DFI Labs

Risk governance ยท April 2026

Why 24/7 markets demand 24/7 risk.

Most institutional risk frameworks were built around the idea that markets open, trade, and close. Digital assets remove the close. That single structural change has second-order consequences that are easy to underestimate until the first weekend incident.

The lost assumption

Traditional market risk frameworks contain a hidden assumption: a daily close exists at which positions are marked, valuations are crystallised, margin calls are issued, and tomorrow's exposure is reasoned about as a separable object. The close is the point at which risk becomes, temporarily, discrete. Saturday and Sunday are the other side of that assumption — a window in which nothing material can happen because no one can trade.

Digital asset markets invalidate both halves. Spot venues trade continuously. The funding mechanism on the derivatives side settles several times per day. Price moves large enough to trigger margin calls can and do occur at 03:00 UTC on a Sunday. There is no structural pause in which a human team can catch up.

What this changes in practice

The operational implications fall into four categories.

What a credible 24/7 risk stack looks like

We separate three tiers, each with its own operating rhythm.

Tier one — pre-trade. Hard limits enforced at the venue-integration layer. Position size, venue concentration, instrument concentration, and gross/net exposure are validated before an order is released. A rejected order never reaches the venue. This tier requires no human presence.

Tier two — real-time supervision. A monitoring layer consumes live positions, venue health signals, and market data, and compares them against a policy set. Deviations produce prioritised events. Low-severity events queue for the next business day. High-severity events page the on-call. This tier is designed to run unattended but to escalate cleanly.

Tier three — daily review. A research and risk committee reviews the prior 24 hours on a human cadence. Every severity-two or above event is reviewed, classified, and either closed or converted into a remediation action. This is the tier that retains institutional memory.

Practical observation. The pattern that most often fails institutional investors is not the absence of any one of these tiers, but the assumption that a strong tier three compensates for a weak tier one. It does not. By the time a daily committee reviews a breach, the economic damage is already booked.

What institutional investors should ask

For professional investors evaluating a digital asset manager, a useful set of questions sits underneath the glossy pitch-book:

The answers distinguish a manager that has internalised the continuous-market structure from one that is still running a weekday process with a crypto veneer.

Closing thought

The absence of a market close is the single most underestimated structural feature of digital asset investing. The compensating structure — a genuinely continuous risk framework — is not exotic. It is simply the translation of traditional institutional discipline into a market that does not stop. Firms that have already done that translation tend to become easier, not harder, to underwrite.

Continue the conversation.

We are happy to walk professional investors through our risk-governance stack in detail.