①A cryptoasset exchange service provider must, in connection with its cryptoasset exchange services, manage the money of the users of cryptoasset exchange services separately from its own money and entrust the users' money with a trust company, etc., pursuant to the provisions of Cabinet Office Order.

②A cryptoasset exchange service provider must, in connection with its cryptoasset exchange services, manage the cryptoassets of the users of the cryptoasset exchange services separately from its own cryptoassets, pursuant to the provisions of Cabinet Office Order. In this case, the cryptoasset exchange service provider must manage users' cryptoassets (excluding cryptoassets that satisfy the requirements specified by Cabinet Office Order as being necessary for ensuring the convenience of users and achieving smooth provision of cryptoasset exchange services) by the method specified by Cabinet Office Order as being less likely to weaken the protection of users.

③A cryptoasset exchange service provider must, pursuant to the provisions of Cabinet Office Order, undergo a periodic audit by a certified public accountant or by an audit corporation, with regard to the state of management under the provisions of the preceding two paragraphs.