Hong Kong Issues Circular to Licensed Virtual Asset Trading Platforms (VATPs) to Strengthen Custody of Client Virtual Assets, Custody Vulnerabilities & Cybersecurity Incidents in Overseas Virtual Asset Platforms Resulted in Client Asset Losses, Key Weaknesses Include Compromised Third-Party Wallet Solutions, Insufficient Transaction Verification Processes & Inadequate Access Controls Over Approval Devices
15th August | Hong Kong
The Hong Kong Securities & Futures Commission (SFC) has issued a circular to Hong Kong Licensed Virtual Asset Trading Platforms (VATPs) to strengthen custody of client virtual assets, with recent custody vulnerabilities & cybersecurity incidents occurring in overseas virtual asset platforms and resulting in client asset losses. Key weaknesses include compromised third-party wallet solutions, insufficient transaction verification processes & inadequate access controls over approval devices. Announcement (15/8/25): “The Securities and Futures Commission (SFC) today sets out its expectations in a circular to all licensed virtual asset trading platforms (VATPs) on ensuring the robust custody of client virtual assets, in order to lay a solid foundation for the industry’s transition to more advanced custody technologies under the “ASPIRe” roadmap (Note 1). The SFC sees the need for VATPs to critically review and strengthen their custody practices at a time when multiple cases of custody vulnerabilities have arisen overseas and the regulator’s own targeted review aimed to evaluate VATPs’ resilience against cybersecurity threats earlier this year revealed inadequacies in some operators’ controls. Multiple cybersecurity incidents at overseas virtual asset platforms resulting in significant client asset losses have also highlighted persistent risks to custody globally. Key weaknesses in wallet infrastructures and controls include compromised third-party wallet solutions, insufficient transaction verification processes, and inadequate access controls over approval devices. In its latest circular, the SFC provides examples of good practices along with its expected minimum standards that VATP operators must meet, covering senior management responsibilities, client cold wallet infrastructure and operation, use of third-party wallet solutions, real-time threat monitoring and others. Going forward, these standards will also form the core expectations for virtual asset custodians, and help foster an effective industry-wide framework for virtual asset custody (Note 2).
“ Hong Kong Issues Circular to Licensed Virtual Asset Trading Platforms (VATPs) to Strengthen Custody of Client Virtual Assets, Custody Vulnerabilities & Cybersecurity Incidents in Overseas Virtual Asset Platforms Resulted in Client Asset Losses, Key Weaknesses Include Compromised Third-Party Wallet Solutions, Insufficient Transaction Verification Processes & Inadequate Access Controls Over Approval Devices “
![](https://www.caproasia.com/wp-content/uploads/2025/08/Air-Charter-Service-728x90-1.png")
Notes:
- This is one of the objectives under Pillar “S” (Safeguard) of the SFC’s “ASPIRe” roadmap.
- See the Public Consultation on Legislative Proposal to Regulate Virtual Asset Custodian Services jointly issued by the Financial Services and the Treasury Bureau and the SFC.
Hong Kong Issues Circular to Licensed Virtual Asset Trading Platforms (VATPs) to Strengthen Custody of Client Virtual Assets, Custody Vulnerabilities & Cybersecurity Incidents in Overseas Virtual Asset Platforms Resulted in Client Asset Losses, Key Weaknesses Include Compromised Third-Party Wallet Solutions, Insufficient Transaction Verification Processes & Inadequate Access Controls Over Approval Devices
Caproasia Users
- Manage $20 million to $30 billion of assets
- Invest $3 million to $300 million
- Advise institutions, billionaires, UHNWs & HNWs
Caproasia Platforms | 11,000 Investors & Advisors
- Caproasia.com
- Caproasia Access
- Caproasia Events
- The Financial Centre | Find Services
- Membership
- Family Office Circle
- Professional Investor Circle
- Investor Relations Network
Monthly Roundtable & Networking
Family Office Programs
The 2026 Investment Day
- March - Hong Kong
- March - Singapore
- April - Hong Kong
- April - Singapore
- July - Hong Kong
- July - Singapore
- Sept- Hong Kong
- Sept - Singapore
- Oct- Hong Kong
- Nov - Singapore
- Visit: The Investment Day | Register: Click here
Caproasia Summits
- The Institutional Investor Summit
- The Investment / Alternatives Summit
- The Private Wealth Summit
- The Family Office Summit
- The CEO & Entrepreneur Summit
- The Capital Markets Summit
- The ESG / Sustainable Investment Summit
