Hacking & Physical Risks Archives – Continuum

Weekly Risk Update June 05, 2026

Continuum Editor — Fri, 05 Jun 2026 08:12:54 +0000

Welcome back to Continuum Risk Update. Every Friday we pull the top Asia headlines on digital-asset regulation, cyber risk, industry moves and insurance signals, with concise takeaways and practical actions for insurers and corporate risk teams.

1) Regulatory

Hong Kong finalises its crypto regulatory framework as SFC completes the final licensing pillar

SFC chief executive Julia Leung declared this week that the conclusion of its public consultation on licensing regimes for virtual asset advisers and managers marks “the final leg of our journey to complete the regulatory framework for digital assets.” The SFC now covers exchanges, custodians, dealers, and advisers under a single coherent framework. Hong Kong also has 13 publicly offered tokenized products with HK$10.7B in AUM as of March 2026, a sevenfold increase from the prior year. The completion of the framework removes the last regulatory ambiguity that was keeping institutional capital at the door.

Singapore Police and crypto exchanges block $4.2M in scam funds in second joint operation

The Singapore Police Force’s Anti-Scam Centre ran its second joint operation with Coinbase, OKX, Coinhako, Gemini, Independent Reserve, StraitsX, and Upbit between April 16 and May 31, using blockchain analysis tools from Chainalysis and TRM Labs to identify 145+ scam victims across investment, job, love, and government impersonation scams. Combined with the first operation in March, the two rounds have safeguarded over $7M in total. Singapore separately announced the launch of a dedicated Cyber Command unit in May, scheduled to begin operations in July 2026, focused on cybercrime investigations, scam disruption, and crypto-related crime tracking.

2) Hacking & Physical Risks

China-linked SHADOW-EARTH-053 targets government and defense sectors across South, East, and Southeast Asia

Trend Micro disclosed details of a sustained espionage campaign targeting ministries and contractors in Thailand, Malaysia, Pakistan, India, Myanmar, Sri Lanka, and Taiwan, alongside one European NATO member. The group exploits unpatched Microsoft Exchange and IIS servers, deploys Godzilla web shells for persistent access, and stages ShadowPad implants via DLL sideloading. A parallel track specifically surveils Uyghur, Tibetan, Taiwanese, and Hong Kong dissidents and journalists. The dual-track structure, government intelligence collection combined with activist targeting, is a direct signal that political and business cyber risk are converging across the region.

DoJ, Meta, Microsoft, and Coinbase dismantle Southeast Asia crypto fraud networks, freeze $3.8M

The US Department of Justice’s Scam Center Strike Force, partnering with Meta, Microsoft, Starlink, and Coinbase, dismantled pig-butchering, investment fraud, and human trafficking networks running out of Southeast Asian special economic zones. Results: 1.4M Facebook and Instagram accounts disabled, 20,000 Microsoft accounts suspended, $3.8M in crypto frozen, and 63 arrests by the Royal Thai Police. For insurers, the scale confirms that APAC digital asset flows remain deeply entangled with organised fraud infrastructure at the regional level.

3) Industry & Markets

DB Insurance closes $1.65B Fortegra acquisition in the first Korean carrier purchase of a US insurer

South Korea’s DB Insurance completed its acquisition of Florida-based specialty insurer Fortegra for $1.65B in cash, closing the largest purchase of a US insurer by a Korean non-life carrier. Fortegra reported $3.07B in gross written premiums in 2024, operates across all 50 US states and eight European countries, and holds an AM Best A- rating. DB Insurance will operate Fortegra as a wholly owned subsidiary with existing leadership intact. Analysts expect Hanwha Life, Samsung Fire & Marine, and KB Insurance to study this transaction closely as it has established the regulatory and deal-structuring playbook for Korean outbound M&A in Western specialty insurance.

