What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A useful crypto risk checklist does more than ask whether a token price might fall. It records every legal entity, custodian, lender, collateral claim, settlement route and shared dependency that could leave assets lost, frozen or difficult to sell. Build the checklist as a live control document: assign an owner, set exposure limits, test stressed liquidity, verify custody and collateral rights, and predefine what you will do when a limit or warning indicator is breached.
The framework below is designed for an individual or investment team. It adapts principles from the Financial Stability Board (FSB), the Basel Framework, the European Union’s Markets in Crypto-Assets (MiCA) rules, IOSCO policy recommendations and Swiss FINMA guidance. Those materials have different legal scopes; none substitutes for jurisdiction-specific legal, tax or compliance advice.
What a crypto collateral and counterparty checklist must cover
Crypto portfolio losses can arrive through several channels at once: market moves, borrower or issuer default, a custodian’s failure, withdrawal restrictions, inadequate collateral, operational outages, cyber incidents, legal uncertainty or a loss of liquidity. Looking only at the token obscures dependencies. A supposedly diversified portfolio may rely on the same bank, stablecoin, market maker, blockchain, oracle, exchange group or wallet infrastructure.
Your checklist should therefore answer four questions for every exposure:
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
- Who can owe or control something? Identify the legal entity, related group, jurisdiction and service providers.
- What exactly can be lost or frozen? Record assets, amounts, rights, collateral, access credentials and settlement dependencies.
- How quickly can you recover value under stress? Test withdrawals, liquidation, redemption and transfer routes when prices gap and market depth shrinks.
- What action follows a warning? Set limits, owners, escalation paths and an exit plan before an incident occurs.
Use the same record for exchange balances, custodial holdings, lending, borrowing, derivatives, staking, yield products, stablecoins, bridges and relevant DeFi protocols. Treat a token’s issuer, reserve custodian, bank, market maker, oracle or bridge as part of the exposure chain even when you do not have a direct contract with each one.
1. Set governance, limits and decision rights
Define the portfolio’s mandate
Write down the portfolio’s purpose, risk appetite, permitted products and unacceptable activities. State whether the objective is long-term holding, trading liquidity, yield, hedging or collateral for another obligation. A product that is acceptable for one purpose may be unsuitable for another because lockups, rehypothecation or liquidation rights differ.
Set a maximum exposure for each legal entity and for each related group, not merely for each brand or token. Include direct holdings and contingent exposures such as margin calls, guarantees, indemnities and obligations created by derivatives. Set separate ceilings for illiquid assets, unsecured lending, rehypothecated assets and assets dependent on one settlement route.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteAssign accountable people
Name an owner for every material exposure. The owner maintains evidence, monitors limits and starts escalation. Where practical, assign a separate reviewer for material exceptions so that the person benefiting from an arrangement is not the only person deciding whether its controls are adequate. Record who can approve a new counterparty, raise a limit, accept an exception and order a withdrawal or closeout.
Use review intervals and event triggers
Choose a normal review interval, then add immediate reviews for material changes. Triggers should include amended custody or lending terms, a change in legal entity or ownership, a new subcontractor, a control failure, a cyber incident, a collateral composition change, a redemption restriction, a withdrawal pause, a material rule change or a sharp deterioration in market depth.
Predefine escalation actions
Write the response next to each limit. Possible actions include stopping new deposits, reducing an exposure, withdrawing available assets, adding collateral, shortening maturities, hedging, closing a position or obtaining legal and operational review. Include a person responsible, a time target and any dependencies such as a second approver or a whitelisted withdrawal address.
The FSB’s 2023 Recommendation 5 says: “Authorities, as appropriate, should require crypto-asset service providers to have an effective risk management framework in place that comprehensively addresses all material risks associated with their activities.” This is guidance for authorities and service providers, not a mandatory investor checklist, but its accountability principle is directly useful when assigning portfolio responsibilities.
2. Map the complete exposure chain
Build an exposure register
Create one row for every position or contractual relationship. At minimum, record:
| Field | What to capture |
|---|---|
| Asset and amount | Token, fiat balance, derivative notional, collateral amount and current valuation date. |
| Service | Spot custody, exchange trading, lending, borrowing, staking, yield, bridge, derivatives or DeFi use. |
| Legal counterparty | Contracting entity, registered jurisdiction, related group and the entity actually responsible for performance. |
| Custody and control | Who controls keys or account permissions, where assets are held and whether assets are segregated. |
| Settlement route | Blockchain, bank, exchange, bridge, oracle and other required intermediaries. |
| Terms | Maturity, termination rights, withdrawal conditions, fees, collateral rules and governing law. |
| Stress loss | Amount that could be lost, frozen or delayed in a defined stress scenario. |
| Owner and evidence | Internal owner, last verification date, unresolved questions and next review date. |
Look through shared dependencies
Do not count two platforms as independent solely because they have different names. Aggregate exposures that rely on the same corporate group, bank, stablecoin, wallet technology, market maker, blockchain, bridge or liquidity venue. A failure at that common dependency can affect every apparently separate position at once.
