Executive Summary
- The Nigerian company can pursue its own treasury loss through Singapore proceedings if it establishes its title and the court's jurisdiction. The manager's residence helps locate and serve her; it does not determine every asset's location or the applicable law. (Companies and Allied Matters Act 2020, ss 42–43 and 341; Supreme Court of Judicature Act 1969, s 16.)
- USDT can support a proprietary claim under Singapore law. ByBit recognised it as property capable of being held on trust and granted relief against a fraudulent recipient. That holding does not establish ownership, wrongdoing or recovery in a different dispute. (ByBit Fintech Ltd v Ho Kai Xin [2023] SGHC 199, [36]–[45].)
- A proprietary injunction protects identified assets claimed as the company's property. A freezing order restrains dealings with the defendant's assets to protect a possible judgment. The latter requires a good arguable case and a real risk of unjustified dissipation; an allegation of theft alone is insufficient. (Zhong Renhai v Goh Sock Ngee [2025] SGHC 43, [16]–[27].)
- Interim protection leaves liability to be proved. Parastate obtained freezing relief but later lost its claims at trial. Contracts, beneficial ownership and the actual duties undertaken remain decisive. (Parastate Labs Inc v Wang Li [2023] SGCA 27, [1]–[6]; Parastate Labs, Inc v Wang Li [2026] SGHC 178, [74]–[109] and [193].)
- Exchange assistance depends on the responsible legal entity, the records or assets it controls and an available jurisdictional route. A platform's receipt of an alert does not itself impose a binding duty to freeze or disclose. A wallet address alone does not establish the named manager's control. (ByBit, [25] and [41]; Cheong Jun Yoong v Three Arrows Capital Ltd [2024] SGHC 21, [35]–[41].)
- Customer assets and an insolvent affiliate's property require a different claimant and authority analysis. Custody can preserve customer ownership without creating a trust, while an investment contract can transfer ownership and leave a repayment claim. (Re Taylor, Joshua James [2025] SGHC 104, [30]–[38]; Parastate [2026] SGHC 178, [95]–[109].)
- The board should fund a staged evidence and counsel package before committing to full proceedings. Its decision must include the cross-undertaking in damages, possible security for costs and an executable route to assets. If the Singapore connection or recoverable value is inadequate, preserve the evidence and pursue the forum connected to the identified holder or intermediary. (Supreme Court Practice Directions 2021, paras 63 and 73; Cova Group Holdings Ltd v Advanced Submarine Networks Pte Ltd [2023] SGHC 178, [13]–[20].)
Company ownership and authority to litigate
The Nigerian company should bring the claim for its own reserves. Incorporation creates a separate body corporate, and CAMA generally reserves proceedings for a wrong to a company to that company. A director's access to a wallet does not make its contents the director's property. Nor does common ownership make a parent's balance available to a subsidiary. The acquisition records, treasury accounts and funding arrangements must identify the entity whose assets were diverted. (Companies and Allied Matters Act 2020, ss 42–43 and 341.)
For this company, the evidence package should connect its acquisition of USDT to its treasury ledger and the relevant addresses. Bank payments to acquire tokens, exchange statements, internal transfers and the manager's mandate should reconcile. If another group entity supplied the funds, the agreement must distinguish a loan from custody or agency. A borrower can own assets bought with borrowed money; an entity holding another's assets may lack the beneficial claim advanced here. ByBit's finding of ownership depended on its own facts, including the defendant's acceptance that the assets belonged to the claimant. (ByBit, [15], [25] and [44].)
CAMA allocates management powers through the Act, the company's articles and valid delegations. Nigerian counsel should confirm the directors, quorum and decision-making procedure. The board resolution should authorise Singapore solicitors, proceedings, evidence preservation, litigation expenditure and any cross-undertaking. It should identify who can swear affidavits and approve settlement or asset return. A special shareholder resolution is not universally required; a disabled board or an attempted derivative claim engages different provisions. (CAMA 2020, ss 87–90 and 346.)
If the property belongs to a Nigerian group company in a court winding-up, its liquidator's powers become material. Directors ordinarily lose their powers on the liquidator's appointment unless the court permits otherwise. Bringing proceedings in the company's name and appointing a legal practitioner require sanction from the court or committee of inspection. A solvent parent cannot substitute itself merely because it can fund the case. Obtain the appointment and necessary sanction before committing the insolvent owner's claim. (CAMA 2020, ss 585(9) and 588(1)(a), (c).)
