Crypto wallet creators now have just 24 hours to alert regulators when flaws are exploited - CryptoRank

A new reporting requirement compresses the window for crypto wallet developers to notify regulators when a security flaw is actively exploited. Under the change, creators now have just 24 hours to flag such incidents once they are identified — a notably tight deadline for an industry where disclosure timelines have historically varied widely.

The shift matters because wallets sit at a critical junction: they hold private keys and facilitate transactions, so a exploited vulnerability can quickly affect many users at once. A 24-hour clock is intended to speed up regulatory awareness, potentially enabling faster coordination and user warnings. For wallet teams, it places new pressure on incident response, monitoring, and internal escalation procedures.

What to watch: how regulators define an "exploited" flaw, whether the rule applies to open-source and self-custody wallets alike, and how teams balance rapid reporting against the need to patch vulnerabilities before publicizing them. Clear guidance on these points will shape compliance burdens and could influence how wallet developers approach security disclosures going forward.