
ESMA expands cyber resilience checks to crypto custodians in 2027
- —Reviews cover governance, cryptographic key management, transaction controls and incident response
- —About 280–283 CASPs are licensed after MiCA's July 1, 2026 deadline
- —The CSA draws on MiCA and DORA and is run by national regulators across the EU
- —A consolidated report for ESMA's Board of Supervisors is expected in H2 2027
Why it matters: Tighter custody oversight could raise compliance costs and accelerate consolidation among EU crypto providers.
Source: Crypto Briefing