USDT ownership after ByBit
The strongest Singapore proprietary case concerns stolen USDT whose ownership and subsequent path can be proved. In ByBit, the High Court classified USDT as a chose in action, an intangible proprietary right enforceable through proceedings. The court held that it could be held on trust. The issuer's separate redemption obligation was unnecessary to that classification. The decision therefore supports a USDT property claim without proving that this company itself has a right to redeem directly with the issuer. (ByBit, [4], [33]–[39].)
The court granted summary judgment against a payroll employee who fraudulently diverted assets; that application was unopposed. It declared an institutional constructive trust, arising from the wrongdoing rather than a later discretionary redistribution. The orders included payment, transfer of remaining assets, an account and tracing. The court did not decide the alternative unjust-enrichment or remedial constructive-trust claims. Its finding cannot be expanded into a rule that every token, custodian or loss produces the same trust. (ByBit, [18] and [41]–[45].)
Later cases require attention to the transaction that created the alleged entitlement. In Re Taylor, customers retained legal and beneficial ownership under the exchange's terms, although no trust arose. In Parastate, the court rejected a claimed express trust over an investment arrangement and treated the relevant transfer as an outright transfer with contractual obligations. Segregation language, a wallet balance or the word custody cannot replace an examination of the agreement and actual asset records. (Re Taylor, [14]–[30] and [37]–[38]; Parastate [2026] SGHC 178, [95]–[109].)
For the alleged theft, the manager's best ownership defence would be a genuine entitlement to the disputed assets or proof that the company held them for someone else. An authorised investment or payment would also require a different analysis from an unauthorised diversion. The company should prove the absence of authority for each transfer, rather than treating an unexpected destination as conclusive evidence of theft.
The Singapore forum and applicable law
The identifiable manager gives the company a practical starting point for Singapore proceedings. Section 16 of the Supreme Court of Judicature Act connects ordinary personal jurisdiction to valid service or submission. Residence supplies evidence about where service can occur. It is not a substitute for service, and it does not automatically establish jurisdiction over an overseas exchange. The claim should identify the defendant, her connection with the alleged conduct and the relief sought against her. (Supreme Court of Judicature Act 1969, s 16.)
If service outside Singapore becomes necessary, the company must establish the required Singapore connection, that Singapore is the appropriate forum and sufficient merit in its claim. Cheong requires a good arguable case of sufficient nexus and a serious question to be tried. The claimant retains the burden when permission is challenged. For this dispute, the manager's Singapore activities, relevant communications, witnesses and reachable assets strengthen the proposed forum. A Nigerian claimant's preference for Singapore does not supply those connections. (Rules of Court 2021, O 8 r 1; Supreme Court Practice Directions 2021, para 63(2); Cheong, [35]–[41].)
Counsel should read the complete outsourcing agreement before selecting claims. The contracting party may be the manager or her employer. Governing-law, exclusive-forum and arbitration provisions require separate treatment. A Singapore hearing does not make Singapore law govern the contract, a trust or every transfer. A valid arbitration agreement can require a stay of covered court claims, while court assistance with interim measures has its own statutory conditions. (Cheong, [78]–[79]; Three Arrows Capital Ltd v Cheong Jun Yoong [2024] SGHC(A) 10, [35]–[39]; International Arbitration Act 1994, ss 6 and 12A.)
Cryptoasset location should not be inferred from the defendant's residence alone. Cheong accepted an arguable connection to the residence of a person controlling the relevant private key in its service-out analysis. The Appellate Division's refusal of permission to appeal did not establish a universal rule for every token or exchange account. Other jurisdictional connections supported the result, and the distinction between lawful ownership and control was not contested there. Here, the company, manager and exchange may have different rights and locations. (Cheong, [57]–[65]; Three Arrows Capital Ltd v Cheong Jun Yoong [2024] SGHC(A) 10, [30]–[35].)
If only an unidentified wallet or overseas exchange is known, the original Singapore rationale changes. The company should identify the intermediary's legal entity, account terms, records location and enforcement jurisdiction. A claim against persons unknown still needs a defined defendant class, a substantive claim, a jurisdictional basis and effective service directions. Singapore's willingness to grant cryptoasset injunctions does not supply a worldwide investigative jurisdiction. (CLM v CLN [2022] SGHC 46, [28]–[35]; Cheong, [35]–[41].)
