What to know : Canada’s investment regulator CIRO has introduced a new Digital Asset Custody Framework to tighten rules on how crypto assets are held, citing past failures such as the QuadrigaCX collapse. The guidance establishes a tiered, risk-based structure for custody that aims to let firms innovate while strengthening investor protections against hacking, fraud, weak governance and insolvency. CIRO says it will proactively update the framework as new custody and cyber risks emerge, reflecting Canada’s broader cautious approach to crypto regulation and investor protection.
In a bid to respond more “quickly to crypto failures,” such as the collapse of QuadrigCX, Canada’s top investment industry regulator rolled out a new digital asset custody rules tightening standards on digital asset custody.
The industry-led Canadian Investment Regulatory Organization (CIRO) said its new Digital Asset Custody Framework is designed to allow it to respond more quickly to risks, including hacking, fraud, weak governance and insolvencies that have left investors exposed in past incidents.
“Many of the expectations in the framework were developed in close consultation with [crypto-asset trading platforms] and their custodians and reflect practices already in place,” a CIRO spokesperson told CoinDesk, adding that transition considerations will be applied on a case-by-case basis.
“The new framework also provides a balance between flexibility and risk management, supporting innovation while ensuring strong investor protection,” the spokesperson added.
Deeply involved in the collapse
The collapse of QuadrigaCX in 2019 remains one of the most notorious failures in Canada’s crypto history, with $123 million still unaccounted for. Its CEO, Gerald Cotten, died, and customer funds were found to be missing. Later investigations described co-founder Michael Patryn as allegedly being deeply involved in the exchange’s operations during the period when misappropriations occurred.
“Custody is one of the most critical points of risk in the crypto ecosystem,” said Alexandra Williams, CIRO’s senior vice president of strategy, innovation and stakeholder protection.
A central feature of the guidance is a tiered, risk-based structure that allows firms to diversify and strengthen custody arrangements while maintaining robust investor protections.
Early signs that expectations must be updated
CIRO said it would treat emerging custody and cyber risks, repeated supervisory issues across firms, or shifts in market practices as early warning signs that expectations may need to be updated.
“If we see that expectations are no longer aligned with how custody risk is manifesting in practice, CIRO would update the framework proactively, rather than wait for a failure to occur,” the regulator said.
Canada has taken a cautious approach to crypto regulation, bringing trading platforms under existing securities rules and emphasizing investor protection through registration, custody and disclosure requirements. More recently, federal moves on stablecoins and an expanded oversight role for the Bank of Canada suggest a slow shift toward a broader national framework for digital assets.
CIRO, a self-regulatory body that oversees all investment dealers, mutual fund dealers and trading activity on Canada’s debt and equity marketplaces, possessing the quasi-judicial authority to investigate misconduct and enforce disciplinary actions, including fines, suspensions, and permanent bans.
免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。
