesorganizations.At

thesametime,

digitalcurrenciesare

hereto

stay.

Theirprimaryfunction—toholdandtransfervaluewithoutacentralauthorityvalidatingandprocessingtransactions—willcontinueto

be

attractiveto

investorsandotherfinan-cialservicescustomers.

Inaddition,

therapidpaceofinnovationcontinues.

Financialinstitutionshave

adutytoprovidethesamelevelofasset-specificofferings,

capabili-ties,

andguardrailsthattheydowithothercomparableassetclasses.RisksAssociatedwithDigitalCurrenciesWhiledigitalcurrenciesare

availableinavarietyofformsandflavors(seethesidebar“AGuideto

Digital-CurrencyProductsandServices”),

theycan

allbe

assessedagainstcommonriskcategoriesrelevantto

financialinstitutions.Exhibit1showsthesecategoriesarrangedroughlyinorderofthesourceofrisk—from

broadmarketforces

to

particu-laractorsinthedigital-currencyecosystemto

gapsinthefinancialinstitution’sownrange

ofcapabilities.Thispresentsfinancialinstitutionswithaseriesofstrategicchallenges.

Chiefriskofficers(CROs)shouldbe

askingtwoquestions.

First,

whatare

themostimportantnewrisksassociatedwithdigitalcurrencies?Second,

howto

bestmanagethoserisks?For

boththesequestions,

financialinstitutionsneedto

pay

attentionto

thefactorsuniquetodigitalcurrencies—requiringnewpractices,

methods,

andways

ofthinking.01MANAGING

RISK

FOR

THE

NEXT

WAVE

OF

DIGITALCURRENCIESDeFiSummer,

CryptoWinter,

andtheFutureManyinvestorsacquireddigital-currencyholdingsduringthesteepupswingof“DeFisummer,”

whichbeganinAugust2020.

AstheCOVID-19pandemicsurged,

sodidthevalueofdecentralizedfinance(DeFi)offerings.

(Seetheexhibit.)Likemanyspeculativeinvestorsbeforethem,someassetmanagersmadedigital-currency-relatedbetswithoutfundamentalrisk-managementpracticesinplace.Thedigital-asseteconomyisnowinaperiodofregrouping.Analysisindicatesahighlevelofresearchanddevelop-ment,

mostlytakingplacequietlywithininnovativecompa-nies.

Asinallbearmarkets,

thisiswhencasualinvestorsandsubstandardplayersdepart,

anddigital-assetdevelop-erspreparetheirnextwave

ofofferings.Developingariskstrategyfor

digitalcurrencies,

includingthoseyoualreadyownoroversee,

doesnotmeanignoringthedownturn.

Itdoes,

however,

meancontinuingto

servecustomerneeds,

balancingthevalueofexposureindigitalcurrenciesagainsttherisksandnecessaryprecautions.DeFisummerendedinNovember2021.

LatercamethecollapseofthestablecoinTerra

inMay

2022,

followedinJuneby

thebankruptcyoftheSingapore-basedhedgefundThreeArrowsCapital.

ThencamefurtherinterestratehikesfromtheFederal

ReserveandtheFTXbankruptcy.Eachtime,

therisksbecameclearer,

andmoreinvestorspulledback.

By

May

2022,

thecurrentcryptowinterwasfullyunderway,

markedby

asteepdropinvalues.

(Theterm“cryptowinter”makesreferenceto

“Winteriscom-ing,”themottoofoneofthewarringhousesintheTVseriesGameofThrones.

Themottorefersnotonlyto

theharshnessofwintersinthehouse’scontinentbutalsototheinevitabilityofdifficulttimes.)Exhibit-CryptoMarketPricesvs.

DeveloperActivity,

2014-2023800kTerra

collapseMay

2022Bitcoin

(in$)70,000FTXcollapseNov.

202265,00060,000DeFi

summerAug.

2020–Nov

202155,00050,00045,00040,00035,00030,00025,00020,00015,00010,000May

2022ThreeArrowsCapitalbankruptcyJune2022Cryptowinter5,0000May

2022–?Jan.

2014Jan.

2015Jan.

2016Jan.

2017Jan.

2018Jan.

2019Jan.

2020Jan.

2021Jan.

2022Jan.

2023DeveloperactivityBitcoin(in$)Sources:

DataStatista;

CoinMarketCap;

BCGanalysis.BOSTONCONSULTINGGROUP+BCAPITAL+FALCONX02The

digital-asset

economy

isnow

in

a

period

of

regrouping.AGuideto

Digital-CurrencyProductsandServicesMainProductsMainServicesDigital

Currencies.

