and as of the date of such certificate, and have been true and correct throughout the preceding year. In addition, the Custodian has agreed to allow the Trust and the Sponsor to take any necessary steps to verify that satisfactory internal control system and procedures are in place, and to visit and inspect the systems on which the Custodian’s coins are held. If the Custodian resigns in its capacity as custodian, the Sponsor may appoint an additional or replacement custodian and enter into a custodian agreement on behalf of the Trust with such custodian. Furthermore, the Sponsor and the Trust may use SUI custody services or similar services provided by entities other than Coinbase Custody Trust Company, LLC at any time without prior notice to Coinbase Custody Trust Company, LLC. Custody of the Trust’s SUI Digital assets and digital asset transactions are recorded and validated on blockchains, the public transaction ledgers of a digital asset network. Each digital asset blockchain serves as a record of ownership for all of the units of such digital asset, even in the case of certain privacy-preserving digital assets, where the transactions themselves are not publicly viewable. All digital assets recorded on a blockchain are associated with a public blockchain address, also referred to as a digital wallet. Digital assets held at a particular public blockchain address may be accessed and transferred using a corresponding private key. Key Generation Public addresses and their corresponding private keys are generated by the Custodian in secret key generation ceremonies at secure locations inside faraday cages, which are enclosures used to block electromagnetic fields and thus mitigate against attacks. The Custodian uses quantum random number generators to generate the public and private key pairs. Once generated, private keys are encrypted, separated into “shards”, and then further encrypted. After the key generation ceremony, all materials used to generate private keys, including computers, are destroyed. All key generation ceremonies are performed offline. No party other than the Custodian has access to the private key shards of the Trust, including the Trust itself. Key Storage Private key shards are distributed geographically by the Custodial Entities in secure vaults around the world, including in the United States. The locations of the secure vaults may change regularly and are kept confidential by the Custodian and the Prime Broker for security purposes. The Vault Balance primarily uses “cold” storage mechanisms to secure a substantial portion of the Trust’s private keys. A substantial portion of the Trust’s SUI holdings are held in cold storage at all times, with a portion of the Settlement Balance held temporarily in “hot” storage from time to time, for purposes of facilitating the receipt and distribution of SUI in connection with the creation and redemption of Baskets. Any SUI credited to the Trust’s Settlement Balance is stored in omnibus accounts, either on the Prime Broker’s systems or at Coinbase Connected Venues, using a combination of cold and hot storage mechanisms to secure the private keys representing the assets credited to the Trust’s Settlement Balance. Cold storage is a safeguarding method with multiple layers of protections and protocols, by which the private keys corresponding to the Trust’s SUI are generated and stored in an offline manner. A digital wallet may receive deposits of digital assets but may not send digital assets without use of the digital assets’ corresponding private keys. In order to send digital assets from a digital wallet in which the private keys are kept in cold storage, either the private keys must be retrieved from cold storage and entered into an online, or hot, digital asset software program to sign the transaction, or the unsigned transaction must be transferred to the cold server in which the private keys are held for signature by the private keys and then transferred back to the online digital asset software program. At that point, the user of the digital wallet can transfer its digital assets. While private keys held in hot storage are more accessible and therefore enable more efficient transfers, such assets are more vulnerable to theft, loss or misappropriation. Security Procedures The Custodian and the Prime Broker hold the Trust’s private keys in custody in accordance with the terms and provisions of the Prime Broker Agreement. Transfers to and from the Vault Balance and, where held in cold storage, the Trust’s Settlement Balance, require certain security procedures, including but not limited to, multiple encrypted private key shards, usernames, passwords and 2- step verification. Multiple private key shards held by the applicable Custodial Entity or Entities must be combined to reconstitute the private key to sign any transaction in order to transfer the Trust’s assets. Private key shards are distributed geographically by the Custodial Entities in secure vaults around the world, including in the United States.
92
Made with FlippingBook - professional solution for displaying marketing and sales documents online