Willis D&O survey: Asian boards rank cyber as their top liability risk, separating the region from the global cohort

Willis’s 2026 global D&O survey of 975 senior decision-makers across finance, insurance, healthcare, and industrial sectors found that 76% of Asian respondents rated data loss and cyberattacks as very important or extremely important, placing the region ahead of the global average where health and safety holds the lead. Geopolitical risk entered the top seven globally for the first time, reflecting the impact of the Iran conflict and US-China trade friction on boardroom risk priorities. For APAC D&O underwriters, the combination of elevated cyber concern and newly surfacing geopolitical exposure is reshaping what directors face in terms of personal liability.

4) Insurance Spotlight

Asia’s cyber insurance market shows structural signs of life after years of flat penetration

A Dark Reading analysis published May 29 found that Asia’s cyber insurance market is showing its first genuine structural growth signals, backed by the CyberCube/UIB report earlier that week confirming Asia as the global growth frontier for the segment. Sub-5% SME penetration across most Asian markets, combined with accelerating ransomware volumes, 5G rollout, and tightening regulatory disclosure mandates, is converting latent demand into active buying. India, Vietnam, and Southeast Asia are the primary growth pockets. The question is no longer whether the market will grow, but which distribution models and product structures will capture it first.

QBE warns cyber attacks are speeding up across Asia Pacific as ransomware dwell time collapses

QBE’s latest APAC threat intelligence found that the average time between attacker access and ransomware deployment has fallen 70% since 2021, from around 100 minutes to under 30 minutes in recent incidents, with some cases recording full encryption of thousands of endpoints in under 10 minutes. APAC is increasingly in scope for newer criminal groups looking for markets with less competition from established actors, and attackers are combining technical access with social engineering to scale impact. For insurers, shorter dwell times compress the incident response window that most policy structures were designed around.

Weekly Risk Update May 29, 2026

Continuum Editor — Fri, 29 May 2026 07:06:37 +0000

1) Regulatory

South Korea’s end-of-May crypto compliance deadline hits as exchanges race to implement kill switches

The FSC’s post-Bithumb reform package reaches its implementation deadline this week, requiring all Korean crypto exchanges to complete upgrades to 5-minute asset reconciliation, automated kill switches that halt transactions on detected discrepancies, and monthly external audit cycles. The original Bithumb incident in February saw 620,000 BTC accidentally credited to 249 users due to a single system error. With the deadline landing at end of May, exchanges that fail to demonstrate compliance face regulatory action as South Korea integrates these controls into its broader digital asset framework law.

Thailand Bitcoin and Ether ETFs advance as Southeast Asia races to become the region’s digital asset hub

Following SEABW’s close, Thailand is pressing ahead with its push to position Southeast Asia as a rival to Hong Kong and Singapore on digital asset infrastructure. The Thai SEC’s approval of crypto ETFs and regulated futures trading on TFEX, combined with a five-year capital gains tax exemption running through 2029, is drawing institutions that were previously sitting on the sidelines. The competitive dynamic between Bangkok, Singapore, and Hong Kong is accelerating regulatory clarity across the region faster than any single regulator could achieve alone.

2) Hacking & Physical Risks

TrapDoor supply chain attack targets crypto and AI developers across npm, PyPI, and Crates.io (May 24-25)

Socket disclosed a sophisticated malware campaign on May 24 that planted 34+ malicious packages and 384+ related versions across the three major developer package repositories. TrapDoor targets developers building crypto, DeFi, Solana, and AI protocols, stealing GitHub tokens, SSH keys, cloud credentials, and wallet data before any code ships. The campaign also injected hidden directives into .cursorrules and CLAUDE.md files to manipulate AI coding assistants into running data exfiltration routines disguised as security scans. For insurers writing smart contract and protocol cover, this confirms the pre-deployment layer is now an active attack surface.

“The next big DeFi exploit will start before the code is deployed” — and 2026 is proving it

A CryptoSlate analysis published this week argues that the industry’s focus on on-chain vulnerabilities is misplaced: the real entry points are now the developer environments, CI/CD pipelines, and dependency chains that determine what code reaches mainnet. The TrapDoor disclosure this week is cited as the clearest live demonstration yet. For underwriters, this shifts the risk profile of smart contract cover: a protocol can pass every audit and still be compromised weeks before it launches.

