How Would an Auditor Value XRP Held by a Corporation?

It is 31 December and the trial balance includes a material XRP asset. The controller provides a blockchain-explorer screenshot and the closing price from a popular exchange. For an external auditor, that is a starting point—not a completed workpaper.

The audit must address the financial-statement assertions: existence, rights and obligations, completeness, valuation, cut-off, presentation and disclosure. Digital assets change the evidence available, but they do not change the need for sufficient appropriate evidence.

Plan the audit around custody and use

The first meeting maps how the corporation acquires, stores, transfers and disposes of XRP. Is it self-custodied, held by an institutional custodian, left on exchanges, locked in an AMM, pledged as collateral, or split across all four?

The auditor also asks why it is held. An IFRS broker-trader inventory measured at fair value less costs to sell creates a different valuation risk from an IAS 38 cost-model asset tested for impairment. A US GAAP holding within ASU 2023-08 has another measurement model.

Materiality, transaction volume and control maturity shape the response. A small year-end balance with thousands of automated transfers can create more completeness and cut-off work than a larger cold-wallet balance that never moved.

Existence: verify the units independently

For self-custodied XRP, the auditor can inspect the ledger through an independent node, trusted data provider or multiple blockchain explorers. It reconciles account balances and relevant ledger objects at the reporting time to the client's subledger and general ledger.

A signed message or a controlled transfer can help demonstrate access to a private key. On XRPL, audit procedures must be designed around the network's available transaction capabilities and the entity's security policy; auditors should not casually demand a transaction that weakens controls or incurs unnecessary risk.

For third-party custody, the auditor may seek direct confirmation from the custodian, inspect service-organisation controls, review contractual terms and reconcile statements to on-ledger addresses where disclosed. Exchange statements downloaded by management are weaker than independently obtained confirmations.

Rights and obligations: the address is not a legal name

Seeing 2 million XRP at an address proves that the ledger records the balance. It does not prove the reporting company owns the economic rights. The private key could be controlled by a founder, a custodian could hold the asset for customers, or the balance could be pledged to a lender.

The audit file may include board approvals, purchase contracts, custodian agreements, wallet-creation records, beneficial-ownership representations, bank records funding the purchases, legal opinions for unusual structures, and searches for liens or collateral arrangements.

Key access is relevant but not conclusive. An employee may have technical access without legal ownership. Conversely, a company may legally own assets safeguarded by a custodian even though no employee holds the signing key.

Completeness: find wallets management did not list

Completeness is often harder than existence. Management can provide an address that really holds XRP while omitting another address, an exchange account or a liability to customers whose assets are commingled.

Auditors can trace fiat transfers to known exchanges, inspect expense accounts for custody and trading fees, review board minutes, search email or contract repositories, compare tax records, and analyse transfers between disclosed addresses and unidentified counterparties. They may test the process for opening wallets and onboarding venues.

A complete wallet register should identify purpose, owner, custodian, authorised signers, creation date, status, linked general-ledger account and restrictions. Dormant addresses remain in scope if they hold value.

Cut-off: define the reporting timestamp

Digital assets trade continuously, while financial statements use a defined reporting date and often a local time zone. The company needs a policy for the precise measurement time. “Midnight” is incomplete without a time zone.

The auditor tests transactions around that boundary. XRP sent at 11:59 p.m. but not reflected in the custodian statement, or received just after year-end but posted before close, can misstate both asset and payable balances. Ledger timestamps, exchange records and bank settlements must be aligned.

Transfers between company wallets should not create purchases or sales. The auditor tests inter-wallet movements to ensure they are eliminated from activity and not double-counted while in transit.

Valuation begins with the accounting basis

The auditor does not start by selecting a price. It first evaluates management's classification and measurement policy. Under IFRS that may be IAS 2 or IAS 38; under US GAAP, in-scope crypto assets are measured at fair value under ASU 2023-08.

For fair value, IFRS 13 defines an exit price in an orderly transaction between market participants at the measurement date. If a principal market exists, its price is used even if another market offers a more favourable price. The company must have access to the relevant market.

For an IAS 38 cost-model asset, market information may enter an impairment assessment rather than a recurring fair-value journal. The audit procedure must test the model management actually applies, not substitute a preferred model.

