The Hong Kong Securities and Futures Commission (SFC) has issued a new directive urging licensed cryptocurrency platforms to strengthen their practices related to safeguarding customer assets. In the guideline released today, the regulator highlighted how several incidents abroad have exposed vulnerabilities and led to significant customer asset losses. The SFC also disclosed that a targeted review conducted at the beginning of the year revealed deficiencies in control measures against cyber threats on some cryptocurrency platforms.
New Expectations and Areas of Control from SFC
In the directive presented today, the SFC elaborated on the responsibilities of the top management of cryptocurrency platforms, as well as the framework of cold wallet infrastructure, supervision of third-party wallet services, and real-time threat monitoring. The regulatory body has called on licensed virtual asset trading platforms (VATPs) to critically reassess their custodian practices, with the aim of establishing measurable discipline in the protection of customer assets.
The directive specifies that the requirements are applicable not only to existing VATPs but also to cryptocurrency custodians. The guideline is anticipated to contribute to the development of an effective custody infrastructure across the industry, with the rules becoming effective immediately.
The SFC’s announcement was forthright, highlighting the necessity for the management of cryptocurrency platforms to be accountable, for custody architecture to be robust, for constant oversight over external service providers to be maintained, and for threats to be monitored in real-time. Although the rules are broad, the language is decisively clear.
Behind the scene, July’s global surge in security breaches appears to have had a significant influence. According to PeckShield, breaches related to hacking reached $142 million in July, representing a 27% increase compared to June. The SFC is focused on closing this gap, directed by this alarming backdrop.
Hong Kong’s Position in Cryptocurrency Matters
While mainland China maintains its ban on cryptocurrency trading and mining, Hong Kong is pursuing a different trajectory. The region aims to attract businesses through its licensing directive for exchanges. Notably, a separate licensing regime came into effect on August 1, 2025, also encompassing stablecoin issuers.
Through regulations, the region seeks to mature its institutional infrastructure. The SFC’s new custody directive forms a tangible pillar of this roadmap. As trust increases, regulated market participation is expected to grow on a stable base.