3) Industry & Markets

APAC insurance M&A holds steady as Australia records seven deals in Q1, led by Zurich’s $415M ClearView acquisition (May 25)

Despite broader APAC dealmaking caution, Australia and New Zealand drove regional insurance M&A with seven transactions in Q1 2026, up from one the prior quarter. The headline deal is Zurich’s pending $415.2M acquisition of ClearView Wealth, described by S&P Global as Zurich’s largest whole-of-company transaction in APAC in nearly a decade. A second deal saw International Medical Group acquire World Nomads from Nib Holdings for $48M to expand travel insurance distribution into Australia. Japanese insurers and private equity continue to be flagged as the primary drivers of deal activity through the rest of 2026.

Australian commercial insurance market remains soft through H1 2026

A May 2026 Insurance Business report confirmed that Australia’s commercial insurance market continues to soften across most lines heading into the second half of the year, with pricing pressure most visible in property and cyber. The softening is partly attributed to increased capacity flowing into the market and a relatively low major loss year to date. For Continuum, the soft Australian market creates both competitive pressure and an opportunity to differentiate on coverage quality and digital asset expertise as regional insurers reprice.

4) Insurance Spotlight

CyberCube and UIB identify Asia as cyber insurance’s next major growth frontier (May 26)

A joint report from CyberCube and United Insurance Brokers published May 26 positions Asia as one of the fastest-growing cyber insurance markets outside the US, driven by surging ransomware activity, rapid digitisation, and structurally low penetration. In many Asian markets, fewer than 5% of small businesses hold standalone cyber policies despite accelerating digital exposure from 5G, AI, and supply chain integration. Vietnam was identified as one of the fastest-growing ransomware targets in the region. The soft pricing environment in Western markets is actively pushing insurers toward Asia as the next volume growth opportunity.

Korea falls behind on cyber insurance as attacks nearly double in two years

South Korea recorded 2,383 cyber incidents in 2025, nearly double the level from two years prior, yet its cyber insurance market accounts for just 0.02% of global premiums. Only 2.7% of Korean companies hold a policy, and only 14.5% are even aware that cyber insurance exists. The low take-up is partly a cultural issue: firms prefer to handle incidents internally to contain reputational damage. As the FSC tightens exchange-level controls and AI-powered attacks intensify, Korea represents one of the starkest protection gap opportunities in the region for insurers with the right distribution approach.

Weekly Risk Update May 22, 2026

Continuum Editor — Fri, 22 May 2026 01:22:59 +0000

1) Regulatory

Southeast Asia Blockchain Week convenes regulators and stablecoin giants in Bangkok

Thailand’s SEC and senior officials from Indonesia gathered at ICONSIAM alongside Circle, Tether, Bitkub, and SCBX for the region’s flagship Web3 policy event. Thailand’s SEC Director confirmed digital assets as a core regulatory priority for the next three years, with plans to expand on-chain issuance and real-time settlement. Circle’s David Katz addressed USDC’s institutional rollout across APAC. The event puts Southeast Asia firmly on the map as an active rulemaking zone, not just a growth market.

Thailand SEC closes public consultation on crypto derivatives licensing simplification

Thailand’s SEC shut its public consultation window on May 20 for a proposal that would let licensed digital asset firms apply for crypto derivatives licenses without creating separate corporate structures. The reform builds on February’s Cabinet amendment formally recognising Bitcoin and Ethereum as eligible instruments for regulated futures trading. With the feedback period closed, Thailand is set to finalise one of the region’s most commercially significant licensing changes, directly affecting how institutional players structure derivatives exposure across Southeast Asia.

2) Hacking & Physical Risks

Verus-Ethereum bridge drained of $11.6M in live cross-chain exploit

Attackers exploited a validation flaw that allowed the bridge to release ETH-side funds without confirming backing on the Verus side. The stolen assets (103.6 tBTC, 1,625 ETH, 147,000 USDC) were swapped to roughly 5,402 ETH and the attacker wallet was pre-seeded via Tornado Cash 14 hours prior. Blockaid detected the attack live but could not prevent the drain. The exploit is one of eight bridge incidents Peckshield tracked through mid-May, which collectively totalled $328.6M, cementing cross-chain bridges as 2026’s primary attack surface.

