Company: ZCSH
Filing Date: 2025-03-07
Form Type: 10-K
Source: 0000950170-25-035469
Chunk: 125

Company: Grayscale Zcash Trust (ZEC)
Filing Date: 2025-03-07
Form: 10-K
Item: Item 1
Chunk 125
---
 permit, to the extent it may legally do so, the Trust’s or the Sponsor’s auditors or third-party accountants, upon reasonable notice, to inspect, take extracts from and audit the records that it maintains, take such steps as necessary to verify that satisfactory internal control systems and procedures are in place, as the Trust or the Sponsor may reasonably request. The Custodian is obligated to notify the Trust and the Sponsor of any audit report prepared by its internal or independent auditors if such report reveals any material deficiencies or makes any material objections.

The Trust and the Sponsor obtain and perform a comprehensive review of the Services Organization Controls (“SOC”) 1 report and SOC 2 each year. For additional information, see “—Description of Trust Documents—Description of the Custodian Agreement—Annual Certificate and Report.” In addition to the review of SOC 1 and SOC 2 reports, the Trust, the Sponsor and/or their respective auditors may inspect or audit the Custodian’s records in a variety of manners if considered necessary. Such processes, may include validating the existing balances as reflected on the Custodian’s user interface to nodes of the underlying blockchain and confirming that such digital assets are associated with its public keys to validate the existence and exclusive ownership of the digital assets. To validate software functionality of the private keys, the Trust may transfer a portion of its digital assets from one public key to another public key of the Trust.

The Trust, the Sponsor and their independent auditors may evaluate the Custodian’s protection of private keys and other customer information, including review of supporting documentation related to the processes surrounding key lifecycle management, the key generation process (hardware, software, and algorithms associated with generation) the infrastructure used to generate and store private keys, how private keys are stored (for example, cold wallets), the segregation of duties in the authorization of digital asset transactions, and the number of users required to process a transaction and the monitoring of addresses for any unauthorized activity. For additional information, see “—Custody of the Trust’s ZEC.” 

Annual Certificate and Report 

Once each calendar year, the Sponsor or Trust may request that the Custodian deliver a certificate signed by a duly authorized officer to certify that all representations and warranties made by the Custodian in the Custodian Agreement are true and correct on and as of the date of such certificate, and have been true and correct throughout the preceding year. 

Once each calendar year, the Trust and the Sponsor will be entitled to request that the Custodian provide a copy of its most recent SOC 1