Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident
DDeFi Safety ToolsNEWS · DATA · PRACTICAL SAFETYGet the briefing
DeFi Safety · Fact checked

Japan's JCBA Releases Draft Security Guidelines for Subcontractors… 347 Checklist Items

The Japan Crypto Asset Business Association (JCBA) has released draft security management guidelines for exchange, wallet, and signature system outsourcing service providers.

By DeFi Tools Guide Editorial Team · Published Oct 20, 2026, 4:51 AM UTC · Updated 2026-10-20 · Risk level: medium
Sources checked: Oct 20, 2026, 6:31 AM UTC

This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.

DeFi Safety — illustration keyed to this article's identifier. Source documents are listed under Sources and are not reproduced here.

What happened

The Japan Crypto Asset Business Association (JCBA) has released draft security management guidelines for exchange, wallet, and signature system outsourcing service providers. The draft consists of 10 areas and 347 inspection items. In a notice on the 20th, JCBA announced that it had formed a dedicated working group and prepared a draft. The scope includes creating and storing private keys, separating hot and cold wallets, verifying transaction signatures, and managing third-party suppliers, CoinPost said. The subcontractor is divided into five types depending on whether it holds the private key or has control of the system. Different types of drafts require different security measures.

Reported details

No additional source details were retained.

Why this matters

Japan’s JCBA is a factual update rather than a structural change to tokenized assets. Its value to a desk is the sourced detail and the timing, so read it next to the linked reporting and treat any figure the sources do not state as unknown.

Evidence boundary

On Japan’s JCBA, the scope is limited to what the linked 2 reports state, and where they diverge both positions are recorded without either being picked in advance; the headline figure is what to check first.

What to verify

Corroborate Japan’s JCBA with one independent dated source, and treat any figure the linked reports do not state as unknown rather than inferred.

Sources and editorial check time

This information is educational and is not financial, legal, or tax advice.

Sources