U.S. Treasury Expands Cybersecurity Initiative for Digital Asset Firms

This initiative marks a pivotal shift in how the U.S. government engages with the digital asset sector, recognizing its importance to national security and economic stability.

• On April 9, 2026, the U.S. Department of the Treasury launched a cybersecurity information sharing initiative for eligible digital asset firms.
• The program provides free access to actionable cyber threat intelligence, similar to that available to traditional financial institutions.
• This initiative responds to rising cyber threats, including high-profile hacks that resulted in over $2.87 billion stolen in 2025.

• Cyber threats against digital assets have escalated, with state-affiliated groups like North Korea's Lazarus Group targeting platforms.
• The initiative fulfills recommendations from a July 2025 presidential report advocating for enhanced cybersecurity measures in the digital asset space.
• The U.S. Treasury's program aligns with broader efforts to strengthen the operational resilience of financial technologies amid increasing illicit activities.

The U.S. Department of the Treasury's Office of Cybersecurity and Critical Infrastructure Protection (OCCIP) has officially expanded its cybersecurity threat intelligence program to include eligible U.S. digital asset firms. This initiative is a direct response to the growing sophistication and frequency of cyber threats targeting the digital asset sector, which has seen a staggering $2.87 billion in losses due to cybercrime in 2025 alone.

The OCCIP initiative provides participating blockchain and cryptocurrency companies with timely, actionable threat intelligence, mirroring the information shared with traditional financial institutions. This move not only acknowledges the digital asset industry as critical infrastructure but also aims to bolster its defenses against cyberattacks that have become increasingly prevalent.

The impetus for this initiative stems from a July 2025 report by the President’s Working Group on Digital Asset Markets, which highlighted the urgent need for enhanced public-private cybersecurity information sharing. The report specifically recommended expanding access to the Treasury's Automated Threat Information Feed (ATIF) for regulated digital asset firms. By implementing these recommendations, the Treasury is taking a proactive stance in safeguarding the digital asset ecosystem, which has been under siege from various cyber threats, including high-profile exploits like the $280 million Drift Protocol hack.

Eligible firms can now receive the same level of threat intelligence as traditional banks, allowing them to better prepare for and respond to potential cyber incidents. This program is particularly significant given the increasing regulatory scrutiny on the digital asset sector and the need for firms to demonstrate robust cybersecurity measures.

While the initiative is U.S.-focused, it sets a precedent that may influence global cybersecurity standards in the digital asset space. The Treasury's program could encourage other nations to adopt similar measures, fostering a more secure environment for digital asset transactions worldwide. However, the effectiveness of this initiative will depend on the participation of eligible firms and their willingness to engage with the OCCIP.

• Digital asset firms: They will gain access to critical cybersecurity intelligence, enhancing their operational security.
• Investors in digital assets: Increased security measures may lead to greater confidence in the market, potentially attracting more investment.
• Cybersecurity professionals: Demand for expertise in implementing these new measures will likely rise within the digital asset sector.

• Participation rates: Monitoring how many firms engage with the OCCIP program will indicate the initiative's acceptance and effectiveness.
• Cyber incident reports: Tracking the frequency and severity of cyber incidents in the digital asset space post-initiative will reveal its impact on security.
• Regulatory responses: Observing how other countries react to this initiative could signal a shift in global cybersecurity standards for digital assets.