Record both current and contingent exposure
Enter the amount currently at risk and the amount that could become at risk after a margin call, collateral haircut, redemption queue or settlement delay. For example, a borrowing position may expose you not only to the collateral posted today but also to a requirement to provide additional assets during a rapid price move.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
3. Assess every counterparty before funding it
Verify identity, jurisdiction and regulatory status
Obtain the legal name, registration details, operating jurisdictions and any applicable license or registration. Confirm that the entity named in the contract—not merely a trading name or app—is the party holding assets or owing payment. Check whether the service is within a regulatory regime and what that regime actually covers; a license for one activity does not prove protection for another.
Free tools Windows power users keep installed
One-click scans. No signup required.
Read the contract for failure scenarios
Save the current agreement and identify the governing law, dispute forum, termination rights, notice periods, insolvency provisions, set-off rights and treatment of client assets. Ask what happens if the provider becomes insolvent, a wallet is frozen, a blockchain forks or a withdrawal is paused. If the contract permits unilateral term changes, record how much notice you receive and whether you can exit without penalty.
Understand asset handling and reuse
Determine how client assets are recorded, held, segregated and controlled. Ask whether the provider may lend, pledge, stake, commingle or rehypothecate them; identify the assets and counterparties involved, the consent required and the consequences if the reuse chain fails. A statement that assets are “backed” is not a substitute for knowing your legal claim and the location of the assets.
Check withdrawals and operational dependencies
Document ordinary and stressed withdrawal conditions, queues, cut-off times, fees, address whitelists, approval steps and expected settlement times. List dependencies such as a bank, bridge, oracle, correspondent, cloud provider or key-management vendor. Ask how the provider handles an incident, restores service and communicates when a critical vendor is unavailable.
Review financial, control and incident evidence
Collect financial information available to you, independent audit or assurance reports, the scope and date of those reports, penetration-test summaries where disclosed, business-continuity information and a history of material incidents. Distinguish an assurance report over a narrow control set from an opinion covering solvency, reserves or all client assets. Record unanswered questions rather than converting silence into a low-risk rating.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Set warning indicators and an exit plan
Choose measurable indicators such as slower withdrawals, widening spreads, missed reporting dates, covenant breaches, unexplained reserve changes, management turnover, repeated outages or a rising concentration in one venue. For each indicator, state the action, decision-maker and time limit. Test that you can actually transfer or liquidate assets before relying on an exit plan.
4. Check custody and access control
Institutional or third-party custody
Ask who controls the keys or other access means, how your entitlement is recorded, how transactions are authorised and how recovery works after a cyberattack, employee error, provider insolvency or withdrawal halt. Compare the legal description of client ownership with the operational reality: the party maintaining a ledger may not be the party controlling on-chain assets.
MiCA Article 75 requires covered crypto-asset service providers offering custody to keep a register of positions for each client and maintain a custody policy designed to minimise loss of clients’ crypto-assets, related rights or means of access through fraud, cyber threats or negligence. Applicability depends on the provider, service and legal scope, so verify the current consolidated rule and the provider’s status.
Self-custody controls
Self-custody removes a particular intermediary credit exposure but transfers responsibility to you. Document key generation, backup locations, recovery procedures, device security, access separation, inheritance or business-continuity arrangements and a tested recovery process. Use a written transaction-approval procedure for large transfers and verify addresses through an independent channel.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →A hardware wallet can be one access-control tool, but possession of a device does not eliminate backup, recovery, software, physical-security or user-error risks. The relevant test is whether you can restore access safely and prevent unauthorised transactions, not whether a particular device is marketed as secure.
Rank #3
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
FINMA’s 12 January 2026 announcement notes that custody of crypto-based assets such as Bitcoin or Ether has particular risks arising from distributed-ledger technology and requires expertise and robust technical infrastructure. That statement concerns FINMA-supervised Swiss institutions; it is not a universal certification of every custodian.
5. Evaluate collateral and liquidation mechanics
Confirm the legal claim
Record what asset is pledged, who controls it, where it is held and whether the security interest is perfected and enforceable in every relevant jurisdiction. Identify priority against other creditors, segregation requirements, closeout rights and the treatment of collateral in insolvency. A dashboard showing a collateral balance cannot establish that you will receive the asset after a default.