Peckshield: eight bridge exploits, $328.6M drained in May alone

Peckshield’s mid-May tally confirmed that cross-chain bridge infrastructure is suffering its worst month on record, with eight major incidents logged before the halfway point. The losses compound an already brutal year: April alone saw over $600M stolen across 30+ DeFi incidents, led by the KelpDAO and Drift Protocol exploits. The pattern of bridge failures, concentrated in single-verifier and cross-chain validation architectures, is the clearest signal yet that smart contract cover underwriting needs bridge-specific risk segmentation.

3) Industry & Markets

Pro Global enters APAC insurance market with Australian advisory acquisition

Pro Global acquired GSI Professional Services, a specialist audit and advisory firm serving Australian insurers and MGAs, with founder David Mills staying on as head of region. The deal is a platform play for broader APAC expansion, targeting demand for delegated authority oversight as regulatory expectations tighten across the region. It signals that established global insurance services players are now actively building APAC infrastructure rather than servicing the region remotely.

Ascend and Honor Capital merge to create insurance industry’s first vertically integrated financial operations platform

InsurTech Ascend has agreed to merge with premium finance provider Honor Capital, combining insurance payment infrastructure with capital access in a single platform. The deal is positioned as the first fully integrated financial operations stack for the insurance industry, covering premium financing, payments, and reconciliation. As APAC insurers face rising pressure to digitise financial operations and reduce back-office friction, this kind of vertical integration signals where the market is heading.

Read more

4) Insurance Spotlight

AI is not cyber: insurers pricing the distinction wrong as early litigation mounts

A May 20 Insurance Journal viewpoint made the case gaining traction in underwriting circles: treating AI liability as a subset of cyber risk is a category error, and early litigation is proving it. AI failures are landing in product liability, professional negligence, and algorithmic discrimination frameworks, not data breach language. Berkshire Hathaway, Chubb, and Travelers have secured regulatory approval to exclude AI damages from over 80% of GL policy requests. Standalone AI liability products from Munich Re, Armilla, and Embroker are filling the gap with limits from $2M to $50M. Cyber policies with unaddressed AI wording face contested claims ahead.

India’s IRDAI mandates AI cyber readiness audit from every insurer by May 22

India’s insurance regulator IRDAI issued an emergency directive this week requiring all insurers, reinsurers, brokers, and TPAs to submit a formal Action Taken Report on frontier-AI cyber readiness by May 22. Firms must detail their preventive, detection, and response mechanisms against AI-enabled threats, covering sensitive data assets and legacy IT systems. With less than a week’s notice given, the directive exposes how underprepared much of the sector remains. IRDAI’s revised Cyber Security Guidelines, issued in April and replacing the 2023 framework, underpin the mandate.

Weekly Risk Update May 15, 2026

Continuum Editor — Fri, 15 May 2026 01:20:44 +0000

1) Regulatory

APAC stablecoin adoption has cleared the pilot stage — 56% of institutions now live

A Fireblocks survey of APAC financial institutions found that 56% are already live with stablecoin operations — the highest adoption rate globally — with another 40% in active pilots or planning phases. The shift is directly tied to HKMA and MAS regulatory frameworks coming online: institutions that previously ran proof-of-concept projects are now building production infrastructure for wholesale settlement, payroll, and cross-border B2B flows. 62% of APAC institutions have formally committed budget to digital assets in 2026, with stablecoins as the priority layer.

Bird & Bird flags MAS cryptoasset capital consultation as a “gamechanger” for Singapore banks

The legal analysis highlights that MAS’s proposed shift from a blanket 1,250% Basel risk weight to a principle-based, conditional framework is the most significant change to Singapore bank crypto treatment since digital assets entered the regulatory agenda. For qualifying tokenised assets and stablecoins, the new approach could unlock meaningful balance sheet capacity — and Bird & Bird notes that the tight exposure caps (2% of Tier 1) are designed to let the market prove itself before limits are raised.

