Company: GSUI
Filing Date: 2025-12-05
Form Type: S-1
Source: 0001193125-25-309828
Chunk: 178

Company: Grayscale Sui Trust (SUI)
Filing Date: 2025-12-05
Form: S-1
Chunk 178
---
 may be accessed and transferred using a corresponding private key.

Key Generation

Public addresses and their corresponding private keys are generated by the Custodian in secret key generation ceremonies at secure locations inside faraday cages, which are enclosures used to block electromagnetic fields and thus mitigate against attacks. The Custodian uses quantum random number generators to generate the public and private key pairs.

Once generated, private keys are encrypted, separated into “shards”, and then further encrypted. After the key generation ceremony, all materials used to generate private keys, including computers, are destroyed. All key generation ceremonies are performed offline. No party other than the Custodian has access to the private key shards of the Trust, including the Trust itself.

Key Storage

Private key shards are distributed geographically by the Custodial Entities in secure vaults around the world, including in the United States. The locations of the secure vaults may change regularly and are kept confidential by the Custodian and the Prime Broker for security purposes.

<div align='center'>90</div>

The Vault Balance primarily uses “cold” storage mechanisms to secure a substantial portion of the Trust’s private keys. A substantial portion of the Trust’s SUI holdings are held in cold storage at all times, with a portion of the Settlement Balance held temporarily in “hot” storage from time to time, for purposes of facilitating the receipt and distribution of SUI in connection with the creation and redemption of Baskets. Any SUI credited to the Trust’s Settlement Balance is stored in omnibus accounts, either on the Prime Broker’s systems or at Coinbase Connected Venues, using a combination of cold and hot storage mechanisms to secure the private keys representing the assets credited to the Trust’s Settlement Balance.

Cold storage is a safeguarding method with multiple layers of protections and protocols, by which the private keys corresponding to the Trust’s SUI are generated and stored in an offline manner. A digital wallet may receive deposits of digital assets but may not send digital assets without use of the digital assets’ corresponding private keys. In order to send digital assets from a digital wallet in which the private keys are kept in cold storage, either the private keys must be retrieved from cold storage and entered into an online, or hot, digital asset software program to sign the transaction, or the unsigned transaction must be transferred to the cold server in which the private keys are held for signature by the private keys and then transferred back to the online digital asset software program. At that point, the user of the digital wallet can transfer its digital assets. While private keys held in