Japan’s FSA Proposes Mandatory Cybersecurity Standards for Crypto Exchanges
Japan's Financial Services Agency has drafted a new framework imposing mandatory cybersecurity standards on cryptocurrency exchanges. The policy, announced on February 10, 2026, marks a strategic shift from asset-specific protections to holistic ecosystem defenses as cyberattacks intensify across the digital asset sector.
The Cybersecurity Self-Assessment (CSSA) requirement will apply to all registered exchanges operating in Japan, with public comments accepted until March 11. Cold wallet reliance faces scrutiny as regulators note rising indirect attacks targeting operational infrastructure rather than direct wallet breaches.