2) Hacking & Physical Risks

40+ DeFi protocols have shut down in 2026 as total hack losses pass $770M

A May 9 analysis confirmed that more than 40 DeFi protocols have ceased operations or entered wind-down mode since January 2026, as cumulative hack losses passed $770 million. The crisis is concentrated in cross-chain bridges, liquidity providers, and protocols running single-verifier infrastructure — the same structural weakness exposed by the Kelp DAO and Drift exploits. April alone accounted for over $635 million across 30+ incidents, the worst single month on record.

Roaring Kitty’s verified X account hacked to shill a Solana meme coin

Attackers compromised the long-dormant verified account of GameStop influencer Keith Gill and posted a Pump.fun contract address, triggering an instant rally before the posts were deleted. Over 80 wallets lost nearly $2.9M in the collapse while the developer, operating through 10 wallets, extracted $611K. The incident is the latest in a pattern of high-profile social media account takeovers being weaponised for coordinated pump-and-dump schemes.

3) Industry & Markets

APAC dealmaking drops 6% in Q1 2026 as M&A caution bites

GlobalData’s Q1 2026 APAC deal analysis, covered by Insurance Business this week, found overall deal activity down 6% year-on-year, with M&A contracting 26% and private equity volumes falling 42%. Japanese deal activity slipped 51%, a notable reversal given the sector’s aggressive outbound appetite in 2025. The only bright spot was venture financing, up 21%, concentrated in AI and digital infrastructure plays. Regulatory scrutiny, geopolitical complexity, and longer due-diligence cycles are the primary cited headwinds.

APAC set to outspend every other region on digital asset infrastructure in 2026 — 62% of institutions have committed budget, more than double the global average

Fireblocks’ Financial Grid Report found that APAC is the most aggressive region for digital asset infrastructure investment this year, driven by live regulatory frameworks in Hong Kong and Singapore pulling institutions from pilot to production. New customer acquisition and market expansion — not compliance — are the primary drivers, with 36% of APAC institutions already in external client pilots, more than double the global average of 20%.

Read more

4) Insurance Spotlight

Western Union launches USDPT stablecoin on Solana — Philippines is the first APAC rollout market

Western Union announced it has selected Fireblocks to provide wallet, settlement, and financial operations infrastructure for USDPT, its new USD-backed stablecoin built on Solana. The Philippines is the first rollout market, with Bolivia to follow — putting stablecoin-powered remittances directly into one of APAC’s largest inbound corridors. The move targets Western Union’s $100B+ annual remittance network and signals that traditional money-transfer players are now building digital-asset infrastructure rather than watching from the sidelines.

SQ Protocol exploited on BNB Chain via hardcoded owner backdoor

The exploit was small in dollar terms ($346K) but significant in method: a publicly accessible ownership function in the verified staking contract allowed the attacker to assume full control, create fraudulent staking claims, and drain liquidity in a single transaction sequence. Security researchers flagged it as a textbook example of how unaudited admin access patterns in “verified” contracts create silent, catastrophic risk — a concern directly relevant to insurers writing smart contract covers on BNB Chain protocols.

Weekly Risk Update May 08, 2026

Continuum Editor — Fri, 08 May 2026 01:19:04 +0000

1) Regulatory

HKMA confirms 36 stablecoin applications — but only 2 will proceed

HKMA Chief Executive Eddie Yue confirmed on May 5 that the regulator received approximately 36 applications under the Stablecoins Ordinance since its launch, but only HSBC and Anchorpoint Financial (the Standard Chartered, HKT, and Animoca JV) cleared the first round. Future licenses will be issued conditionally and gradually, with approval tied to market conditions, risk levels, and the operational track record of the two initial issuers. “The goal is not to flood the market,” the HKMA made clear.

2) Hacking & Physical Risks

KelpDAO blames LayerZero for approving the flawed setup behind $292M hack — migrates to Chainlink CCIP

In the post-mortem fallout from April’s $292M rsETH exploit, KelpDAO publicly claimed that LayerZero personnel had actively approved the 1-of-1 verifier configuration that allowed attackers to forge cross-chain messages. Chainalysis confirmed that 47% of active LayerZero OApp contracts currently use the same vulnerable single-verifier setup. Kelp has since migrated its rsETH bridge to Chainlink’s CCIP — the first major protocol to publicly abandon LayerZero following the exploit.

