EU Imposes 24-Hour Crypto Wallet Vulnerability Reporting Rule Under Cyber Resilience Act

The European Commission has triggered new cybersecurity obligations under the EU Cyber Resilience Act (CRA), requiring cryptocurrency hardware and software wallet manufacturers to report actively exploited bugs within 24 hours of discovery. Under the rules, which took effect on Friday, providers must submit an early warning for severe vulnerabilities within that window, followed by a full notification within 72 hours. A final report is due 14 days after corrective or mitigating measures become available, or within one month for severe incidents. The Commission said the measure, which applies to all products "with digital elements made available in the EU," aims to better shield consumers and businesses from cyber threats and forms part of the bloc's broader cybersecurity strategy. Wallet providers that fail to comply face substantial administrative fines.

In US regulatory news, Senate Republicans on Sunday released revised text of the CLARITY Act, a 635-page proposal aimed at securing Democratic support ahead of a pivotal procedural vote scheduled for Tuesday at 2:15 pm ET. The bill, unveiled by Senate Banking Digital Assets Subcommittee Chair Cynthia Lummis alongside Chairmen John Boozman and Tim Scott, includes major changes to rules governing federal officials' involvement with digital assets, updates to the Blockchain Regulatory Certainty Act (BRCA), and new provisions on stablecoin yield. Lummis said the ethics provisions had been personally agreed to by US President Donald Trump, who "voluntarily agreed to unprecedented ethics restrictions, holding every federally elected official, judge, and their spouses to some of the toughest ethics restrictions in US history."

Meanwhile, fintech giant Revolut disclosed a customer data breach caused by a sophisticated government email impersonation scam. The incident adds to a growing list of social engineering attacks targeting financial services firms and underscores the persistent cybersecurity risks facing the crypto-adjacent fintech sector. Separately, broader market activity saw mixed performance, with Bitcoin trading around $78,908 and Solana near $102.96, while XLM posted a notable 9.06% gain. The developments highlight an increasingly complex landscape where regulators, lawmakers, and threat actors are all simultaneously reshaping the crypto industry's operational and security baseline.