The Japanese Financial Services Agency announced guidelines for strengthening cybersecurity in cryptocurrency exchanges

According to CoinPost, the Japanese Financial Services Agency has officially announced the "Cybersecurity Enhancement Guidelines for Cryptocurrency Asset Exchange Businesses." This guideline is based on 18 opinions collected from February to March 2026, with the primary goal of protecting investor assets, proposing a three-tiered security enhancement framework of "self-help (individual businesses), mutual assistance (self-regulatory organizations), and public assistance (regulatory authorities)."

The authorities pointed out that current cyber attacks have evolved from simple signature key theft to highly organized methods such as social engineering attacks and supply chain intrusions, making traditional cold wallet management insufficient to ensure security. Subsequently, the Financial Services Agency will implement threat-driven penetration testing (TLPT) on some major businesses and plans to revise operational guidelines to enhance cybersecurity personnel allocation and external audit standards.