Evidence connecting the manager to the diversion
The first-stage package should preserve originals before staff amend spreadsheets, reset systems or confront the alleged wrongdoer. Secure remaining company-controlled wallets and credentials through authorised personnel while preserving logs of those changes. Retain the outsourcing agreement and amendments, treasury approvals, access permissions, payment instructions and accounting entries. Preserve native spreadsheet files, formulas and version histories alongside messages, email headers, access logs and lawful device images. Keep the altered files and the records against which alterations can be tested. A reconstructed spreadsheet should be labelled as an analytical aid and linked to its source records.
For each transfer, record the blockchain, token contract, quantity, transaction hash, timestamp and sending and receiving addresses. A tracing specialist should explain how the company funded the source address and how each later transfer relates to the claimed assets. The report should distinguish direct observation from clustering, exchange attribution and other inferences. Mixing, internal exchange movements, swaps and fees require an explanation that another expert can test.
Attribution requires evidence beyond a transaction hash. In ByBit, exchange disclosure connected a wallet to identity records, while transaction data and surrounding conduct reinforced the finding. For this manager, account-registration records, withdrawal approvals, device logs, communications and witness evidence should be compared. A claim that someone else accessed her account or altered the files must be investigated and disclosed where material. (ByBit, [22], [25] and [41].)
Document who collected each record, when it was collected, the method used and how integrity was preserved. Obtain statements from the people who know the company's systems and payment process. Protect access credentials separately from the litigation bundle. Company authority to preserve its records does not justify accessing the manager's personal accounts without lawful authority.
Preservation should also support any Nigerian proceedings. Section 84 of Nigeria's Evidence Act, as amended in 2023, addresses computer-produced statements and electronic records. Keep the source, production method and system information, and identify the responsible people able to supply the relevant certificate or evidence. Those Nigerian provisions do not determine admissibility in Singapore, where counsel must apply the forum's evidential and expert-evidence rules. (Evidence Act 2011, s 84, as amended by the Evidence Act (Amendment) Act 2023, ss 2–3; Rules of Court 2021, O 12 rr 1–2.)
Counsel should structure confidential legal advice and forensic work with privilege in mind. Litigation privilege requires a reasonable prospect of litigation and creation of the material for its dominant purpose. A privilege label or routine copying of solicitors cannot establish those conditions. Preserve ordinary business evidence even where the resulting legal analysis attracts protection. (Skandinaviska Enskilda Banken AB (Publ), Singapore Branch v Asia Pacific Breweries (Singapore) Pte Ltd [2007] SGCA 9, [69]–[81]; Wesley Widjaja v Ng Wei San [2025] SGHCR 32, [75]–[82].)
Proprietary protection for identified assets
A proprietary injunction can be sought where the company asserts ownership of identifiable USDT or traceable substitutes. The company must show a serious question to be tried concerning its proprietary entitlement and that the balance of convenience favours protection. The court considers whether damages would adequately address the parties' respective prejudice. The use of USDT alone does not establish that damages are inadequate. The application should identify the assets and the chain connecting them to the company's title. (Zhong, [23]–[27]; CLM, [38]–[46].)
The altered spreadsheets, unauthorised instructions and attributable destination wallets can support that application when presented coherently. A competing beneficial owner, a gap in tracing or an authorised disposal can defeat or narrow it. The company should seek protection of the balance or substitute it can substantiate, with appropriate treatment of third-party interests. It should not claim every asset in a mixed wallet merely because some stolen USDT entered it.
Preservation and disclosure can support the proprietary claim. Order 13 permits detention, custody or preservation of property in issue and allows a disputed specific fund to be secured. The proposed order should explain who has practical control and what conduct must stop. If transferring assets to a neutral holding arrangement is sought, counsel must address the additional consequences of mandatory relief. A restraint alone does not award the tokens to the claimant. (Rules of Court 2021, O 13 rr 1–2.)
A freezing order against the manager's assets
A freezing order can support a personal claim even where particular stolen tokens cannot be recovered. It restrains the defendant's dealings with assets up to the justified amount, subject to the order's exceptions. The company must establish a good arguable case and solid evidence of a real risk of unjustified dissipation that would frustrate judgment. The court also considers whether relief is just and convenient. Freezing relief is not security granted merely because a claimant fears that the defendant cannot pay. (Parastate [2023] SGCA 27, [1]–[4]; Zhong, [16]–[22].)