Test value and liquidation under stress
Assess whether the collateral can be independently valued and sold or transferred quickly when markets are disorderly. Examine volatility, order-book depth, trading-hour gaps, venue concentration, settlement delays and expected slippage. Use stressed rather than displayed prices when estimating proceeds.
Read the margin terms
Record initial haircuts, maintenance thresholds, margin-call timing, cure periods, liquidation triggers, auction rules, price sources and the party authorised to change them. Check whether the borrower can substitute collateral and whether a change can leave you holding a more correlated or less liquid asset.
Identify reuse, correlation and technical risks
Determine whether collateral may be reused, lent, commingled, frozen or encumbered elsewhere. Check wrong-way risk: the borrower, collateral, stablecoin, trading venue or liquidity provider may all weaken during the same event. Include network congestion, chain forks, protocol pauses, oracle failure and abrupt price gaps in the liquidation analysis.
The Basel Framework’s cryptoasset chapter, including SCO60 changes effective 1 January 2026, states: “Cryptoassets shall only be recognised as collateral where volatility in values and holding periods under distressed market conditions can be confirmed to not be materially increased compared with the traditional asset or pool of traditional assets.” This is a bank capital standard, not a universal retail eligibility rule, but it is a useful diligence test.
“Overcollateralized” does not mean risk-free. Collateral can fall in value, liquidation can be delayed, legal rights can be uncertain and stressed prices can overstate the proceeds actually available.
6. Run combined liquidity and concentration stress tests
Use a multi-factor scenario
Model several shocks together rather than testing one variable in isolation. A practical scenario can combine a sharp price move, wider spreads, reduced market depth, counterparty default, a withdrawal freeze, delayed settlement, higher collateral haircuts and stablecoin redemption disruption.
| Stress question | Evidence to calculate |
|---|---|
| What must be paid? | Margin calls, loan maturities, operating cash needs and fees during the scenario. |
| What can be sold? | Assets with confirmed transfer rights, available venues and realistic stressed depth. |
| How long will it take? | Withdrawal queue, blockchain confirmation, bank settlement and liquidation timetable. |
| What price is achievable? | Haircut, spread, slippage and likely market impact rather than the last quoted price. |
| What fails together? | Shared bank, token, issuer, venue, oracle, bridge, custodian or blockchain dependencies. |
Set limits from the result
Set exposure and liquidity limits based on the portfolio’s ability to meet obligations in the scenario without relying on one venue, token, lender or redemption route. Define the action when a limit is breached: reduce a position, add liquid reserves, stop lending, move custody or close the trade. Re-run the scenario after a material change in collateral, terms or market structure.
The Basel framework includes liquidity and funding concentration among cryptoasset-related risks that banks must assess. For an investor, the practical question is whether cash needs can be met without a single point of failure.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
7. Treat stablecoins as issuer and reserve exposures
Verify the legal redemption claim
Identify the issuer, the contractual holder of the redemption right, eligible users, minimum amounts, fees, redemption windows and settlement route. Check whether redemption can be suspended, capped or delayed and which bank or exchange must process it.
Examine reserves and their custody
Review reserve composition, maturity, liquidity, custody, segregation and disclosure. Ask whether reserve assets can lose value or become illiquid during the same stress that drives redemptions. Check the scope, frequency and date of independent assurance; a report may verify existence at one moment without proving continuous liquidity.
Map dependencies and run a run scenario
List banks, custodians, exchanges, market makers and blockchains required to redeem or transfer the token. Model simultaneous redemptions, a reserve-asset haircut, a banking outage and a market-wide spread increase. Decide what portion of the portfolio can remain in the stablecoin and what alternative cash route is available.
IOSCO’s 2023 policy recommendations identify concerns involving reserve transparency and verification, potential run dynamics and issuer credit risk in relevant stablecoin structures. Those recommendations do not establish the current reserves or redemption performance of any particular token; use the issuer’s current primary disclosures and applicable rules for token-specific decisions.
8. Compare providers or collateral options consistently
When choosing between two custodians, lenders, venues or collateral assets, score the same dimensions for each. Keep cost in the model, but never treat a lower fee as compensation for an unverified legal claim or weak exit route.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute| Comparison axis | Questions to answer |
|---|---|
| Legal claim | Which entity owes performance, under what law, with what insolvency treatment? |
| Asset control | Who controls keys, are assets segregated, and may they be reused? |
| Transparency | What assurance exists, what does it cover, and how recent is it? |
| Shared dependencies | Do both options rely on the same bank, issuer, chain, venue or vendor? |
| Collateral quality | What haircut, volatility, depth and stressed liquidation time apply? |
| Operational resilience | How are incidents, recovery, subcontractors and access failures handled? |
| Exit reliability | Can assets be withdrawn, redeemed or transferred within the required time? |
| Total cost and flexibility | What are fees, lockups, termination rights and penalties, considered alongside risk? |
9. Turn the framework into a repeatable operating procedure
- Open an exposure record. Enter the asset, amount, service, legal entity, jurisdiction, custodian, settlement route and related dependencies.
