Two years later:

    // Get the account holder currency
    $security = $counterparty->getSecurity();