Our Blockchain Audit Methodology

A Structured, Risk-Based Audit Approach for Crypto-Asset Service Providers (CASPs) and Digital Asset Businesses

A statutory audit is more than a compliance exercise. It is an independent assessment of whether an organisation's financial statements present a true and fair view in accordance with the applicable financial reporting framework.

For Crypto-Asset Service Providers (CASPs) and blockchain businesses, the audit process requires an understanding of digital assets, blockchain technology, custody arrangements, governance frameworks and financial reporting principles. While the objectives of the audit remain consistent across all industries, the procedures performed are tailored to reflect the unique risks associated with digital asset businesses.

At CYAUSE Audit Services, we apply a structured, risk-based audit methodology that combines the requirements of International Standards on Auditing (ISA) with specialist knowledge of blockchain technology, digital asset accounting and the evolving regulatory environment.

Our objective is to deliver an efficient, high-quality statutory audit while minimising disruption to your business and maintaining complete independence throughout the engagement.

Our Audit Philosophy

Every audit engagement is guided by five core principles:

  • Independence

  • Professional scepticism

  • Risk-based planning

  • Technical excellence

  • Transparent communication

These principles underpin every stage of the engagement and ensure that our work complies with professional standards while providing meaningful assurance to shareholders and other stakeholders.

Stage 1 – Understanding Your Business

Before substantive audit work begins, we develop a comprehensive understanding of your organisation.

This includes gaining knowledge of:

  • your business model;

  • products and services;

  • governance arrangements;

  • regulatory environment;

  • ownership structure;

  • accounting systems;

  • blockchain activities;

  • digital asset holdings;

  • custody arrangements;

  • technology infrastructure; and

  • significant business risks.

For blockchain businesses, understanding how digital assets flow through the organisation is essential in designing appropriate audit procedures.

Stage 2 – Risk Assessment

International Standards on Auditing require auditors to identify and assess the risks of material misstatement.

Our risk assessment considers factors such as:

  • complexity of operations;

  • digital asset custody;

  • revenue streams;

  • valuation methodologies;

  • regulatory developments;

  • information technology;

  • cybersecurity risks relevant to financial reporting;

  • management estimates;

  • related-party transactions;

  • business growth; and

  • changes in accounting policies.

The results of this assessment determine the nature, timing and extent of audit procedures.

Stage 3 – Audit Planning

Following completion of our risk assessment, we prepare a detailed audit plan.

The plan establishes:

  • significant audit areas;

  • audit timetable;

  • information requirements;

  • audit team responsibilities;

  • communication protocols;

  • expected reporting deadlines; and

  • engagement milestones.

Early planning enables both management and the audit team to prepare effectively.

Stage 4 – Understanding Internal Controls

A statutory audit includes obtaining an understanding of internal controls relevant to financial reporting.

Depending upon the organisation, this may include consideration of:

  • governance arrangements;

  • accounting processes;

  • approval procedures;

  • reconciliation controls;

  • wallet governance;

  • access management;

  • technology controls;

  • segregation of duties;

  • management review controls; and

  • monitoring activities.

Understanding these controls assists in designing appropriate audit procedures.

Stage 5 – Substantive Audit Procedures

Substantive procedures provide evidence supporting the amounts and disclosures presented within the financial statements.

Depending upon the business, procedures may include:

  • examining accounting records;

  • reviewing supporting documentation;

  • testing transactions;

  • analytical procedures;

  • confirmation procedures;

  • evaluating estimates;

  • reviewing contracts;

  • examining blockchain transaction evidence where relevant;

  • reviewing reconciliations; and

  • assessing financial statement disclosures.

Every procedure is designed to obtain sufficient and appropriate audit evidence in accordance with International Standards on Auditing.

Stage 6 – Digital Asset Audit Procedures

Where organisations hold or administer crypto-assets, additional procedures may be appropriate.

These may include consideration of:

  • wallet inventories;

  • custody arrangements;

  • blockchain transaction records;

  • reconciliation procedures;

  • governance over private keys;

  • digital asset valuation methodologies;

  • client asset records;

  • supporting contracts; and

  • management's accounting policies.

