IIA Wants Mandatory Internal Audits for US Crypto Exchanges

The Institute of Internal Auditors said it wants an independent internal audit function at all US crypto exchanges to restore investor confidence in the industry

article-image

chase4concept/Shutterstock modified by Blockworks

share

The Institute of Internal Auditors sent a letter to Congress Thursday recommending that all US crypto exchanges have an independent “internal audit function.”

Inside were four separate legislative proposals that will “promote stronger corporate governance, greater transparency and accountability, and enhanced investor protections at cryptocurrency exchanges operating in the United States,” according to the May 4 letter written by Anthony Pugliese, president and CEO of the IIA.

The second proposal defines an internal audit function as “a professional individual or group…responsible for providing the board of directors and management with…: objective assurance over the covered entity’s internal controls; consulting services; and strategic advice on risk mitigation.”

Additionally, the second proposal stipulates that the internal audit function will be independent from management.

The third proposal mandates the establishment of this internal audit function for all US crypto exchanges. The leader of the function will also be responsible for briefing a crypto exchange’s board on “material risks” no less than twice a year.

This IIA previously sent a letter to Congress in December following the collapse of FTX to begin a dialogue with lawmakers and “help shape their policy recommendations” amid the crypto winter. 

“The IIA conducted numerous meetings with congressional staff and external stakeholders to determine the appropriate role that internal audit could serve in potential policy solutions that Congress might consider regarding the lack of sufficient investor protections and corporate governance safeguards at cryptocurrency exchanges,” Pugliese wrote in the May 4 letter.

The final proposal that was attached to the IIA letter suggested that lawmakers create an annual auditing report that the management staff of crypto exchanges must fill out and send to whichever regulatory authorities Congress deems appropriate. Management would also have to have evaluated the effectiveness of the company’s internal controls 90 days prior to submitting the report. 

Pugliese closed out his message to lawmakers telling them that these guidelines could bolster investor confidence in a sector that’s been hammered by numerous shady actors.

“The IIA believes inclusion of new internal audit requirements will, in part, promote transparency and accountability designed to restore investor confidence in the cryptocurrency market,” he wrote.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 24 - 26, 2026

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Unlocked by Template (1).jpg

Research

As AI supercharges surveillance, privacy becomes a prerequisite and the winning stack will combine confidentiality with selective disclosure. Zcash’s Tachyon, composable standards on Ethereum/Solana, and compliance-aware pools aim to make private rails the new norm.

article-image

375ai will hold TGE at the end of the month, CEO Harry Dewhirst told Blockworks

article-image

Block’s subsidiary adds direct Bitcoin integration and AI-powered ordering tools for small businesses seeking streamlined transactions

by Blockworks /
article-image

The deal integrates Dinero’s staking suite into Plume’s real-world asset platform as it gains SEC transfer agent status

by Blockworks /
article-image

The state’s decision opens staking access to New Yorkers, signaling a regulatory shift toward broader crypto participation

by Blockworks /
article-image

The startup says it aims to rival Stripe and Worldpay by using stablecoins to speed merchant settlements from days to seconds

by Blockworks /
article-image

“S&P 500” for crypto comes as segment gains “established role in global markets,” S&P exec says