Who will be liable?

I am living in a co-op apartment in the DC area. The co-op requires each tenant shareholder to leave a duplicate apartment key with the building superintendent. I follow the rules. I gave a duplicate key to the superintendent. What if I let my friend borrow my keys and he is unauthorized by the shareholders, and eventually that friend of mine commits a criminal act like identity theft, can the co-op management be reliable? Or the board be held liable?