Company: GSUI
Filing Date: 2025-12-05
Form Type: S-1
Source: 0001193125-25-309828
Chunk: 221

Company: Grayscale Sui Trust (SUI)
Filing Date: 2025-12-05
Form: S-1
Chunk 221
---
 to which Staking Consideration shall be sent.

In addition, the Staking Arrangements do not alter the Trust’s custody environment or security procedures. The controls currently in place between the Sponsor and the Custodian also govern the activities related to staking and un-staking SUI, as outlined in the

<div align='center'>111</div>

Staking Arrangements. These controls and procedures include:

Private Key Management (“Shards”) : The Custodian manages SUI for the Trust using offline storage, or cold storage, which means that the keys to the Trust’s SUI are disconnected and/or deleted entirely from the internet. Transfers and other transactions from the Trust’s wallet require compliance with certain security procedures that will remain in place when the Trust’s SUI is staked, including but not limited to, multiple encrypted private key “shards,” usernames, passwords and 2-step verification. Multiple private key shards held by the Custodian must be combined to reconstitute the private key to sign any transaction and transfer the Trust’s assets. Private key shards are distributed geographically in secure vaults around the world, including in the United States. The Custodian’s system architecture requires the involvement of the Sponsor to reconstruct the private keys and access the Trust’s assets, and it is not possible for the Custodian’s employees to access the Trust’s assets without the Sponsor’s involvement and approval. This architecture is part of the Custodian’s service organizational controls (“SOC”) Type I and Type II reports, which are authored by leading assurance providers to confirm to the Custodian’s clients that the Custodian is compliant with a variety of security and reporting standards, and which are delivered to the Sponsor for review on an annual basis.

General Controls on the Custodian’s Custody Environment : Data related to transaction activity executed on the Custodian’s platform is backed-up and saved to both an alternative location (besides the primary location) and to a “Disaster Recovery” Amazon Web Services (“AWS”) Account to enable recoverability in an event one of the regions becomes unavailable. Authentication requirements for the Custodian’s platform are restricted through two-factor authentication and encrypted network protocols, among others.

User Entity Controls : In addition to security controls in place at the Custodian, the Sponsor expects to implement additional controls and procedures, including, but not limited to, (i) reviewing the Custodian’s SOC report to ensure private key management and other general controls are consistently applied and operating without exceptions, (ii) periodically reviewing Sponsor team members’ access