The alleged falsification and onward transfers matter when they support a prospective risk of defeating enforcement. Counsel should distinguish concealment, evasive explanations and asset movements from ordinary spending or a legitimate business transfer. A theft allegation cannot replace this assessment. The affidavit should explain any delay after discovery and identify the transactions that create the asserted urgency.
The geographic scope must also be justified. A domestic restraint concerns assets in Singapore; a worldwide order acts against the person subject to the court's jurisdiction. It does not automatically bind every overseas exchange or court. The amount restrained must reflect the supported claim, without assuming the company owns unrelated assets or enjoys priority over existing creditors. Counsel should settle the prescribed form and any conditions affecting foreign enforcement. (Rules of Court 2021, O 13 r 1(6)–(7); Supreme Court Practice Directions 2021, para 72; Parastate [2023] SGCA 27, [26]; Zhong, [103]–[104].)
Parastate provides a direct warning against treating interim success as proof of liability. The Court of Appeal enlarged the freezing order, but the High Court dismissed the substantive claims after trial in September 2026. That investment dispute differed from theft of company reserves. Its procedural history still demonstrates why an interim order and a final entitlement require separate decisions. (Parastate [2023] SGCA 27, [30]–[33]; Parastate [2026] SGHC 178, [44] and [193].)
Without notice applications and financial exposure
The company should seek relief without notice only where the circumstances justify that procedure. Order 13 requires an affidavit explaining urgency, the merits and why the defendant should not be informed. The applicant must disclose material facts it knows or reasonably ought to know, including adverse matters. The Practice Directions ordinarily require at least two hours' informal notice, except in extreme urgency or with court permission. Notice may also be dispensed with where it would or might defeat the application's purpose, with reasons in the affidavit. That requirement is not a promise about when a court will hear or decide the application. (Rules of Court 2021, O 13 r 1(2)–(5); Supreme Court Practice Directions 2021, para 71.)
The affidavit should address alternative ownership, gaps in wallet attribution, the manager's explanation and any authorisation she relies on. It must disclose material contractual limits, forum or arbitration objections, insolvency and prior applications. Counsel should explain the tracing methodology and any assumptions that could overstate the claimed balance. Material non-disclosure can cause discharge and costs consequences even where the company has an arguable underlying claim. (Supreme Court Practice Directions 2021, para 73; Zhong, [22] and [75]–[89].)
An applicant ordinarily gives a cross-undertaking to compensate loss caused by an injunction if the court later requires payment. The company should show the assets available to support it and budget for any required fortification. This is a substantive exposure, separate from its own lawyers' fees and adverse costs. A Nigerian claimant also faces the distinct possibility of security for the defendant's costs. Foreign residence is a gateway to consideration, rather than an automatic order. (Supreme Court Practice Directions 2021, paras 72–73; Parastate [2023] SGCA 27, [29]–[32]; Rules of Court 2021, O 9 r 12; Cova, [13]–[20].)
Singapore litigation counsel should settle the application, draft exceptions and arrangements for service and the return hearing. Under the amended Practice Directions, contested freezing applications and search orders ordinarily go before a Judge; other interim injunction applications may be heard by a Registrar unless directed otherwise. The board should approve resources for the subsequent contested hearing, rather than funding only the initial application. (Supreme Court Practice Directions 2021, para 72(1).)
Exchange disclosure and asset control
The company should distinguish a preservation request from a binding court order. A properly authorised alert can identify the alleged diversion, relevant addresses and transactions, and ask the platform to retain records. The platform must assess any voluntary assistance against its own duties and authority. Counsel should coordinate the timing with any proposed without-notice application. Before notifying an exchange of an order, counsel should check its third-party notification undertakings and obtain any necessary permission. An unsolicited allegation does not establish the sender's title or require an exchange to deliver another person's assets. (Supreme Court Practice Directions 2021, para 72(3).)
Order 11 rule 11 permits document and information production before proceedings or against a non-party for identification, tracing and other lawful purposes in the interests of justice. The application should specify the accounts, relevant period and records sought. These may include identity-verification material, access and withdrawal logs, deposit allocations, internal transfers and current balances. Counsel must address privilege, legally protected information and the non-party's reasonable costs. (Rules of Court 2021, O 11 rr 5 and 11.)