Thesevirtualcurrencies—Bitcoin,Ethereum,

andmanymore—arecommonfinancialproductsthatallleverageblockchaintechnology.

Manyofthemhave

valueprimarilyasspeculativeinvestmentvehi-cles,

whichincreasestheirvolatilityandthusaffectstheirriskprofile.Centralized

Exchanges

andBrokerages.

Thesehubsandplatformsenablepeopleandinstitutionsto

tradedigitalcurrencieswithfiatcurrenciesorwithoneanother.Exchangesfacilitatepricediscoveryandmatchordersamongparticipants.

Brokeragesfacilitatepricediscoveryandtransactionsacrossexchanges.

Bothexchangesandbrokeragesprovideadditionalservicesrelatedto

creditandderivatives.Somedigital-currencyofferings(“coins”)have

non-specula-tivevalue.

Theyare

utilitarian,

withusecasesthatincludecar

rentalsandthetracingofgoodsalongasupplychain.Becausedigitalcurrenciesare

onlyminimallyregulated,

ahighlevelofriskmonitoringandmitigationisconsideredbestpracticefor

allofthem,

eventhosewithprimarilyutilitarianvalue.Digital-Currency

Storage

Services.

Alsoknownascryptowalletservices,

thesemay

be

offeredby

banksorthird-par-tyentitiesto

facilitatethemanagementandsafekeepingofdigitalcoins,

protectingthemfrombeinghackedandenablingtherecoveryoflostkeys.

Theyalsoprovidequali-fiedstoragewhenrequiredby

regulations.

Coldwallets,whichhave

onlyanintermittentconnectionto

theinternet,are

saferfromcyberattackthanmore-connectedoptions.Hotwallets,

whichmaintainaninternetconnection,

allowfor

moreconvenientexchangesandtransfersoffunds.Digitalcurrenciesrequireasystem

ofverificationto

vali-datetheintegrityofeachnewcoin.

Theydothisby

linkingitcrediblyto

theblockchain.

Thereare

twoprimaryap-proaches.

Inproof-of-work

(PoW)verification,

eachnewcoinmustbe

generatedthroughmathematicalcomputa-tion,

witheachsuccessivecoinrequiringhigherlevelsofprocessingpower.

Proof-of-stake

(PoS)

digitalcurrenciesverifythevalueofeachdigitalcointhroughaffirmationbycurrentcurrencyholders,

qualifiedby

thenumberofcoinstheyalreadyhave

“staked”(committedto

keepilliquid).Payment-Processing

Services.

Retailersandotherswhoreceivepaymentsindigitalcurrencyusetheseservicestomanagetheprocess.

Theseservicesare

alsousedforconversionfromonedigitalcurrencyto

another.CustodyServices.

Otherservicesincludedigital-currencymanagement,

inwhichintermediariesactonbehalfofthecurrencyowner,

andsecurityservicesthatoverseeencryp-tion,

safeguardprivatekeys,

andperformsomeoftherisk-mitigationfunctionsdescribedinthisarticle.AtypicalPoS

system

ismoreresistantto

cyberattackandusesmuchlessenergythanitsPoW

counterparts.

Ethere-umconvertedfromPoW

to

PoS

inSeptember2022,

be-comingthemostprominentdigitalcurrencyto

doso.Stablecoins.

Theseare

digitalcurrencieswhosevalueispeggedto

thevalueofanothercurrencyorcommoditybythealgorithm.

Theytendto

be

backedby

otherfinancialassetsascollateralandare

thusrelativelyprotectedfromsomerisks.

Ifachain’stokeniscollateralized,

thedigitalcurrencyislikelyto

be

astablecoin.Central

BankDigital

Currencies

(CBDCs).

CBDCsare

aformofdigitalcurrencybeingconsideredby

somecentralbanksornationalgovernments.

CBDCswouldbe

releasedthroughanationalfinancialinfrastructurethatwouldmanagethedigitalledgersystem

andverification.BOSTONCONSULTINGGROUP+BCAPITAL+FALCONX04Exhibit1-SevenCategoriesofDigital-CurrencyRisk1Market

riskPricevolatility234567Counterparty

riskIllicit-finance

riskRegulatory

riskSecurity

riskAnotherplayer’sdefaultFraud,

moneylaundering,

etc.ContinuouslyevolvinglocalgovernmentthinkingOperational

riskReputational

riskIncludingsmartcontractsandtechnologicalchallengesDamageto

thepublicimageSource:

BCG/FalconX/BCapitalanalysis.12Market

Risk:

Price

VolatilityCounterparty

Risk:

Default

from

OtherParticipantsTheriskofgettingcaughtinaspeculativebubbleormar-ket-drivenpricecashdependsonhowspeculativetheactivityisinadigitalcurrency.

