Japan's Financial Services Agency announces cybersecurity enhancement guidelines for cryptocurrency exchange operators

DeepFlowTech · 2026-04-04T01:25:33+00:00

The Financial Services Agency of Japan announced the "Guidelines for Strengthening Cybersecurity in Crypto Asset Exchanges and Related Sectors," aimed at protecting investors' assets. The guidelines propose a three-layer security framework to counter increasingly sophisticated cyberattacks, with plans to conduct penetration testing on major operators and revise the guidelines accordingly.

DeepFlowTech

2026-04-04 01:25:33

Abstract generation in progress

Deep Tide TechFlow message, April 04, according to CoinPost, Japan’s Financial Services Agency officially released on April 3 the “Guidelines on Strengthening Measures for Cybersecurity for Businesses Involved in Crypto Asset Exchange and Related Activities.” The guidelines were developed based on 18 public submissions collected from February to March 2026, with protecting investors’ assets as the top priority, and propose a three-layer security enhancement framework: “self-help (individual operators), mutual help (self-regulatory oversight bodies), and public help (regulatory authorities).”

The authorities noted that today’s cyberattacks have evolved from simple theft of signing keys to highly organized methods such as social engineering attacks and supply-chain intrusions, making traditional cold wallet management no longer sufficient to ensure security. Going forward, the Financial Services Agency will conduct threat-driven penetration testing (TLPT) targeting some major firms, and also plans to revise its business guidance to strengthen network security staffing and elevate external audit standards.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.

1 Likes