CCA Cryptocurrency Transaction Auditing Questions and Answers

Question 1

An auditor is analyzing a series of transactions on the Bitcoin blockchain and notices a pattern where a large input is broken down, with a small amount sent to one address and the larger remaining balance sent to a new 'change' address controlled by the original sender. This process is repeated multiple times. What is this specific transaction pattern called?

Accepted Answer

Peel Chain

Answer

A peel chain is a method used to obscure the flow of funds where transactions are structured to 'peel off' small amounts of cryptocurrency to various addresses, while the bulk of the funds is moved to new change addresses in a sequential chain, making it difficult to trace the original source.

Question 2

During a compliance audit of a virtual asset service provider (VASP), an auditor is required to verify that the VASP is screening transactions against sanctioned cryptocurrency addresses. Which U.S. government agency's list is the most critical for this specific compliance check?

Accepted Answer

Office of Foreign Assets Control (OFAC)

Answer

The Office of Foreign Assets Control (OFAC) of the U.S. Department of the Treasury maintains the Specially Designated Nationals and Blocked Persons (SDN) list, which includes specific cryptocurrency addresses associated with sanctioned individuals and entities. VASPs are required to screen against this list to prevent sanctions violations.

Question 3

A Certified Cryptocurrency Auditor is tasked with verifying the existence and ownership of Bitcoin for a client. The client provides a list of their public addresses. What is the most effective procedure to confirm the client has control over the private keys associated with these addresses?

Accepted Answer

Requesting the client to sign a specific message with their private key.

Answer

The only definitive way to prove control over a private key is to use it to perform a cryptographic operation, such as signing a message. An auditor can provide a unique message, and if the client can produce a valid signature corresponding to the public address, it proves they control the associated private key.

Question 4

Which of the following is a primary audit challenge specifically associated with cryptocurrencies that use the Unspent Transaction Output (UTXO) model, like Bitcoin?

Accepted Answer

Aggregating total holdings from numerous individual outputs.

Answer

In the UTXO model, a user's balance is not a single number but the sum of all individual, unspent outputs they control across the blockchain. For an auditor, this means they must identify and sum all relevant UTXOs to verify a total balance, which can be complex compared to an account-based model where the balance is explicitly stated.

Question 5

An auditor is reviewing a company's crypto transactions and identifies several transfers sent to a service that pools funds from multiple users, mixes them together, and then sends them to new destination addresses to obscure the on-chain trail. This activity is a significant red flag for what type of illicit activity?

Accepted Answer

Money laundering

Answer

The use of mixers or tumblers is a well-known technique for money laundering. These services are designed to break the traceability of funds on the blockchain, making it difficult for auditors and investigators to follow the money from illicit sources to its final destination.

(CCA) Certified Cryptocurrency Auditor Practice Test

(CCA) Certified Cryptocurrency Auditor Practice Test

CCA Cryptocurrency Transaction Auditing Questions and Answers