Hong Kong's monetary authority has issued a quiet but consequential warning: the city's banks, racing to build a tokenized financial future, are standing on cryptographic foundations that quantum computing may one day dissolve. With a readiness score of 2.3 out of 10 and a 2030 deadline, the HKMA is asking institutions to reckon with a threat that does not yet fully exist — precisely because the work of preparing for it takes longer than the threat takes to arrive.
Hong Kong Banks Score 2.3/10 on Quantum Readiness, Face 2030 Upgrade Deadline
You are not ready for quantum computing, and you have four years to fix it.
Mark
So the HKMA gave Hong Kong banks a 2.3 out of 10 on quantum readiness. That sounds bad. How bad is it really?
Mimi
It's early-stage bad, not catastrophic bad. The score reflects that most banks haven't started serious post-quantum planning yet. Half of them have nothing formal in place. But the HKMA is giving them until 2030 to reach a 10, which suggests there's time if they move now.
Luke
But here's what we don't know: what does a 10 actually look like? The white paper introduces the index, but we don't have a detailed rubric. We know half the banks lack formal planning, but we don't know which banks, or how many institutions were surveyed, or whether the sample is representative.
Mark
Fair point. So the 2.3 is real, but the path to 10 is still undefined.
Mimi
Right. What's clear is the urgency. Hong Kong has HK$29 billion in tokenized deposits and HK$16.8 billion in tokenized green bonds. All of that depends on cryptography that quantum computers could theoretically break. The HKMA is saying: you're building faster than you're securing.
Luke
And that's the real story. The threat from quantum computers is real but not immediate. Shor's algorithm could break RSA and elliptic-curve cryptography, yes. But we don't know when quantum computers will be powerful enough to do that at scale. The HKMA is being prudent, not panicked.
Mark
So the deadline of 2030 is somewhat arbitrary?
Mimi
Not entirely. Cryptographic migration takes years. You have to inventory systems, test new protocols, replace embedded code, coordinate across institutions. The HKMA is saying: start now so you're not scrambling when the threat becomes real.
Luke
One more thing: HSBC did a proof of concept with quantum-safe technology in 2024, and one other institution completed a proof of concept on distributed-ledger connectivity. Those are real examples, but they're also isolated. They show what's possible, not what's typical.
Mark
So Hong Kong is moving into tokenized finance at speed, but the security infrastructure is lagging.
Mimi
Exactly. The QPI is the regulator's way of saying: we see the gap, and we're measuring it now so you can close it.
Luke
And if banks don't hit a 10 by 2030, what happens? The white paper doesn't say. That's worth watching.
El Pulso
- Half of Hong Kong's surveyed banks have no formal post-quantum plan, even as the city's tokenized asset ecosystem surges past HK$29 billion in deposits alone.
- The danger is structural, not immediate: quantum computers running Shor's algorithm could eventually shatter RSA and elliptic-curve encryption — the invisible architecture holding digital finance together.
- Cryptographic migration across entrenched financial systems is measured in years, not months, forcing regulators to demand action against a threat that hasn't fully materialized yet.
- Isolated proof points — HSBC's quantum-safe tokenized gold transfer, one institution's post-quantum distributed-ledger pilot — signal awareness, but not sector-wide momentum.
- The HKMA has replaced guidance with measurement: the Quantum Preparedness Index sets a hard target of 10 out of 10 by 2030, turning preparation into a compliance obligation.
Hong Kong's monetary authority has issued a quiet but consequential warning: the city's banks, racing to build a tokenized financial future, are standing on cryptographic foundations that quantum computing may one day dissolve. With a readiness score of 2.3 out of 10 and a 2030 deadline, the HKMA is asking institutions to reckon with a threat that does not yet fully exist — precisely because the work of preparing for it takes longer than the threat takes to arrive.
Hong Kong's central bank has delivered a blunt verdict to its financial sector: a readiness score of 2.3 out of 10, and four years to reach a perfect 10. The Hong Kong Monetary Authority's newly released Quantum Preparedness Index measures how well the city's banks can withstand the cryptographic threat posed by sufficiently powerful quantum computers. Roughly half of surveyed institutions had no formal post-quantum planning in place at all.