In CLM, the court ordered disclosure from exchanges that were already parties to the proceedings. It expressly found it unnecessary to decide the separate Bankers Trust basis advanced for non-party tracing disclosure. That distinction matters: the decision does not establish that every foreign exchange must answer an informal request or that ordinary joinder removes jurisdictional requirements. (CLM, [57]–[60] and [69]–[75].)
For an overseas platform, identify the contracting company and the entity controlling the records and relevant account. A Singapore affiliate, a familiar brand or a customer-facing website does not establish those facts. Counsel must establish an available basis for service and relief against the chosen entity, then assess enforceability where compliance must occur. Local proceedings or assistance in that jurisdiction may be more effective than a Singapore order with no practical recipient. (Supreme Court of Judicature Act 1969, s 16; Rules of Court 2021, O 8 r 1; Cheong, [35]–[41].)
A disclosed deposit address also does not establish exchange wrongdoing. Knowing receipt requires the relevant beneficial receipt of traceable property and knowledge making retention unconscionable, alongside the underlying breach of fiduciary duty. Mere receipt through an intermediary account is insufficient. The company should distinguish a custodian holding records from a beneficial recipient against whom substantive recovery is justified. (George Raymond Zage III v Ho Chi Kwong [2010] SGCA 4, [23], [32]–[33] and [43].)
Mixed assets and later recipients
Mixing does not automatically destroy a proprietary claim. ByBit recognised that its constructive trust could operate after USDT or money was mixed with other funds. The claimant still needs to identify property representing what was taken. A swap into another token or conversion into money therefore requires records connecting the original asset to the substitute. A tracing order permits that exercise; it does not establish that every proposed substitute belongs to the claimant. (ByBit, [42]–[45].)
The specialist should reconstruct each relevant balance and movement, including withdrawals that reduced the available fund. The legal analysis must test how proprietary rights attach to that fund or substitute and how competing interests rank. If the assets have been spent without an identifiable substitute, the company cannot create a proprietary recovery by relabelling an ordinary damages claim. Retain the personal claim against the wrongdoer and assess what other assets could satisfy it.
Later recipients require individual analysis. A bona fide purchaser-for-value defence must be considered in an equitable proprietary claim; its availability depends on the interest acquired and the applicable law. Knowing receipt separately turns on the recipient's knowledge and beneficial receipt at the relevant time. In Shenning Heritage Capital, the High Court accepted an established currency-swap explanation and rejected attempts to infer earlier wrongdoing from knowledge acquired later. It also recognised that assets in an account bearing the defendant's name belonged beneficially to someone else. The company must examine entitlement rather than treat the account name as conclusive. (Shenning Heritage Capital VCC v Hiah David [2026] SGHC 205, [125], [129]–[142] and [146]–[149]; Zage, [23] and [32]–[33].)
Personal claims and the value of the loss
The company should preserve supported personal claims alongside any proprietary case. A contract claim requires obligations owed by the defendant and a proven breach causing the claimed loss. If the outsourcing company is the contracting party, its employee's involvement does not automatically make her a party to that agreement. A fiduciary claim requires proof of the undertaking and entrusted powers that generated the duty; a finance title alone is insufficient. The pleaded case should identify the acts, duty and loss for each defendant. (Parastate [2026] SGHC 178, [110]–[127].)
If the manager fraudulently procured transfers to herself, ByBit supports seeking return, an account and payment orders on a proved constructive trust. A fraudulent-misrepresentation claim requires a knowingly false statement or one made without genuine belief in its truth, intended to induce reliance. The company must prove reliance and resulting loss. Altered spreadsheets produced only after the diversion may prove concealment without causing the original payment. An unjust-enrichment claim also requires its own elements and defences; ByBit did not decide that alternative. (ByBit, [27], [41]–[45]; Parastate [2026] SGHC 178, [169]–[170].)