3) Industry & Markets

Asia’s bank-anchored stablecoin frameworks are now spawning an application layer

A May 6 analysis by Insignia Business Review examined how APAC’s regulated stablecoin infrastructure — anchored by bank-issued HKD stablecoins in Hong Kong and MAS-compliant instruments in Singapore — is creating a new rails layer for fintech and payments companies. Rather than building on permissionless chains, the emerging application layer in Asia is expected to run on regulated, bank-backed instruments, with DTSP-licensed providers in Singapore interoperable with HKMA-approved issuers in Hong Kong.

4) Insurance Spotlight

Morgan Lewis: Cyber risk in Asia is no longer an IT problem — it’s a board liability and insurance imperative

A widely circulated Morgan Lewis briefing published in April mapped how APAC’s wave of new cyber legislation — including Hong Kong’s Critical Infrastructure Ordinance (effective January 2026), Singapore’s expanded Cybersecurity Act, and similar frameworks in Malaysia and Vietnam — is formally moving cyber risk from the IT department to the C-suite and board. Mandatory incident reporting windows, board-level accountability obligations, and regulatory audit rights now apply to critical infrastructure operators across multiple jurisdictions simultaneously.

Weekly Risk Update May 01, 2026

Continuum Editor — Fri, 01 May 2026 01:17:35 +0000

1) Regulatory

MAS proposes flexible crypto capital rules for Singapore banks

The Monetary Authority of Singapore published a landmark consultation paper on April 29–30 proposing a new, principle-based capital framework for banks dealing in cryptoassets. The proposal replaces the punishing 1,250% risk weight under Basel Group 2, allowing qualifying assets such as tokenised securities, regulated stablecoins, and certain permissioned-chain tokens to be treated as Group 1 — subject to much lower capital charges. As a temporary guardrail, local banks are capped at 2% of Tier 1 capital in crypto exposure, rising to 5% for crypto-issuance activities.

2) Hacking & Physical Risks

North Korea now responsible for 76% of all 2026 crypto hack losses as April breaks records

TRM Labs’ April 30 analysis confirmed that DPRK-linked groups have stolen $577 million of a total $759 million taken from crypto platforms in 2026 to date — 76% of all losses. The finding coincides with April closing as the single worst month for crypto theft ever recorded, with more than 30 incidents and over $635 million drained. The week itself saw Wasabi Protocol lose $4.55 million on April 30 after attackers compromised its deployer admin key, highlighting that even mid-tier platforms remain exposed to privileged-access attacks.

3) Industry & Markets

Japan and Korea insurers set to accelerate global M&A push

A viewpoint published by Insurance Journal on April 29 outlined how Japanese and Korean insurers are expected to intensify cross-border acquisition activity through 2026 and beyond. Japanese groups, flush with capital following domestic portfolio adjustments, are targeting mid-sized specialty carriers in the US and APAC — preferring underwriting expertise in cyber, energy-transition, and professional lines over cat-exposed commodity books. Korea’s DB Insurance made history in 2025 with the first full acquisition of a US insurer by a Korean firm ($1.65B for Fortegra Group), and peers are watching closely.

4) Insurance Spotlight

Single ransomware crew drives nearly half of all cyber insurance claims — At-Bay 2026 InsurSec Report

At-Bay’s 2026 InsurSec Report, based on more than 100,000 policy years of claims data, found that 73% of ransomware attacks originated through a compromised VPN — a share that nearly doubled in two years. More striking: the Akira group alone accounted for over 40% of ransomware claims in At-Bay’s book, with SonicWall appliances present in 86% of its attacks. Average ransomware severity climbed 16% to $508K, and overall claim frequency rose 7% year-on-year to an average severity of $221K across all cyber claims.

