Japan's Financial Services Agency announces cybersecurity enhancement guidelines for cryptocurrency exchange operators

CycleProphet · 2026-04-04T01:26:18+00:00

The Financial Services Agency of Japan announced the "Guidelines for Strengthening Cybersecurity in Crypto Asset Exchanges and Related Sectors," aimed at protecting investors' assets. The guidelines propose a three-layer security framework to counter increasingly sophisticated cyberattacks, with plans to conduct penetration testing on major operators and revise the guidelines accordingly.

CycleProphet

2026-04-04 01:26:18

Abstract generation in progress

Deep Tide TechFlow message. On April 04, according to CoinPost, Japan’s Financial Services Agency officially released on April 3 the “Policy Guidelines for Strengthening Cybersecurity Measures for Crypto Asset Exchange Businesses, etc.” The policy was formulated based on 18 public comments solicited between February and March 2026, with the protection of investors’ assets as the top priority. It proposes a three-layer security strengthening framework: “self-help (individual operators), mutual help (self-regulatory oversight bodies), and public help (regulatory authorities).”

The authorities noted that current cyberattacks have evolved from the simple theft of signing keys into highly organized methods such as social engineering attacks and supply-chain intrusions, and that traditional cold-wallet management can no longer adequately ensure security. Going forward, the Financial Services Agency will implement threat-driven penetration testing (TLPT) for certain major firms, and also plans to revise the transaction guidance guidelines to improve cybersecurity staffing levels and external audit standards.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

2 Likes