Stablecoins,

whichareTheintrinsiccharacteristicsofdigitalcurrenciesmakethemakinto

anon-transparentilliquidasset.

Moreover,peggedto

fiat-currencyvaluesandholdunderlyingcollater-al(inthepegcurrency,

ormorsuchastreasuries),

arriskfree.

Butevenstablecoinscan

be

volatile,

especiallywhenthecollateralisinadequate(forexample,

usingyetanotherstablecoinascollateral),

insufficient(notfullybacked),

oralgorithmic(stabilizedby

automaticbalanceagainstanotherstablecoinorunderlyingcollateralpool).whileinprincipletheyare

decentralizedby

design,

liquidityischanneledviaaratherconstrainedsetofmarketpartici-pants(mostnotably,

digital-currencyexchanges)thatfor

allintentsandpurposeshave

beensubjectthemselvestosignificantchallenges.

Thechallengesfor

exchangesrangefromineffectiveinternalcontrolsto

issuesmostlyrelatedto

proprietary-trading-stylefailures(insomecases,

drivingtheseexchangesto

bankruptcy).

Ifeithertheseexchangesorsomeholdersofadigitalcurrencycannotmeettheirobligations,

orappearto

be

likelyto

default,

thevalueofthedigitalcurrencycan

droprapidly.

Aswithderivativesmarkets,

lossesfromcounterpartyriskcan

spreadrapidlyacrossadigital-currencyecosystem,

creatingahighlevelofvolatilitythataffectsotherassetclassesaswell.

Thisposesadifficultconundrumfor

financialinstitutionsfromacustomer-protectionperspective:

customersare

essentiallyholdinganassetthatisperceivedto

operateasacurrency(withmarketfluctuationsakinto

thoseintheforeign-ex-changemarket),

buttheyare

exposedto

aratherdifferentriskprofile,

drivenby

theintrinsicnatureofthedigitalcurrencyandtheoperatingqualityoftheecosystemthatsupportsit.Even

stablecoins

canbevolatile,

especiallywhenthecollateral

isinadequate,

insufficient,oralgorithmic.Anotherissueistherelativelackofmarketcontrolsthattraditionallyprotectparticipantsfromextremevolatilityandfromborderline-illegalmarketswings(suchaspump-and-dumpschemes).

Intherealmofdigitalcurrency,marketcontrolsare

stillcatchingup,

andthiscan

becomeproblematicwhenafirmisofferingclientsnearreal-timeexchangefor

fiatpaymentpurposes.

For

example,

havingawalletthatholdsbitcoin,

andconvertsto

fiatatthepointofpurchase,

can

leadto

challengesintermsofliquidityman-agement,

internaltradingpools,

andcustomerexpecta-tions.

Thesechallengesmightresultinconstrainingtheofferingofsomeservicesto

asubsetofdigitalcurrencies,ortakingothermitigationmeasures(describedlater).05MANAGING

RISK

FOR

THE

NEXT

WAVE

OF

DIGITALCURRENCIES35AttackIllicit-Finance

Risk:

QuestionableActorsSecurity

Risk:

Vulnerability

tOnecommonconcernaboutdigitalcurrenciesistheex-tentto

whichfraud,

moneylaundering,

pricemanipulation,anddeceptiveactivityare

prevalent.

Whileinabsoluteterms,

theshareoffraudrelatedto

cryptogloballyisnotlarge,

itcan

stillbe

material:

accordingto

theFinancialTimes,

cryptocurrencyscamsincreasedby

morethan41%inEnglandandWales

(andpresumably

elsewhere)between2021and2022.

Theriskofillicitfinance

challenges

thecorebankingservicesofvaluecustodyandfraudprotection.Ifnotproperlysecured,

digitalcurrenciesare

vulnerabletolargeblockchain-analysisfirm,

$3.8billionwerestolenfromdigital-currencybusinessesin2022,

especiallyfromDeFiprotocols.