Weekly Risk Update April 24, 2026

Continuum Editor — Fri, 24 Apr 2026 01:35:57 +0000

1) Regulatory

Damisa and dLocal partner to launch stablecoin-based cross-border settlement across APACAnnounced April 23, Damisa has partnered with dLocal to connect its stablecoin settlement infrastructure to local payment rails across key APAC markets through a single integration. Merchants gain access to local bank transfers in multiple markets, with settlement in hours rather than days and a single transparent fee. The APAC cross-border commerce market is projected to exceed $4 trillion by 2028, and the deal signals growing commercial momentum behind stablecoin settlement rails as regulatory frameworks across the region mature.

Bybit advances crypto-mainstream integration vision at Hong Kong Web3 FestivalOn April 21, Bybit took centre stage at the Hong Kong Web3 Festival to lay out its vision for digital assets’ integration into mainstream finance — covering regulatory frameworks, technological infrastructure, and the practical pathways through which crypto is reshaping financial services. The event, one of Asia’s premier crypto gatherings, served as a signal of Hong Kong’s continued positioning as the region’s regulated digital asset hub, with multiple global exchanges and institutional players present.

2) Hacking & Physical Risks

Lazarus Group drains $292M from Kelp DAO in the largest DeFi hack of 2026On April 18, attackers attributed to North Korea’s Lazarus Group exploited a 1-of-1 verifier setup on Kelp DAO’s LayerZero-powered bridge, draining 116,500 rsETH — roughly 18% of circulating supply. The attack triggered emergency freezes across at least nine lending protocols and caused Aave’s TVL to drop $6.6 billion. Combined April 2026 DeFi losses now exceed $600 million across four major exploits, and the Kelp hack has overtaken Drift Protocol as the largest single DeFi theft of the year.

Black Hat Asia 2026: autonomous AI hackers are now an operational realityRunning April 21–24 at Marina Bay Sands in Singapore, this year’s Black Hat Asia confirmed what many in the industry feared: autonomous AI-driven attacks are no longer theoretical. Keynote speaker Ari Herbert-Voss (April 24) presented documented scenarios in which an agentic AI can gain initial access, map a network, and deploy a secondary payload — all within 22 seconds. Violet Blue (April 23) flagged APAC’s fragmented data protection frameworks as a structural vulnerability in the face of these threats. Check Point data presented at the conference showed APAC organisations facing 3,026 weekly attacks on average, with a ransomware infection rate of 0.60% — well above the global average of 0.44%.

3) Industry & Markets

APAC insurers are racing into private markets — their infrastructure is not keeping upA Clearwater Analytics report published April 22, surveying 150 senior executives managing $3.8 trillion in assets across Hong Kong, Singapore, and Australia, found that APAC insurers expect to allocate a third of their portfolios to private debt, private equity, and infrastructure within five years — up from 20% today. But 93% of those same executives acknowledge that legacy technology is already constraining their operations. Only 42% rate their data integration capabilities as excellent, and 95% say the industry remains resistant to change — even as the allocation push demands more, not less, from their systems.

4) Insurance Spotlight

Munich Re: 9 in 10 C-suite executives say their companies are inadequately protected against cyber riskMunich Re’s Global Cyber Risk and Insurance Survey 2026, covering over 9,500 respondents across 20 countries, found that despite rising investment, 90% of C-level managers consider their organisations inadequately protected against cyberattacks. Government, manufacturing, and financial services remain the most targeted sectors. Munich Re projects the global cyber insurance market will grow from $15 billion in 2025 to $28 billion by 2030 — a 15% average annual growth rate — with SME underinsurance flagged as the most critical protection gap remaining in APAC and globally.

Weekly Risk Update April 17, 2026

Continuum Editor — Fri, 17 Apr 2026 01:35:30 +0000

1) Regulatory

HKMA awards Hong Kong’s first stablecoin licences to HSBC and Standard Chartered-led AnchorpointOn April 10, the HKMA issued Hong Kong’s inaugural stablecoin licences under the Stablecoins Ordinance — granted to HSBC and Anchorpoint Financial, a joint venture led by Standard Chartered with Animoca Brands and HKT. Selected from 36 applications, both were chosen for demonstrating credible use cases and robust risk management. HSBC plans to launch a HKD-denominated stablecoin in H2 2026. Anchorpoint’s HKDAP stablecoin targets cross-border payments, tokenised asset settlement, and programmable payments from Q2.

