companies

Bitcoin Treasury Risk Management: A CFO Guide for 2026

Holding Bitcoin on the corporate balance sheet requires structured risk management. Here is how finance teams approach custody, accounting, hedging, and board governance for BTC treasury positions.

bitcoin treasurycorporate financerisk managementCFObitcoin accounting

MicroStrategy pioneered the Bitcoin treasury strategy, but most corporate finance teams lack a framework for actually managing the risks. This guide covers what CFOs need to implement a defensible Bitcoin treasury policy.

The Core Risk Categories

Bitcoin treasury management involves five distinct risk categories:

Price risk — Bitcoin's volatility affects reported financial results and balance sheet values. A 30% drawdown on a $50M position creates $15M in unrealized losses.

Custody risk — Improper key management can result in permanent loss with no recourse. Unlike a bank account, there is no insurance, no fraud reversal, and no customer service.

Accounting risk — Bitcoin accounting treatment affects earnings per share, covenant compliance, and investor communications.

Regulatory risk — Bitcoin's regulatory status continues evolving. New rules could restrict corporate holdings, change tax treatment, or require additional disclosures.

Liquidity risk — Converting large Bitcoin positions to cash in illiquid markets or under time pressure can result in significant slippage.

Establishing a Bitcoin Treasury Policy

A Bitcoin treasury policy document should address:

Allocation Limits

Most corporations cap Bitcoin at 1-10% of total treasury assets. The specific limit depends on:

  • Cash runway requirements (never put survival capital into volatile assets)
  • Board risk appetite
  • Investor base composition (institutional investors have constraints on portfolio companies' crypto exposure)
  • Accounting materiality thresholds

A common structure: maintain 12-18 months of operating expenses in cash/money market, then allocate up to 5% of excess treasury to Bitcoin.

Custody Policy

The policy must specify:

  • Institutional custodian required — personal hardware wallets are not appropriate for corporate treasury
  • Approved custodians — BitGo, Anchorage, Coinbase Custody, Fidelity Digital Assets
  • Insurance requirements — minimum coverage level against theft
  • Multi-party authorization — requires CFO + CEO or board approval for any withdrawal
  • Cold storage percentage — what portion must be in cold storage vs. accessible hot wallets

Purchase/Sale Authorization

Define who can authorize Bitcoin transactions:

  • Small purchases (under $X): CFO authority
  • Medium purchases ($X to $Y): CFO + CEO
  • Large purchases (over $Y): Board audit committee approval
  • Emergency sales: defined criteria and escalation path

Accounting Treatment in 2026

FASB ASC 350-60 (effective for fiscal years beginning after December 15, 2024) is now the standard for corporate Bitcoin accounting.

The key change: Bitcoin is now carried at fair value with gains and losses flowing through the income statement. This replaced the previous "indefinite-lived intangible" treatment that required impairment charges but never recognized gains.

Income statement impact: Unrealized Bitcoin gains and losses now flow through "Other income/expense" or a separate line item on the income statement. A quarter with a 20% Bitcoin price increase on a $50M position adds $10M in income. A 20% decline subtracts $10M.

Earnings volatility: CFOs must prepare the board and investors for Bitcoin-driven earnings swings. Consider whether to add a non-GAAP metric that excludes Bitcoin mark-to-market for clearer operational results visibility.

Tax: Bitcoin gains are not taxable until realized (sold). The accounting gain creates a deferred tax liability on the balance sheet.

Hedging Strategies

Pure Bitcoin exposure maximizes upside but increases earnings volatility. Hedging tools:

Covered calls: Sell call options against your Bitcoin position to generate income and cap upside. Reduces volatility in exchange for capped gains.

Put options: Buy downside protection at a cost (the premium). Limits maximum loss to the option cost. Most appropriate when approaching a covenant threshold or during periods of extreme uncertainty.

Natural hedge through liabilities: Some companies issue Bitcoin-denominated debt, creating a natural offset between the asset and liability. MicroStrategy's convertible note structure is the most visible example.

Partial liquidation triggers: Define price levels at which the company will sell a portion of its Bitcoin position to lock in gains. Removes the emotional element from tactical decisions.

Investor Communication

Bitcoin treasury requires proactive investor communication:

Initial disclosure: Announce the policy before the first purchase. Explain the rationale, risk limits, and governance structure. Surprise Bitcoin disclosures damage credibility.

Quarterly reporting: Report Bitcoin holdings, average cost basis, current market value, and unrealized gain/loss each quarter. Consider a dedicated Bitcoin treasury page on the investor relations website.

Covenant compliance: If you have debt covenants tied to financial ratios (debt/EBITDA, current ratio), model the impact of Bitcoin drawdowns on covenant compliance. Obtain waivers proactively if needed.

Board and Audit Committee Involvement

The board and audit committee should:

  • Approve the initial Bitcoin treasury policy
  • Review the policy annually
  • Receive quarterly Bitcoin treasury reports
  • Approve any custody provider changes
  • Review the accounting treatment with the auditors

Document all board approvals. If Bitcoin treasury becomes a shareholder concern, you want records showing appropriate governance.

Frequently Asked Questions

Can our bank hold Bitcoin for us? A growing number of banks offer digital asset custody, including US Bank, BNY Mellon, and others. Many companies prefer purpose-built digital asset custodians like BitGo or Anchorage for more specialized controls.

What do auditors require for Bitcoin? Auditors require proof of existence (blockchain confirmation of wallet address and balance), proof of ownership (access to signing keys), and assessment of internal controls over key management. Brief your auditors early — Bitcoin audit procedures are newer and require more preparation time.

How do we handle a 50%+ drawdown? Define in advance whether the policy allows averaging down during drawdowns or requires selling to reduce risk. Improvising under pressure leads to poor decisions. Document the policy; enforce it.

Should we use a Bitcoin yield strategy? No. Generating yield on corporate Bitcoin (lending, staking equivalents) introduces counterparty risk that is inappropriate for treasury management. Keep it simple: hold Bitcoin, take no yield risk.

Bottom Line

Bitcoin treasury management is not materially more complex than managing any other volatile asset class — it requires the same discipline: defined allocation limits, institutional-grade custody, clear governance, and transparent investor communication.

The companies doing it well in 2026 have a documented policy, a qualified custodian, and a CFO who can explain the strategy to a skeptical audit committee. Build the governance before the first purchase.

Stay Up to Date on Bitcoin

Get our free Beginners Guide to Buying Bitcoin plus weekly insights for long-term holders.

Related Posts