Determining the principal market

XRP trades on multiple exchanges, in multiple fiat and stablecoin pairs, with different volumes and access conditions. Management should analyse the market with the greatest volume and level of activity that the entity can access. The highest quoted price is not automatically the principal market.

Auditors review venue trading data, the company's normal transactions, legal access, account status and withdrawal restrictions. A market unavailable to Australian corporate customers cannot be the company's principal market merely because it has high global volume.

If the market is active and the quoted price is unadjusted for an identical asset, the measurement may fall within Level 1 of the fair-value hierarchy. Thin, fragmented or inaccessible markets may require Level 2 or Level 3 techniques and more extensive disclosures.

Price testing and observable evidence

The auditor independently obtains price data at the measurement timestamp, checks the currency pair and converts foreign prices using an approved FX source. It compares venues, investigates outliers and tests whether stablecoin-denominated quotes require adjustment for any deviation from fiat value.

Bid, ask, last trade and volume-weighted prices are not interchangeable. IFRS 13 permits use of a price within the bid-ask spread that is most representative of fair value; the entity should apply its policy consistently. Transaction costs are generally not part of fair value, though transport concepts and costs to sell may matter under the governing standard.

The size of the holding does not justify a blockage discount to a quoted Level 1 price merely because selling all units at once would move the market. Unit of account and applicable standards control. Liquidity risk can still require disclosure.

Impairment and subsequent events

For an IFRS cost-model holding, auditors evaluate impairment indicators and management's recoverable-amount work under the applicable standards. A market price below carrying amount is strong evidence to investigate, but the full analysis depends on the asset and policy.

Crypto markets can move sharply after year-end. The auditor assesses whether later events provide evidence about conditions existing at the reporting date or represent non-adjusting events requiring disclosure. A January price collapse is not automatically booked into a 31 December balance sheet.

Evidence from subsequent sales can corroborate valuation, but only after considering market changes, transaction size and whether the sale was orderly.

Controls an auditor may test

Key controls include daily wallet-to-subledger reconciliation, independent approval of new addresses, segregation between trade initiation and signing, whitelisted withdrawal addresses, multisignature thresholds, price-source governance, exception review, journal approval and periodic access recertification.

The auditor may inspect system logs, reperformance of reconciliations, samples of approved transfers, custodian service reports and incident records. A multisignature wallet is helpful only if signers are genuinely independent and recovery keys are controlled.

Management's spreadsheet can be tested for formulas, completeness, access and change control. A sophisticated blockchain feed does not compensate for a manual journal that nobody reviews.

A realistic audit evidence request list

The year-end request may include:

- the complete wallet and exchange-account register;
- transaction exports and ledger hashes for the period;
- custodian agreements and independently returned confirmations;
- evidence of key generation, storage, signer approval and recovery testing;
- board and treasury-policy approval for XRP activity;
- bank statements tracing acquisitions and disposals;
- the accounting-policy memorandum under the applicable framework;
- principal-market and active-market assessments;
- independent price-source reports at the reporting timestamp;
- impairment or fair-value calculations and review evidence;
- details of pledges, staking-like arrangements, AMMs or restrictions;
- tax-lot schedules and reconciliation to tax filings; and
- subsequent transactions through the audit-report date.

This feels like a real audit file because it connects ledger evidence to legal, financial and control evidence. No single screenshot answers all assertions.

Presentation and disclosure review

The auditor checks whether XRP is presented in the correct line item, whether gains and losses appear in the correct statement, and whether accounting policies and judgements are clear. Material custody concentration, market risk, restrictions and valuation uncertainty may need disclosure.

It also reads the annual report for inconsistent claims. Describing XRP as “cash equivalent” in the operating review while classifying it as an intangible asset in the notes can mislead even if the numbers reconcile.

The final valuation conclusion is therefore a chain: establish the applicable measurement basis, verify legal control and units, select the accessible principal market, obtain independent data at the correct time, and test the calculation and disclosures. What Would XRP Look Like on a Company's Balance Sheet? explains the underlying accounting models, while Could XRP Become a Treasury Asset? covers the governance decision before the audit begins.