The urgency is sharpened by Hong Kong's aggressive push into tokenization. Since 2023, the government has issued tokenized green bonds worth HK$16.8 billion, digital assets under custody have grown 180 percent year over year, and tokenized deposits have reached HK$29 billion. These systems are built entirely on cryptography. Quantum computers running Shor's algorithm could eventually break the RSA and elliptic-curve encryption that protects transactions, verifies identities, and authorizes transfers — and if that foundation cracks, the structure above it falls.
The HKMA is not warning of an imminent attack. It is pointing to a timing problem: replacing cryptographic systems woven through financial infrastructure takes years. Banks must begin now, before the machines capable of breaking their defenses actually exist. A handful of institutions have moved — HSBC used quantum-safe technology to transfer tokenized gold across distributed ledgers in 2024 — but these remain isolated examples against a backdrop of sector-wide inertia.
The QPI sits within the HKMA's broader Fintech 2030 strategy, a plan encompassing tokenized deposits, digital-asset settlement, and blockchain infrastructure supported by the e-HKD digital currency. For banks, the index transforms aspiration into obligation: inventory your cryptographic assets, assess your risks, plan your migration. The window is open. Whether Hong Kong's tokenization ambitions survive the quantum transition will depend on how seriously institutions treat a deadline set against a threat still taking shape.
Hong Kong's central bank has handed the financial sector a stark assessment: you are not ready for quantum computing, and you have four years to fix it.
On Monday, the Hong Kong Monetary Authority released a white paper introducing the Quantum Preparedness Index, a formal measurement of how well the city's banks can withstand the cryptographic threat posed by sufficiently powerful quantum computers. The overall score was 2.3 out of 10. About half of the surveyed institutions had no formal post-quantum planning in place at all. The HKMA's target is a perfect 10 by 2030.
The timing is not accidental. Hong Kong has been moving aggressively into tokenization—the conversion of real-world assets into digital form on blockchain networks. Since 2023, the government has issued three batches of tokenized green bonds worth roughly HK$16.8 billion. By the end of 2025, banks in the city held more than HK$14 billion in digital assets under custody, a jump of about 180 percent year over year. Tokenized deposits alone reached HK$29 billion. These systems depend entirely on cryptography to function. If that cryptography fails, the entire structure collapses.
The threat is not hypothetical. Quantum computers running Shor's algorithm at scale could eventually break RSA and elliptic-curve cryptography—the mathematical locks that protect financial transactions, verify identities, and authorize transfers. An attacker with that capability could decrypt protected data or forge digital signatures. The HKMA is not sounding an alarm about an imminent threat. Rather, it is pointing out a practical problem: replacing cryptographic systems embedded across financial infrastructure takes years. Banks need to start now, before the machines that could break their defenses actually exist.
The assessment found some early movement. One institution completed a proof of concept applying post-quantum cryptography to distributed-ledger connectivity. HSBC, in 2024, used quantum-safe technology to move tokenized gold across distributed ledgers. These are isolated examples. The broader picture is one of a sector caught between two timelines: the rapid expansion of tokenized finance on one side, and the slow, grinding work of cryptographic migration on the other.
The HKMA's Quantum Preparedness Index is part of a larger strategic push called Fintech 2030, announced in 2025. Tokenization is one of four pillars in a plan that includes more than 40 initiatives. The regulator is advancing tokenized deposits, digital-asset settlement, and real-world asset tokenization. It is also exploring tokenized government bonds and blockchain settlement supported by e-HKD, the city's digital currency.
For banks, the QPI structure translates into clearer expectations. The regulator is not offering guidance; it is setting a measurable standard. The first step is foundational: institutions need to inventory their cryptographic assets, assess their risks, and plan their migrations. The HKMA is essentially saying that the window for preparation is open now, and it will close in 2030. What happens between now and then—how quickly banks move, whether they stumble, whether the technology cooperates—will determine whether Hong Kong's tokenization ambitions survive the quantum transition intact.
Citas Notables
Quantum computers running Shor's algorithm at scale could eventually break RSA and elliptic-curve cryptography used in financial systems.— HKMA white paper
Replacing cryptographic systems embedded across infrastructure can take years, so banks should begin with foundational work now—inventories of cryptographic assets, risk assessments, and migration planning.— HKMA white paper
Quieres la nota completa?
Lee el original en Crypto Breaking News ↗
Science & Space