The precise procedures performed depend on the entity's operations and the assessed audit risks.

Stage 7 – Completion Procedures

Towards the conclusion of the audit, we perform procedures designed to ensure that all significant matters have been appropriately addressed.

These include:

  • reviewing subsequent events;

  • evaluating going concern;

  • reviewing financial statement disclosures;

  • completing analytical reviews;

  • obtaining management representations;

  • evaluating identified misstatements; and

  • final quality reviews.

Completion procedures support the formation of the auditor's opinion.

Stage 8 – Reporting

Upon completion of the audit, we issue our independent auditor's report in accordance with International Standards on Auditing.

Where appropriate, we also communicate with those charged with governance regarding matters such as:

  • significant accounting judgements;

  • audit observations;

  • internal control deficiencies identified during the audit;

  • uncorrected misstatements;

  • significant audit risks;

  • qualitative aspects of accounting practices; and

  • other matters required by professional standards.

Our objective is to provide clear, constructive communication while maintaining auditor independence.

Technology-Enabled Audit Delivery

Our audit methodology incorporates secure digital collaboration tools that facilitate efficient communication throughout the engagement.

Clients benefit from:

  • secure document exchange;

  • organised information requests;

  • real-time progress monitoring;

  • reduced administrative burden;

  • improved audit coordination; and

  • timely communication between management and the audit team.

This enables the audit to progress efficiently while protecting confidential information.

Continuous Communication

Effective communication is essential to a successful audit.

Throughout the engagement we maintain regular dialogue with management regarding:

  • audit progress;

  • information requests;

  • emerging issues;

  • significant accounting matters;

  • expected timelines; and

  • completion milestones.

Early communication helps avoid unnecessary delays and supports efficient completion of the audit.

Audit Quality

Audit quality is central to everything we do.

Our quality framework includes:

  • partner oversight;

  • experienced engagement teams;

  • technical consultation where appropriate;

  • quality review procedures;

  • compliance with professional standards;

  • ongoing professional development; and

  • continuous improvement of our audit methodology.

This commitment enables us to deliver independent assurance of the highest professional standard.

Why Our Methodology Works for Blockchain Businesses

Blockchain businesses require auditors who understand both traditional financial reporting and emerging digital asset technologies.

Our methodology is specifically designed to address:

  • digital asset business models;

  • blockchain transaction environments;

  • crypto-asset custody arrangements;

  • evolving accounting issues;

  • technology-enabled operations;

  • governance expectations; and

  • financial reporting risks.

Rather than applying a generic audit programme, we tailor our procedures to reflect the specific characteristics of each engagement.

Frequently Asked Questions

Is every blockchain audit the same?

No. Every organisation has a different business model, governance structure, technology environment and risk profile. Our audit approach is tailored to each client's specific circumstances.

Does your methodology comply with International Standards on Auditing?

Yes. Our statutory audits are performed in accordance with International Standards on Auditing and all applicable professional and legal requirements.

Will the audit disrupt our operations?

We work closely with management to plan the engagement efficiently, minimise disruption and agree realistic timelines for information requests and fieldwork.

Can the audit be performed digitally?

Many aspects of the audit can be completed using secure electronic collaboration tools. The precise approach depends on the nature of the engagement and applicable professional requirements.

Do you communicate findings throughout the audit?

Yes. We believe that timely communication contributes to a more efficient audit and enables matters to be addressed promptly where appropriate.

A Structured Approach to Independent Assurance

Every Crypto-Asset Service Provider is different, but every statutory audit should be founded on the same principles of independence, professional scepticism and technical excellence.

Our structured audit methodology enables us to deliver independent assurance that reflects both the requirements of International Standards on Auditing and the operational realities of blockchain businesses. By combining specialist industry knowledge with a disciplined audit process, we help organisations produce reliable financial statements while strengthening confidence among shareholders, regulators, lenders and other stakeholders.

If your organisation is seeking a statutory auditor with experience in blockchain technology, digital assets and MiCA-regulated businesses, we would welcome the opportunity to discuss your audit requirements.