Overall,

illicitaddressessentnearly$23.8billionworthofcryptocurrencyin2022,

a68%increaseover2021.)Intruderscan

stealordepletedigital-currencyhold-ings,

andtheymay

alsocaptureprivatekeys

(thecryp-tographiccodesusedto

gainaccessto

holdings).

Ifprivatekeys,

passwords,

orwalletsare

stolenorlost,

theirvaluemay

be

unrecoverable.

Manyoftheblockchain-intelligenceandanti-money-launderingmethods

described

later,

intherisk-mitigation

section,

have

evolved

to

manage

securityrisk.Practiceslike“rugpulls”—wherepromoterswithdrawtransactionsfromadigital-currencyofftherebydilutingitsvalue—arelikeconventionalpump-and-dumpschemes.

Thedigital-currencymarket,

inpartbecauseofitscross-jurisdictionalnature,

doesnothave

thesamelevelofprotectionsandcontrolsinplacethathaveevolvedoverhundredsofyearsinthefinancialservicesindustry.

Butevenifallthesecontrolswereinplace,

digitalcurrenciesare

designedto

supportperson-to-persontrans-actions,

withoutbanksorotheroversightgroupsasinter-mediaries.

Thisexposesclientsto

theriskoffraud.Illicitaddresses

sentnearly

$23.8billionworthofcryptocurrency

in2022,

a68%increase

over

2021.Intrinsically,

thecustodianmodelfor

digitalcurrenciesisdifferentfromcustodyfor

anyotherassetclass.

Inotherassetclasses,

abankhasasingleomnibusstructuretomanagetheaggregateexposureto

themarket(thisistypicallydonewithretailsecuritiesholdings,

for

example).4Regulatory

Risk:

Continuously

Evolving

LocalGovernment

ThinkingWithdigitalcurrencies,

atthemostbasiclevel,

banksprovidecustodyto

safeguardthekeyto

theholdings.

At

amorenuancedlevel,

bankscan

providecustomerswithanongoingviewofthedigitalcurrency’sexposureto

marketrisk.

Beyondthat,

bankshave

limitedrecourseto

supportcustomers,

makingdepositinsurancecostspotentiallyhigher.

Amodelsimilarto

otherassetclasses,

recognizingthecustomer’sfulllevelofmarketexposure,

mightbepreferable.

Forthcomingevolutionsofdigitalcurrenciesessentiallyaimatahigherlevelof“selfcustody”asapreconditionfor

peer-to-peertransactions.

This,

inprinci-ple,

couldreducetransactioncostsandofferajurisdic-tionalpaymentrailatthepotentialexpenseoftransferringcustodyriskto

customers.Governmentsaroundtheworldare

developingnewrulesfor

digitalcurrencies.

TheSEC,

for

example,

initsJune2023lawsuitagainstBitcoinandCoinbase,

named19cryptocurrenciesassecurities,

therebysettingthestage

forpotentialregulatorychanges.

Theuncertaintiesaroundthiscasewillrequireattention,

andaddincrementalcostsintheservicingofdigitalcurrencies.

Moregenerally,

theconstantlyevolvingnatureofdigital-currencyregulationsmeansthatcomplianceprofessionalsare

payingcloseattentiontisheaded.”Banksandotherfinancialinstitutionshave

playedarela-tivelylimitedrolethusfar

inhelpingto

shaperegulatoryefforts.

Withdigitalcurrencies,

whereofferingstendtocrossmultipleregulatoryjurisdictions,

theymay

have

alargerroleto

play

inthefuture.

(Seethesidebar“TheCallfor

Digital-CurrencyRegulation.”)6OperationalRisk:

Complexity,

SmartContracts,andNewTechnologiesDigitalcurrencieshave

moreunderlyingcomplexitythanothertypesofvaluestorageandtransfermechanisms.Typically,

theyare

supportedby

foundingcompanies(argu-ably,

withthenotableexceptionofbitcoin),

withcomplexandsomewhatopaquegovernancestructures(suchasdecentralizedautonomousorganizations).

Also,involvenoveltechnologiesandbehavioralpatterns.

Asaresult,

it’spossibleto

losetrackofalltheramificationsofhowthevalueofthecurrencyshouldevolve,

alongwiththeconsequencesofanygiventradethatsupportsorunder-pinsdigitalcurrencies.

Somedigital-currencyinvestorsmayhave

beencaughtunaware

by

thiscomplexity.BOSTONCONSULTINGGROUP+BCAPITAL+FALCONX06TheCallfor

Digital-CurrencyRegulationEven

beforetheSEC

actions,

manyobserverswerecallingfor

stronger,

clearerregulationandmoretransparency.

