The Financial Services Agency of Japan has released a draft of the "Guidelines for Strengthening Cybersecurity for Cryptocurrency Exchanges" and is seeking public comments

According to Coinpost, the Financial Services Agency of Japan has released the "Cybersecurity Enhancement Guidelines (Draft) for Cryptocurrency Exchanges" and has begun a public consultation, with a deadline of March 11. The draft indicates that the methods of cyber attacks targeting cryptocurrency exchanges are becoming increasingly complex, with a rise in indirect attack methods such as social engineering and breaches through outsourced service providers. Relying solely on cold wallets is no longer sufficient to ensure security, and there is a need to strengthen overall supply chain security management.

The draft also mentions suspected state-sponsored attacks and emphasizes the importance of asset protection from the perspective of national wealth preservation. The plan is based on three pillars: self-help, mutual assistance, and public assistance. In terms of self-help, it proposes to impose cybersecurity self-assessments on the cryptocurrency exchange industry starting from the fiscal year 2026 and to enhance security standards; for mutual assistance, it will strengthen the functions of industry self-regulatory associations and promote corporate participation in information-sharing organizations; for public assistance, it will continue to conduct international joint research, aiming for full industry participation in cybersecurity exercises within three years and conducting real environment penetration tests on some operators in 2026.