Bermuda's digital asset licensees grow to 49 under binding cyber rules
26 JUNE 2026, HAMILTON
Bermuda had 49 digital asset licensees as of 26 June 2026, a growing roster operating under binding cyber-risk and custody rules. Those rules make cryptographic security a supervised matter for the firms rather than an optional practice, since the Bermuda Monetary Authority oversees how licensees manage cyber-risk and safeguard the assets they hold.
Custody rules are where cryptography sits most directly. They govern how firms protect the digital assets in their care, and that protection depends on cryptographic keys and algorithms. By supervising custody, Bermuda brings the cryptography behind asset safekeeping into regulatory scope, so a weakness there becomes a supervisory concern, not just a technical one.
That scope gives quantum risk a regulatory home. Digital assets rely on cryptography for custody and transactions, so quantum-vulnerable algorithms pose a direct threat to the assets licensees hold. Because Bermuda already supervises cyber-risk and custody, its licensees have a clear basis to account for quantum risk within rules they must already follow.
Why it matters. Bermuda's growing roster of 49 digital asset licensees operates under binding rules that already cover the cryptography protecting customer assets. That gives quantum risk a supervisory anchor, since custody and cyber-risk obligations extend naturally to the threat quantum computers pose to cryptographic keys. Licensees that fold quantum into their cyber-risk and custody practices align with rules they are already bound to meet.