Reg-ulatoryagenciesaroundtheworldare

intheprocessoffinalizingsuchregulationsoratleastare

developingplansfor

them.

Also,

inOctober2022,

theFinancialStabilityBoard,

aninternationalorganizationthatmakesrecom-mendationsabouttheglobalfinancialsystem,

proposedstricterregulationofcryptoassets—inparticular,

stable-coins—amongthenationswiththe20largesteconomies(theG-20nations).

TheGlobalFinancialMarketsAssocia-tionexpressedsupportfor

thisproposal,

stating:

“Inafast-evolvingandcompetitiveenvironment,

itisimportantfor

globalstandardsettingbodiesto

promotethecoordina-tionofaneffective

andalignedglobalregulatory

framework.”Even

amongdigital-currencyfunds,

thereisacallfor

stron-ger,

clearerregulationthathelpsinvestorsandbanksreduceandmitigaterisk.

Stakeholdersaskthatthecodesandapplicationsbe

fair,

andthattheregulationsreflectasolidunderstandingofthetechnologyanditsvalue.Regulatorsare

wellplacedto

convenetheconversationsthattheindustryneedsmost,

withtherightpeopleintheroom,

readyto

listento

oneanother.

Crypto-nativeinstitu-tionsshouldbe

includedinearlydiscussions.

Theyhavetheexpertiseandhands-onexperienceto

recommendafeasibleapproach.Regulatorswilldiscoverwithdigitalcurrencieswhattheyhave

discoveredwithmanyothertechnologies.

For

everymajornewtechnological

advance,

a

balance

mustbe

struckbetweenconflictingpriorities.

Inthiscase,

thoseprioritiesincludeinnovation,

customerprivacy,

andthetransparencyneededby

law

enforcementto

trackillicitactivity.07MANAGING

RISK

FOR

THE

NEXT

WAVE

OF

DIGITALCURRENCIESEven

among

digital-currency

funds,there

is

a

call

for

stronger,

clearerregulation

that

helps

investorsand

banks

mitigate

risk.Considerforking,

whichtakesplacewhensomepartici-pantschoosenotto

followorrecognizetheoriginalcon-sensusprotocol.

Instead,

theyspinoutacompetingrecordoftransactions,

asifcreatinganalternatetimeline.

Eachpathmay

have

itsowntransactionrecord,

controlledby

itsowncommunity.

Insomecases,

thisisdonedeliberately—to

createnewcurrencies,

for

example.

Nonetheless,

thepathsshareacommonhistorHowto

MitigateRisksBankscan

mitigatetherisksofdigitalcurrenciesattwolevelsatonce:

specificto

eachinvestment(“bottomup”)andoverall(“topdown”),

withorganization-widecapabili-ties.

Exhibit2showsrisk-mitigationstrategiesthatcan

bedeployed.

Typically,

thesemeasuresare

tablestakes,

anditisunusualto

seeabankorotherfinancialservicesinstitu-tionadoptmorecomprehensivemeasuresanddosocon-sistently.

By

puttingacomprehensivesetofcomplementa-ry

mitigationsinplace,

financialinstitutionscan

ensurethatdigitalcurrenciesare

offeredandleveragedeffectively.producesariskoflosingvalueorcontrol.Anotheroperationalriskisanerrorinasmartcontract,

acore

tenetofmanydigital-currencyandotherblock-chain-relatedapplications.

Insimpleterms,

asmartcon-tractrepresentstheintentionto

codifyautomaticexecu-tionandprovidethecodesomesortofpowerofattorney.For

example,

asmartcontractmightspecifythatanauto-maticsaleofdigitalcurrencieswilltake

placeunderpre-es-tablishedconditions(likeacomplexstandingorder).

Ingeneral,

derivativecontractscan

be

linkeddirectlyto

digi-tal-currencyinvestmentssothatoptionscan

be

executeddirectlyandautomatically.

AmistakeinthedrLet’stake

acloserlookatinvestment-levelstrategies,

andthenwe’llexaminemeasuresthatcan

be

takenatanorganizationallevel.BlockchainIntelligence

(BI).

Alsoknownasblockchainanalytics,

BIisacornerstonecapabilityintrinsicto

digitalcurrenciesandblockchainingeneral.