- Collect primary documents. Save the contract, custody policy, collateral schedule, withdrawal rules, licenses or registrations, assurance reports, reserve disclosures and incident notices.
- Verify rights and controls. Confirm ownership records, key control, segregation, reuse permissions, redemption rights, liquidation mechanics and insolvency treatment.
- Quantify stress exposure. Estimate loss, delay, margin needs and sale proceeds in a combined market, liquidity and counterparty scenario.
- Assign a rating and limits. Record known facts, unknowns, concentration totals, permitted exposure and the person approving any exception.
- Approve or reject. Do not fund until unresolved issues are accepted by the designated decision-maker with a written rationale and expiry date.
- Monitor indicators. Track withdrawals, spreads, collateral ratios, reserve disclosures, outages, legal changes and concentration against limits.
- Escalate and document. Trigger the pre-agreed action, preserve evidence, record decisions and reassess the entire dependency chain.
10. Maintain evidence and review the checklist
Keep dated copies or stable records of contracts, policies, reserve reports, audit or assurance statements, licenses, risk limits, incident notices and internal approvals. For each item, record who checked it, what was verified, what remains unknown and the next review date.
| Review type | When to perform it |
|---|---|
| Routine review | At the interval set in your mandate, with all evidence and limits refreshed. |
| Event-driven review | Immediately after a custody-term change, outage, incident, ownership change, rule change or collateral alteration. |
| Stress refresh | When volatility, spreads, market depth, redemption capacity or borrowing terms change materially. |
| Exit rehearsal | Periodically verify that withdrawals, key recovery, collateral transfer and alternate settlement routes work in practice. |
How the major standards fit—and where they do not
| Source | Scope | How to use it |
|---|---|---|
| FSB recommendations, 2023 | International policy framework for authorities and crypto-asset service providers. | Adapt its accountability and comprehensive material-risk principles; it is not an investor-specific rulebook. |
| Basel Framework cryptoasset chapter | Prudential standards for banks; SCO60 changes took effect 1 January 2026. | Use its credit, market, liquidity, operational and collateral tests as a diligence lens, not as automatic rules for every investor or firm. |
| MiCA Article 75 | European Union rule text for covered crypto-asset service providers within its legal scope. | Check whether a provider and service are covered, then verify position records and custody-policy requirements. |
| FINMA announcement, 12 January 2026 | Swiss FINMA-supervised institutions. | Use its warning about distributed-ledger custody expertise and technical infrastructure in a Swiss context. |
| IOSCO policy recommendations, 2023 | International policy recommendations concerning crypto and stablecoin arrangements. | Use the reserve-transparency, run-dynamics and issuer-credit-risk themes; do not treat them as current data for a named token. |
Common checklist failures and fixes
- Counting brands instead of legal entities: map the contracting entity and related group, then aggregate shared dependencies.
- Accepting a reserve or assurance label without scope: record what was tested, by whom, on what date and what remains outside the report.
- Assuming collateral is liquid because it is visible: model stressed depth, slippage, transfer delays and liquidation authority.
- Ignoring reuse rights: identify every permitted pledge, loan, stake or commingling step and its insolvency consequence.
- Testing one risk at a time: combine market, liquidity, counterparty, operational and redemption shocks.
- Leaving escalation implicit: attach an action, owner and deadline to every warning indicator.
- Confusing a regulatory rule with a guarantee: verify scope and never infer that supervision eliminates loss, delay or insolvency risk.
- Failing to test recovery: rehearse withdrawals, key restoration, alternate settlement and collateral transfer before they are urgent.
Applying the checklist to common decisions
Before lending crypto
Identify the borrower’s legal entity and repayment obligation, read reuse and insolvency terms, verify collateral control and enforceability, set a haircut and margin-call process, test liquidation depth, aggregate shared dependencies and define the exact action after a missed payment or withdrawal restriction.
Before using a custodian
Confirm whose name appears on the contract, how client positions are recorded, who controls keys, whether assets are segregated or reused, how withdrawals work during an incident, what independent assurance covers and how you would exit if service stops.
Before using a stablecoin as collateral
Check the legal redemption claim, reserve custody and liquidity, assurance scope, redemption limits, banking and exchange dependencies, correlation with the borrower and the outcome of a simultaneous run and collateral haircut.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
