Crypto Custody Risk,
AP Blind Spots.
Coldcard's $75M breach exposes custody risk your clients aren't disclosing. Plus: AP automation blind spots, agentic close tools, and a hot take on audit sampling.
The Coldcard Breach Proves Your Clients' Crypto Custody Disclosures Are Probably Wrong
Roughly $75M in Bitcoin was stolen after recovery seeds were reportedly compromised on Coldcard hardware wallets — devices specifically marketed as air-gapped and breach-proof. If your clients are holding crypto on their balance sheet and pointing to 'hardware wallet custody' as their control, that disclosure just got a lot weaker. AI-assisted financial statement review tools are still trained to flag custodial risk at exchanges, not at the hardware layer — meaning this class of exposure is likely passing through your review undetected. This is a controls gap, not just a market risk.
If a client lists crypto assets, ask them exactly where the seed phrase lives and who has access to it — 'hardware wallet' is not a sufficient answer anymore.The Accountants Who Will Price Premium Services in 2027 Are Building Judgment Frameworks Now
AI is compressing the time it takes to produce a deliverable, which means the billable hour is being squeezed from both ends — clients expect faster turnaround and lower fees, while the work that remains requires deeper judgment. The accountants holding rate right now are the ones who've stopped selling outputs and started selling the framework behind the output: the risk read, the client-specific context, the 'here's what this number actually means for your business.' Think of it like a surgeon — no one pays for the incision, they pay for knowing exactly where to cut.
Rewrite one service description this week to lead with the judgment you provide, not the task you perform.Agentic Close Orchestrators Are Solving the 'Who's Waiting on Whom' Problem in Month-End
The bottleneck in most financial closes isn't the accounting — it's the coordination: who hasn't submitted their intercompany entries, which reconciliations are stuck, what's blocking the flux review. A new class of agentic close tools (Numeric, Ava, and several ERP-native agents now in GA) assign, chase, escalate, and log close tasks without a controller having to manually ping anyone. The business case is simple: if your close takes 8 days and 3 of those are waiting on people, this cuts cycle time in half without changing your accounting at all.
If your team is still using a shared spreadsheet or email thread to track close status, you're leaving 2-3 days of cycle time on the table that a $500/month tool could recover.Audit Sampling Is the Next Process AI Kills — and Most Firms Aren't Ready for What Replaces It
Statistical sampling exists because testing every transaction was physically impossible — that constraint is gone. AI can now run anomaly detection across a full population in the time it used to take to pull a sample, and the SEC is already asking why auditors are blessing financials based on 60 transactions when the full ledger was available. When full-population testing becomes the standard, the audit isn't just faster — the liability exposure for missing something changes completely, because 'it wasn't in our sample' stops being a defense. Firms that haven't updated their methodology documentation and engagement letters for full-population coverage are building future malpractice exposure right now.
Sampling was a workaround for a resource constraint that no longer exists — your methodology should reflect that before a regulator points it out.