Alternative money relief needs its own valuation evidence. Preserve quantities, transaction dates, market prices, liquidity, conversion costs and reasonable steps taken after discovery. USDT's name is not proof of its realisable dollar value on the relevant date. Kalen applied contract damages and mitigation principles, rejected a hindsight peak-value approach and refused to use the much later trial value. That contract decision does not prescribe one valuation date for every trust, account or restitution claim. (Kalen, Alexandru v World Exchange Services Pte Ltd [2026] SGHC 31, [30] and [39]–[53].) Licentium's discussion of crypto damages valuation addresses that separate issue.
The company must also examine limitation against the actual dates, causes of action and applicable law. Specific trust claims and fraud or fraudulent concealment have distinct rules; merely alleging theft or a trust does not establish their application. Singapore's conflict rules can also require foreign limitation law. Counsel should settle the limitation position before a staged investigation allows a material deadline to pass. (Limitation Act 1959, ss 6(1), 22 and 29; Foreign Limitation Periods Act 2012, s 3.)
Customer property and insolvency
The baseline concerns company reserves. If the money belongs to customers, the claimant and requested destination of recovery must change where the actual rights require it. Customer contracts, custody arrangements, individual ledgers and the governing property law must establish who owns the asset and who can sue. The company may have standing as a trustee or custodian, but recovery for customers cannot be booked automatically as unrestricted operating cash. Re Taylor confirms the need to distinguish ownership from a trust relationship. (Re Taylor, [14]–[30] and [37]–[38].)
If the defendant or exchange is insolvent, a proved proprietary entitlement can concern assets outside the estate available to general creditors. A personal judgment ordinarily leaves the claimant participating as a creditor unless another recognised priority applies. A freezing order itself creates no proprietary interest or priority. The company should establish the insolvency office-holder, applicable stay and procedure before continuing enforcement or accepting a distribution. (Zhong, [103]–[104]; Re Taylor, [37]–[41].)
An insolvent Nigerian owner requires the authority analysis already identified, while a Singapore or other foreign insolvency requires its own procedural treatment. The company should preserve both its title claim and any alternative debt claim without double recovery. Where ownership is disputed, seek preservation pending determination rather than immediate payment to a convenient group entity.
Nigerian treasury activity and reporting
The company's software business and its treasury activity require separate classification. The Investments and Securities Act 2025 includes digital and virtual-asset businesses within the SEC's remit. The SEC's published digital-asset rules distinguish technical infrastructure supplied to an exchange from exchange, transfer and custody services for others. Their scope also includes own-account dealing. Holding operating reserves alone does not establish that this company carries on regulated services; Nigerian counsel must establish the actual activities and authorisation. Own-account activity is not a universal exemption. (Investments and Securities Act 2025, ss 3(3)(b), (i), 61 and 357; SEC Rules on Issuance, Offering Platforms and Custody of Digital Assets 2022, Part D, rr 1.1–1.3 and 3.0.)
The litigation package should disclose the actual acquisition route, treasury mandate and any customer activity. Nigerian counsel must identify which permissions and reporting obligations attach to those activities. The defendant may dispute the company's entitlement or rely on an unlawful transaction; describing the business as a software company does not resolve that defence. Neither the existence of USDT nor a foreign exchange account establishes Nigerian regulatory compliance.
Reporting requires a separate assessment of the actors and transactions. Nigeria's Money Laundering (Prevention and Prohibition) Act 2022 includes virtual assets within funds. Section 3 addresses qualifying international transfers above US$10,000 or its equivalent, requiring a written report to the NFIU, CBN and SEC within one day from the transaction. Section 7 imposes immediate reporting and specified action within 24 hours after the transaction on covered financial institutions and designated non-financial businesses and professions; incomplete transactions are included. The amount, international character, company's activities and responsibility for an unauthorised transfer require assessment. A blockchain address alone does not identify a foreign country. No reporting breach by the victim follows from these facts alone. (Money Laundering (Prevention and Prohibition) Act 2022, ss 3, 7 and 30.)
Authorised officers should coordinate a factual criminal complaint with the civil strategy and preserve the same underlying transaction records. Mandatory reporting must not be postponed to preserve a civil tactic, and any applicable tipping-off prohibition must be respected. A police report can support an investigation, but it is not a civil ownership judgment or a promise of restitution. Any criminal seizure, exchange hold or recovery must be reconciled with the civil claim and the rights of other owners before assets are distributed. (Money Laundering (Prevention and Prohibition) Act 2022, ss 7 and 19(1)(a).)
