EU introduces 24-hour vulnerability notification for crypto wallets
- —24 hours for early notification to ENISA and CSIRT, 72 hours for full, 14 days for final report
- —Ledger, Trezor, BitBox, Tangem, Keystone, and paid wallets are covered
- —Non-commercial open source is exempt, but monetizable projects are not
- —Maximum fine: €15 million or 2.5% of global annual turnover
Why it matters: It increases wallet security transparency and speeds up informing crypto holders in the EU about threats.
Source: Journal du Coin