ESMA Probes Crypto Custody Risks Post-MiCA

The European Securities and Markets Authority (ESMA) announced this week that it will conduct a review of crypto asset custody providers to assess potential risks, particularly in the wake of the Markets in Crypto-Assets (MiCA) regulation's implementation. This initiative aims to ensure robust security and operational practices among entities holding digital assets on behalf of clients.

The review will focus on several critical areas of custody operations. These include the secure management of private keys, which are essential for controlling cryptocurrency assets. ESMA will also examine the incident response capabilities of these providers, evaluating how they prepare for and react to security breaches or operational failures. Furthermore, the regulator intends to scrutinize the reliance of custody providers on third-party technology vendors, identifying potential vulnerabilities introduced through these external dependencies.

This proactive assessment by ESMA is designed to identify and mitigate systemic risks within the European crypto market. The MiCA regulation, which came into full effect in June 2024, established a comprehensive framework for crypto-asset service providers, including custodians. ESMA's review will help determine the effectiveness of these new rules in practice and highlight any areas requiring further regulatory attention or industry best practice development. The findings are expected to inform future supervisory actions and potentially lead to updated guidance for crypto custodians operating within the European Union.