To

alargeextent,itisthefoundationofdigitalcurrencies’enhancedcapabil-ities,

especiallywhenitcomesto

granulartransparencyandtraceability.codingofthatcontractcouldleadto

anautomatictransac-tionthatwas

notintentional—andthatcouldleadtosubstantialaccidentallosses.

Onceexecuted,

thereisessentiallynorecourse.BIisusedby

CROs,

riskexecutives,

law

enforcement,

andgovernmentregulatorsto

detectandmitigateillicit-financeandcounterpartyrisks.

Third-partyvendorsofferincreas-inglysophisticatedAI-basedtoolsandanalyticpracticesformonitoringdigitalcurrencies’blockchaintransactions.7Reputational

Risk:

Damage

to

thePublic

ImageBiglossesandmajormisstepsindigitalcurrencytendtobe

widelyreportedevents.

Withdigitalcurrencies,

lossesresultfromexposureto

theecosystem,

andunlikefiatcurrencies,

theirperceivedstabilityisunrelatedto

howacountryorgovernmentperforms.

Reputationaldamagemay

resultfromthesuddencollapseofavendororex-change,

theexposureofaminingscamorPonzi

scheme,

amalwareoutbreak,

therapiddeclineofutilitytokens,

orbacklashagainstafraudulentinitialcoinofferingorwalletservice.

Althoughsomethreatsto

abank’simagemaycomefrompublicmisperception,

muchreputationalriskreflectsdecisionsmadeby

employeesateverylevelofthehierarchy.BIisusedto

detect

andmitigate

illicit-finance

andcounterparty

risks.For

example,

BIsystemscan

usemachinelearningtodetectpatternsintransactionhistoriesthatare

consistentwithmoneylaunderingorillicitfinance.

Thesesystemsandcomplianceprofessionals,

givingtheseauthoritiesvisibilityintoreal-timefinancialflows.

Whenthereisaproblemwithacounterparty,

investigatorscan

identifytherelatedtransactions.

Thisgivesbanksmoreabilityto

re-ducerisksto

theircustomers.Anti-money-laundering(AML)techniquesare

well-estab-lishedformsofBIorientedtoward

counterpartyandillicit-financerisks,

includingthefinancingofterrorismandsanctionsnoncompliance.

Thereare

somespecificways

inwhichkeyAMLcontrolsoperatedifferentlyinadigital-currencyspace:09MANAGING

RISK

FOR

THE

NEXT

WAVE

OF

DIGITALCURRENCIESExhibit2-Strategiesfor

MitigatingInvestmentRisksAssessmentofvendor

and

Proof-of-stake

Safe

storagepartnerrelationshipsBroadermitigationstrategiesBuildinginstitutionalcapabilitiesBlockchainintelligenceAssetresearchparticipation1.

Marketrisk2.

Counterpartyrisk3.

Illicit-financerisk4.

Regulatoryrisk5.

Securityrisk6.

Operationalrisk7.

ReputationalriskSource:

BCG/FalconX/BCapitalanalysis.•

KnowYour

Customer

(KYC).

KYC

evaluatescompa-niesandinvestorswhentheyjointheblockchainordigitalcurrency.

Itcontinuallycompilesknowledgeofen-tities’backgrounds,

transactionalhistories,

andexpectedfutureactivity.BIalsoplays

aroleinthedeploymentofautomatedcon-trols.

Theseallowbanksandotherfinancialservicesfirmsto

continuallymonitorandimprovetheirpractices.

Auto-matedcontrols,

for

example,

can

helplimitexposure.

Insomedigital-currencyinvestments,

rapidliquiditymay

notbe

available.

Therefore,

banksandinvestorsneedto

keeptheirexposurewithinthelimitsofacceptablerisk—evenifallthefundspassmustnext).

Asdiscussedpreviously,

digital-currencyholderscanbe

hurtby

thedominoeffectfromanotherfund’sorex-change’sfailure,

eveniftheydon’t

holdthatfundordobusinessonthatexchangedirectly.

Thus,

aswithanyriskyinvestment,

anautomaticstop-lossandhedgingshouldbeconsideredasoptions.•

KnowYour

Transaction

(KYT).

KYT,

arecentlydevel-opedapplication,

evaluateseachblockchaintransactionasithappens.

Thisisessentiallytheprocessoftransac-tionmonitoring,

extendedto

theecosystemlevel.

Anef-fectiveKYTsystem

can

verifyinrealtimethatatransferisnotgoingto

abadactororaknownsanctionedwallet.Platformsanddashboardsfor

digitalcurrencies,

anotherimportantBIoffering,

bringtogether