BTC ETH Security Current Affairs

Hong Kong's Banks Aren't Ready for Quantum. Neither Are Bitcoin and Ethereum.

2026-07-29

The Hong Kong Monetary Authority dropped a quantum readiness index in July 2026, and the result was basically a report card saying "must do better." The sector scored 2.3 out of 10. That's not a typo. Out of 10.

The assessment looked at four things: whether banks are aware of the quantum problem, whether they're actually planning for it, whether they're running pilots, and whether they could move to quantum-safe systems in a live environment. Sixty-eight per cent of banks say they're aware or actively planning. The other 32 per cent haven't really started. Roughly half haven't even formalized a plan to switch to post-quantum cryptography. That's a problem.

Here's why this matters beyond Hong Kong: the same cryptography that's currently protecting all the blockchain settlement, stablecoins, and tokenized assets Hong Kong's been aggressively promoting is the same cryptography that's vulnerable to what researchers call "harvest now, decrypt later" attacks. Malicious entities could be hoarding encrypted banking data right now, waiting for quantum computers to become powerful enough to crack it. The Bank for International Settlements flagged this as an immediate threat. Bitcoin and Ethereum face the same risk.

HSBC has done something concrete here—they've already used quantum-safe technology to move tokenized gold across distributed ledgers. But that's about it. One bank doing something clever doesn't move the needle when you're starting from 2.3 out of 10.

The HKMA wants the sector to hit full readiness—a score of 10—by 2030. To get there, they're building a post-quantum cryptography toolkit with Hong Kong University of Science and Technology. They're also planning workshops focused on quantum readiness and, eventually, responsible quantum applications. Eighty-seven per cent of surveyed banks said what they really need is clear supervisory expectations and timelines. At least everyone agrees on that part.

The transition itself is built around "cryptographic agility"—basically, the ability to swap algorithms without blowing up your entire infrastructure. Four stages: Awareness, Planning, Pilot, Practical Preparedness. Sounds straightforward until you realize you're talking about upgrading systems across an interconnected financial ecosystem.

This isn't just a Hong Kong problem. In May 2026, G7 central banks released a report warning that quantum computing advances could undermine existing financial infrastructure. The U.S. government, alongside other global regulators, is pushing parallel timelines for quantum development and post-quantum security upgrades. The message is consistent everywhere: financial institutions need to move now because the lead times for cryptographic change are long. You can't wait until quantum computers are actually breaking encryption. You have to get ahead of it.

The 2.3 score doesn't mean Hong Kong banks have already been attacked or that their current encryption has failed. It's a measure of how prepared they are to identify vulnerable systems, create a transition plan, test the replacements, and deploy them into production. The gap between that and a 10 by 2030 is substantial. But at least Hong Kong's being transparent about where it stands, and at least someone is pushing the sector to move.

Source & further reading:

Sources