iRace Digital (FundBank) · Digital Asset Services

Building the Digital Asset Services platform for iRace Digital (FundBank)

A bank can use a custody vendor. It still has to keep its own record of what it holds, run its own checks before value moves, and be able to show a supervisor how a decision was made. HST is building the platform that does that for iRace Digital, from the daily custody record through to instructions that settle across fiat and digital asset systems at the same time.

The challenge

Why the bank needs its own record

iRace Digital’s custody platform is authoritative for custody. It holds the vaults, applies the policies, runs the screening and executes on chain. That is how it should be, and it does not cover everything the bank is responsible for.

The bank has to produce its own position at a defined cut-off and reconcile it. It has to keep the evidence behind a decision in a form it controls, for as long as its own retention policy says. It has to run its own checks before value moves, rather than record what the custodian decided afterwards. And when an instruction touches a fiat account and a digital asset at the same time, one system has to own the whole instruction, because a partly settled trade affects client money.

None of that is something a custody vendor sells. It is the bank’s own operating layer. These are also the same obligations HST engineers at the front of the client relationship, in due diligence and onboarding, applied to what happens after the account opens.

The boundary we drew first. The platform does not recreate what the custody vendor is authoritative for: vault custody, its policy engine, its screening integration, cryptographic signing and blockchain execution. It never holds key material. What it owns is the bank’s record, the bank’s controls and the bank’s orchestration. Getting that line right early is what stops the two systems merging into one system nobody can maintain.

The programme

Four waves, in this order for a reason

Establish the bank’s record first, then the controls that depend on it, then the orchestration that depends on both. Doing it the other way round means moving client value through a system that cannot yet prove what it did.

Authenticated access to the custody platform in each regional instance, the canonical banking client identifier set as the single key, and every client resolving to the correct vault and wallets.
That identifier is the same one the client was onboarded under, which is why HST's work on the bank's KYC estate and on its custody record is one conversation rather than two. It is unglamorous work, and an identity mapping that is wrong produces reconciliation breaks that keep coming back.
Custody events received and kept as raw evidence before anything interprets them. The bank's own view of vaults, wallets, balances, deposits and transfers.
Screening results held as the bank's own compliance evidence. And an immutable end-of-day position for every client, vault and asset at a fixed cut-off, with an explicit completeness result, so a failed run shows up as an exception instead of a zero.
The controls the bank has to own, because neither the custody platform nor the existing banking beneficiary function provides them. Digital asset beneficiaries mapped across client accounts.
Address whitelisting with VASP and unhosted-wallet classification. Inbound quarantine released only once the address book and screening checks pass. Outbound transfers restricted to approved addresses under two-factor and maker-checker approval. Formal reconciliation and independent market data. Travel Rule handling. And an internal workbench that gives Operations and Compliance the queues, breaks and evidence in one place.
Vault lifecycle automated from the onboarding journey. Multiple vaults per client, aggregated for client display while keeping vault-level detail for reconciliation.
And the orchestration of an instruction that spans a core banking fiat leg, a trading provider and the custody leg, under one correlation identifier, with every leg reconciled and a definite completed, partial, failed or exception outcome returned to the channel.
What is deliberately held back. Staking, DeFi and broader unified processing are named as future capabilities. They shape how extensible and how well secured the platform has to be, but they do not add complexity to the waves that have to pay for themselves first.

The operating model

Three systems , one clear line of responsibility

The client channel stays client-facing. The custody platform stays authoritative for custody. Everything the bank itself has to own sits between them.

Figure 1. The responsibility model. Each system keeps what it is genuinely authoritative for, which is what makes the boundary between them stable enough to build on.

Domain expertise applied

The financial disciplines the platform implements

Digital asset custody is a new venue for some quite old disciplines. The engineering only holds up if each decision traces back to the control it serves.

The bank’s own custody record, rebuildable entirely from source evidence it kept itself, so it survives a vendor outage, a contract change or an API deprecation.

An immutable position per business date, client, vault and asset at a fixed cut-off, with an explicit completeness result. A closed accounting period rather than a cached query.

A missing position and an empty position are different facts. A failed retrieval is recorded as an auditable exception and never reported as zero.

