TLDR
- Hong Kong SFC mandates stronger wallet security and oversight for licensed crypto platforms.
- The new custody guidelines aim to enhance asset protection amid global cybersecurity risks.
- The SFC’s standards aim to ensure the development of a trusted digital asset ecosystem in Hong Kong.
- New practices include senior management accountability and real-time threat monitoring.
Hong Kong Securities and Futures Commission (SFC) has set new custody standards for licensed virtual asset trading platforms (VATPs). These guidelines aim to improve the protection of client assets on crypto platforms by addressing vulnerabilities in wallet infrastructure, access controls, and transaction verification processes.
The new measures are part of the SFC’s broader “Safeguard” pillar under its ASPIRe roadmap. This initiative seeks to strengthen industry-wide resilience in virtual asset custody, following a review by the SFC earlier this year. The review revealed significant weaknesses in some operators’ security practices, leading to several high-profile custody failures on overseas platforms.
Enhanced Wallet Infrastructure and Management Oversight
The SFC’s updated guidance as a result sets clear expectations for VATPs, particularly in areas like senior management responsibility and secure cold wallet operations. Cold wallets, used to store digital assets offline, are a critical component of crypto asset security.
The SFC is requiring platforms to ensure robust cold wallet infrastructure, effective third-party wallet oversight, and proper approval processes for transactions.
“Client asset protection must always remain a top priority for all licensed VATPs,” said Dr. Eric Yip, the SFC’s Executive Director of Intermediaries. He emphasized that these updated standards would help platforms build a more secure and sustainable digital asset ecosystem.
Hong Kong Addressing Global Cybersecurity Risks
The new standards are also a response to the growing global risks associated with cryptocurrency security. Multiple cybersecurity incidents at overseas virtual asset platforms have resulted in significant client asset losses.
The SFC’s review as a result found that weaknesses in third-party wallet solutions, transaction verification processes, and inadequate access controls were common issues.
In response, the SFC is pushing for stronger real-time threat monitoring systems to protect digital assets from potential cyberattacks. Platforms must implement proactive security measures to address emerging risks, ensuring that client assets are safeguarded from both internal and external threats.
Fostering a Competitive and Trusted Digital Asset Ecosystem
The SFC’s new guidelines reflect its ongoing commitment to making Hong Kong a competitive, sustainable, and trusted hub for digital assets. The commission as a result aims to establish a comprehensive framework for virtual asset custody that enhances transparency, security, and compliance with global regulatory standards.
As the virtual asset market continues to grow, the SFC’s move to strengthen custody practices is designed to build investor confidence in Hong Kong’s crypto ecosystem. With this initiative, the SFC seeks to ensure that licensed VATPs are well-prepared to handle the challenges posed by an increasingly complex and rapidly evolving digital asset landscape.
These new regulations as a result are expected to have a far-reaching impact on the industry, influencing not only the operations of crypto platforms in Hong Kong but also setting a benchmark for other jurisdictions to follow.