Cross-border evidence and confidentiality
The company will need to send Nigerian records to Singapore counsel and potentially the court. Identity documents, linked wallet addresses, messages and access logs can contain personal data. Nigerian law requires a lawful purpose, a proper processing basis, proportionate data use and appropriate security. Its legal-claims provisions do not remove every applicable obligation. The company should identify necessary records and authorised recipients, record the basis for disclosure and use secure transfer arrangements. (Nigeria Data Protection Act 2023, ss 2, 3(2)(e), 24–25 and 39.)
Section 43(1)(e) permits a cross-border transfer necessary for establishing, exercising or defending legal claims without relying on destination-country adequacy. Record the transfer basis under section 41(2), explain necessity and limit onward access. This route should not be used to send an entire employee mailbox or unrelated customer files merely because litigation is contemplated. Singapore's privacy legislation does not itself establish a Nigerian adequacy determination. (Nigeria Data Protection Act 2023, ss 41–43; Nigeria Data Protection Act General Application and Implementation Directive 2025, art 45 and Schedule 5, para 6.)
Singapore recipients should identify the applicable basis for collecting, using and disclosing personal data. The Personal Data Protection Act permits processing necessary for investigations or proceedings and for obtaining or providing legal services. Security, retention and overseas-transfer rules remain relevant; a legal-claims purpose does not authorise unrestricted circulation. Compulsorily produced documents carry procedural restrictions: use in other proceedings requires the producer's consent or court approval under Order 11. Obtain any further permission required by the order or undertakings before sharing that material in parallel proceedings. (Personal Data Protection Act 2012, s 17(1), ss 24–26 and First Schedule, Part 3, paras 3 and 5; Rules of Court 2021, O 11 rr 9–10.)
A theft is not necessarily a personal-data breach. If the incident also compromises personal data and is likely to risk individuals' rights and freedoms, Nigeria requires notification to the NDPC within 72 hours of awareness. High-risk breaches require immediate communication to affected individuals, subject to the statutory alternatives and conditions. The company should make that assessment separately from its asset-loss calculation. Preserve relevant evidence securely while applying a justified retention period. (Nigeria Data Protection Act 2023, s 40(2)–(3).)
Counsel instructions and a proportionate recovery decision
The company should retain Singapore litigation solicitors to settle the cause of action, court application, service and enforcement steps. The Rules of Court permit a foreign entity with legal capacity to litigate but generally require representation by a solicitor. An international consultant can coordinate the factual package, Nigerian instructions, tracing work and cross-border dependencies within its engagement. That coordination does not confer rights to conduct Singapore litigation. (Rules of Court 2021, O 4 rr 1(c) and 3(1)(b).)
For the initial decision, counsel should receive the corporate authority, ownership reconciliation, contracts, chronology, witness accounts and tracing report. Include adverse material and a schedule distinguishing observed transactions from attributed wallet control. Identify the defendant's known assets and the exchange entities involved. The proposed budget should cover the contested hearing, undertaking exposure, third-party compliance costs, further tracing and execution, as well as obtaining an initial order.
The company should proceed with an urgent application where the title or personal claim meets the relevant threshold, the required risk is evidenced and an effective asset or disclosure target exists. It should narrow the request where only part of the balance can be traced. If recovery would depend entirely on unidentified overseas recipients or costs would overwhelm the reasonably recoverable value, a limited investigation or proceedings in a better-connected forum may be preferable. These are commercial decisions to apply to the evidence, without a universal minimum claim value or promised success rate.
Final relief must be designed for execution. ByBit demonstrates orders for payment, transfer, an account and tracing after liability is established. Order 22 expressly includes cryptocurrency within movable property and permits enforcement through seizure, delivery and attachment where its conditions apply. Counsel should match the order to a person or entity that can transfer assets or satisfy the judgment. Neither a judgment nor contempt proceedings supply a missing private key or reverse a completed blockchain transaction. (ByBit, [30] and [45]; Rules of Court 2021, O 22 rr 1–2 and 6.)
Where assets or the relevant exchange are overseas, obtain advice on recognition, local relief and execution in the identified jurisdiction before treating those assets as recoverable. The board should authorise each further expenditure against the updated evidence, recoverable value and enforceability. If tracing fails but a personal claim and reachable assets remain, continue on that supported basis; if neither remains, stop funding broader proceedings while preserving the records and any timely claims.