Amounts converted between the raw on-chain unit and the displayed value using per-asset precision rules, with environment-specific reference data validated before deployment. A test asset reference in a production position is a silent error, so it gets checked.

Two independently derived views held on purpose, so divergence shows up as a break rather than as an assumption nobody tested.

Screening results kept as the bank’s own evidence with the provider’s reference preserved, and re-screening at transaction time rather than relying on a check run when the record was created.

A beneficiary and address book the bank owns: duplicate prevention, per-network whitelisting, VASP or unhosted-wallet classification with enhanced verification for the latter, and approved addresses deactivated and recreated rather than edited in place.

Two-factor and maker-checker approval on whitelisting and on outbound value, with approval chains kept immutably, and the whitelist and screening revalidated immediately before submission rather than only when the request was raised.

Inbound value held until the required controls pass. Where the source address is not in the client’s address book, the client is asked to register it before release. Nothing releases by default.

Counterparty and transaction context kept from the start, so the obligation can be met operationally now and automated later without having to reconstruct history.

One correlation identifier carried across the fiat, trading and custody legs, every leg reconciled and a definite outcome returned, so a partly settled instruction is a known state with a defined remedy.

Custody records logically segregated by banking jurisdiction and routed to the corresponding regional instance, validated for no cross-jurisdiction leakage.

Every command and vendor request keyed on a stable identifier and tolerant of retry and out-of-order arrival, which is what makes rebuilding the record from evidence a routine operation.

One controlled vocabulary across screens, specifications, database design and client communication, with product-facing statuses kept separate from raw vendor statuses.

A detail worth dwelling on

Controlled terminology is an operational control

Loose language in digital assets causes real defects. “Address” on its own has meant three different things in three different specifications on this programme alone. One agreed glossary covers screens, specifications, developer documentation, database design and client communication.

Used

Never used

Wallet Address

The unique on-chain identifier. Case is preserved exactly, because several networks are case sensitive and normalising an address destroys it.

Deposit / Transfer

Inbound and outbound movement respectively. The direction is carried in the noun, so no specification has to state which way it means.

Transaction Hash

The on-chain identifier. “Transaction ID” is reserved for the bank’s internal reference, and the two are never swapped.

VASP

Virtual asset service provider. The bank is the VASP of its clients, and the sending or receiving VASP when assets move to or from a counterparty’s provider. That distinction underpins Travel Rule obligations.

Unhosted wallet

An address not held at a service provider. Flagged as higher risk and subject to enhanced verification before whitelisting.

Quarantine

The state inbound value is held in until the required controls pass. Release needs approval and is never automatic.

KYT

Know-your-transaction. Blockchain analytics screening, kept as compliance evidence with its provider reference.

Display status

The state a client sees, such as Held for Review, Processing or Confirmed. Kept separate from, and mapped to, the underlying vendor status held for audit.

What it changes

What the bank holds, and what it can then do

A defined cut-off, an immutable position, and a completeness result a controller can rely on and an auditor can test.
Whitelisting, beneficiary verification, screening and maker-checker applied by the bank in its own right, rather than inherited from a vendor's configuration.
Screening results, policy decisions and approval chains held on the bank's own retention policy, with the provider reference kept for follow-up.
Stable client, vault and transaction identifiers mean the interim client path can move onto platform APIs later without losing audit continuity across the changeover.
Multiple vaults per client, new networks and new assets are reference data and configuration rather than a re-architecture, which is what decides how quickly the bank can launch the next thing.
A controlled vocabulary across screens, schemas, specifications and client communication, which removes a whole category of defect before anyone writes code.

