Crypto wallet creators now have just 24 hours to alert regulators when flaws are exploited - CryptoRank

A new reporting requirement compresses the window for crypto wallet developers to notify regulators when a security flaw is actively exploited. Under the change, creators have 24 hours to flag an exploited vulnerability, a notably tighter deadline than the disclosure timelines many software teams have historically worked with.

The practical effect is a shift in how wallet security incidents are handled. A 24-hour clock pressures teams to detect, verify, and escalate exploits quickly — while they are often still diagnosing the problem and weighing how much to disclose publicly. That tension between fast regulatory notice and careful technical assessment is the central issue to watch.

For markets, the relevance is indirect but real. Wallet vulnerabilities sit close to user funds, so how promptly incidents are surfaced can shape confidence in self-custody tools and the broader infrastructure around them. Key details still matter: which regulators enforce the rule, which wallets it covers, and what counts as an "exploited" flaw. Those specifics will determine how much the deadline changes behavior in practice.