Crypto Wallet Makers Now Face the EU’s 24-Hour Exploit Reporting Clock

By Isaac • September 13, 2026 7:31 am •

Crypto wallet makers that sell into the European Union now have a much shorter clock to manage when a serious security problem is under active attack.

The reporting provisions of the EU’s Cyber Resilience Act took effect on September 11. Under the new system, manufacturers of products with digital elements must send an early warning within 24 hours after becoming aware of an actively exploited vulnerability or a severe security incident.

That category reaches far beyond traditional hardware. It can include software and connected products, which puts many consumer crypto wallets and the companies behind them squarely inside the operational challenge.

The first deadline comes before the full technical report.

The European Commission’s reporting guidance says