Financial services domain expertise

The disciplines behind this work
Our financial services work is organised around the regulated disciplines below rather than around a technology stack. The highlighted ones are used directly on this engagement.
01

Client onboarding &
financial crime

KYC / CDD
Enhanced due diligence
Beneficial ownership
PEP & sanctions screening
AML
Transaction monitoring
KYT / blockchain analytics
Travel Rule
Client lifecycle management
02

Regulatory & tax

FATCA
OECD CRS
MiFID II client categorisation
Jurisdictional segregation
Record keeping & retention
Audit evidence
Regulatory data architecture
03

Banking operations &
control

Books & records
Position keeping & valuation
End-of-day close
Reconciliation
Four-eyes / maker-checker
Mandate & payment authority
Settlement orchestration
04

Custody & platform
engineering

Custody operating model
Vault & wallet lifecycle
Address whitelisting
Deposit quarantine
Key custody & MPC
Threshold cryptography ops
Cloud landing zone & SRE
Highlighted disciplines are used on this engagement. This page covers the custody infrastructure part of that list. The onboarding, financial crime and banking operations work sits in the same practice, with the same team.

Custody your own assets, keep your own record

Position close, reconciliation, screening evidence, whitelisting and settlement orchestration are obligations of the institution rather than features of a custody vendor. We build the layer that carries them.
COMMON QUESTIONS

Frequently asked questions

Digital asset services provide the technology, infrastructure and operational capabilities required by institutions to securely manage and operate digital assets.

iRace Digital supports institutional digital asset operations through technology and infrastructure designed to help organisations manage digital assets and related operational processes.

Digital asset services are designed for institutional organisations that require secure and scalable infrastructure to support their digital asset operations.

Digital assets require controlled infrastructure for managing access, transactions, operational processes and security. Secure infrastructure helps institutions manage these activities in a controlled environment.

Digital asset infrastructure can bring together technology, security and operational processes to support the management of digital assets at an institutional level.

Digital asset services form part of the broader technology capabilities provided by iRace Digital for institutional financial and digital asset operations.

TESTIMONIALS

HST Solutions is
Truly Committed
To The Clients We Serve.

Book a free call to discuss your ideas with us!
FLEXIBLE ENGAGEMENT MODELS

Find The Perfect Solutions For Your Project

Managed Team

Your product, our dedicated team. From concept to conception, we handle it all.

Staff Augmentation

Need extra hands? Our experts seamlessly join your team, providing the skills you need, when you need them.

Fixed Cost

Upfront price, guaranteed delivery. Your project completed on time and within budget.

    EXPLORE MORE WAYS WE CAN HELP

    Need a Different Approach?

    Compare All Engagement Models

    What is 2 x 6?

    What Makes Us Stand Apart

    We Have Deep
    Technical & Industry Experience

    One Team, One Dream

    At HST, there is no such thing as not my problem.

    Build Trust with Every Interaction

    We’re accountable to our clients and to each other. which means being open even when things aren’t going smoothly.

    Improve Everything

    The world of software and business moves fast so we re always learning and honing our skills.

    Own It

    We are a team of doers and we take responsibility for the success of everything we do.

    Obsessed: Over Results

    We’re obsessed with driving business value for our clients and we know that starts with gaining a deep understanding of the problems they’re facing

    Proven Excellence

    Our word is our bond. With 250+ projects delivered on time and within budget, we’ve built a reputation for keeping every promise.

    Partners in Precision

    Financial services, insurance, healthcare, retail, media. Trust built where excellence is the only option.

    Who Are We ?

    Creativity, Efficiency, & Advanced AI

    Strategy

    We've got all the big ideas and creative talent of an ad agency or creative studio except we deliver working products, not expensive presentations.

    Engineering

    We develop lean, stable code using all the best practices of any leading dev shop, except we focus on the user experience so people actually like using what we build.

    Design

    We validate, design, and prototype proof-of-concepts like any "creative technology" studio, but we do it in less time and for less money.

    Co-paired AI

    Co-paired AI development ensures twice the efficiency at a lower cost. We prioritize your software for innovative, precise, scalable, and quality-assured applications.

    Strategy

    We've got all the big ideas and creative talent of an ad agency or creative studio except we deliver working products, not expensive presentations.

    Engineering

    We develop lean, stable code using all the best practices of any leading dev shop, except we focus on the user experience so people actually like using what we build.

    Design

    We validate, design, and prototype proof-of-concepts like any "creative technology" studio, but we do it in less time and for less money.

    Co-paired AI

    Co-paired AI development ensures twice the efficiency at a lower cost. We prioritize your software for innovative, precise, scalable, and quality-assured applications.