What audit readiness means for institutional crypto users