EU Cyber Resilience Act Imposes 24-Hour Crypto Wallet Vulnerability Reporting Rule

The European Union's Cyber Resilience Act has taken effect, requiring crypto hardware and software wallet providers to submit an initial warning within 24 hours of discovering an actively exploited vulnerability or a serious security flaw, followed by a full notification within 72 hours. According to Odaily, manufacturers must file a final report within 14 days after corrective or mitigation measures become available, while serious incidents must be reported within one month. Companies that violate the rules face fines of up to 15 million euros or 2.5% of global annual turnover, whichever is higher, and providing false, incomplete, or misleading information can result in fines of up to 5 million euros.