Regulation· ★★★★· neutral·

ESMA expands cyber resilience checks to crypto custodians in 2027

  • Reviews cover governance, cryptographic key management, transaction controls and incident response
  • About 280–283 CASPs are licensed after MiCA's July 1, 2026 deadline
  • The CSA draws on MiCA and DORA and is run by national regulators across the EU
  • A consolidated report for ESMA's Board of Supervisors is expected in H2 2027
Why it matters: Tighter custody oversight could raise compliance costs and accelerate consolidation among EU crypto providers.
Source: Crypto Briefing