Dubai's Virtual Assets Regulatory Authority confirmed that appointing an external auditor does not transfer regulatory responsibility for safeguarding client virtual assets from the service provider.