Regulation· ★★★· bullish·

EU CRA: wallet makers must report exploits within 24 hours

  • Article 14 of the CRA applies from September 11, 2026; the rest of the regulation from December 11, 2027
  • Exploits must be reported to CSIRT and ENISA within 24 hours
  • Manufacturers must notify users of vulnerabilities and protective measures
  • Covers hardware and software wallets sold in the EU
Why it matters: Crypto holders in the EU will gain a legal guarantee of notification about wallet vulnerabilities, reducing the risk of fund loss.
Source: CryptoTicker