**Cyprus Financial Regulator Joins EU-Wide Review of Crypto Custody Resilience**
The Cyprus Securities and Exchange Commission (CySEC) has announced its participation in a significant European-wide supervisory initiative aimed at assessing the digital resilience of crypto asset service providers (CASPs) that offer custody services. This initiative, known as the 2026 Common Supervisory Action (CSA 2026), is spearheaded by the European Securities and Markets Authority (ESMA) in collaboration with national authorities across the European Union. Inspections related to this exercise are scheduled to commence in the latter half of 2026 and will continue until the first half of 2027.
The CSA 2026 is designed to evaluate how effectively authorized CASPs have established their digital operational resilience frameworks, particularly concerning custody activities. The review will focus on the risks associated with distributed ledger technology (DLT), which underlies many crypto assets, and will scrutinize how firms safeguard digital assets while maintaining secure operational practices.
In a circular issued by CySEC, the regulator outlined the key areas that will be the focus of this supervisory exercise. The review will encompass governance arrangements, management of digital keys and storage systems, transaction controls, incident detection and response protocols, risks linked to smart contracts, and the reliance on third-party service providers.
CySEC emphasized that the review will be conducted using a risk-based sampling approach, targeting authorized CASPs that have already been licensed to provide custody services. This ensures that the supervisory exercise is both thorough and focused on firms that are already operating within the regulatory framework.
The initiative reflects ESMA's supervisory priorities, which have identified digital operational resilience and the oversight of crypto asset service providers as critical areas that require enhanced scrutiny. The CSA 2026 aims to foster greater supervisory consistency across the EU, particularly in the rapidly evolving landscape of crypto finance.
As part of the exercise in Cyprus, CySEC intends to conduct both on-site inspections and desk-based reviews of a selected group of crypto firms. The regulator has made it clear that compliance with the expectations outlined in the circular will be a significant factor during the supervisory review. This compliance will be integral to ensuring that firms are adequately prepared to meet the challenges posed by the digital asset market.
CySEC's involvement in the CSA 2026 underscores its commitment to enhancing the regulatory framework surrounding crypto assets in Cyprus and aligning with broader European efforts to ensure the stability and security of the financial system. The regulator's proactive approach aims to address potential vulnerabilities in the custody of digital assets, thereby fostering confidence among consumers and investors in the crypto market.
In summary, the upcoming supervisory exercise represents a crucial step in reinforcing the operational resilience of crypto asset service providers in Cyprus and across the EU. As the digital finance sector continues to grow and evolve, regulatory bodies like CySEC are taking necessary measures to adapt and respond to emerging risks, ensuring that the financial ecosystem remains robust and secure.