Japan reclassifies crypto as financial instruments under the FIEAJapan’s cabinet approved amendments to the Financial Instruments and Exchange Act on April 10, reclassifying cryptocurrency under the same legal framework as stocks and bonds. The 105 tokens flagged — including Bitcoin and Ethereum — will now face mandatory annual disclosures, a full insider trading ban, and significantly toughened penalties: maximum prison terms rise from 3 to 10 years, fines from ¥3M to ¥10M. FSA workshops begin May 15 to guide exchanges through compliance. The shift marks Japan’s most sweeping crypto regulatory overhaul to date.

2) Hacking & Physical Risks

Southeast Asia in the blast radius of the Iran cyber warSecurity researchers and regional analysts have flagged a material expansion of Iran-linked cyber operations into Southeast Asia as the US-Israel-Iran conflict widens. Targeting has expanded from a handful of countries to more than 20, with energy, shipping, and banking networks in Singapore, Malaysia, Vietnam, and the Philippines increasingly in scope. The Soufan Center noted on April 15 that ASEAN firms tied into global US and Israeli supply chains face heightened exposure as Iran seeks to hit economic interests beyond the Middle East.

3) Industry & Markets

HDFC Life posts steady Q4 FY26 results as India life market holds momentumHDFC Life reported on April 16 that net profit rose 4% year-on-year to Rs 497 crore in Q4 FY26, with Value of New Business up 7% — a key indicator of long-term profitability from fresh policy sales. The results reflect sustained consumer demand in India’s life insurance market despite broader macroeconomic headwinds, and will be watched by APAC insurers and reinsurers tracking India as a primary growth destination for cross-border capital deployment in 2026.

Alpha FMC: insurance industry moves from tech modernisation to measurable performancePublished April 15, Alpha FMC’s 2026 Insurance Outlook found that the industry has moved past AI experimentation and is now expected to embed technology across underwriting, claims, and operations to deliver demonstrable commercial results. The report signals a shift in boardroom expectations — from “we are investing in AI” to “show us the outcome” — with capital efficiency and underwriting performance now the benchmark for technology investment in the sector.

4) Insurance Spotlight

Cyber risk is no longer just an IT issue for APAC marine insurers InsuranceAsia News reported on April 16 that marine insurers across Asia are increasingly treating cyber as a first-order underwriting risk, not a technology footnote. Geopolitical tensions — particularly around the Strait of Hormuz, where transit insurance rates have become prohibitive — are converging with cyber threat exposure to create compound risks for shipping-dependent APAC economies. With Singapore, Malaysia, and the Philippines heavily reliant on maritime trade corridors, the crossover between marine, political risk, and cyber lines is becoming a material underwriting challenge.

Weekly Risk Update April 10, 2026

Continuum Editor — Fri, 10 Apr 2026 01:30:43 +0000

1) Regulatory

Four APAC jurisdictions set overlapping licensing deadlines in Q2 2026

Australia, Japan, Hong Kong, and South Korea are each rolling out new digital asset licensing and compliance regimes within a 90-day window this quarter. The most consequential single deadline falls in Australia, where parliament passed the Corporations Amendment (Digital Assets Framework) Bill on 1 April. Crypto platform operators must now hold an Australian Financial Services Licence, yet only around 10% of the roughly 400 registered platforms currently hold ASIC authorisation.

South Korea proposes ownership caps that could reshape exchange consolidation

The Financial Services Commission has proposed limiting single shareholders in crypto exchanges to 15-20% ownership. The rule would transform exchanges from founder-controlled entities into quasi-public infrastructure, and is now casting regulatory uncertainty over major pending transactions including the Naver-Dunamu merger and Mirae Asset’s Korbit acquisition. Legal experts suggest a transition window of five to ten years may be granted.

2) Hacking & Physical Risks

North Korean hackers continue to dominate state-backed crypto theft

North Korea’s Lazarus Group stole $2.02 billion in cryptocurrency in 2025, a 51% year-on-year increase, achieved with 74% fewer known attacks than prior years. The shift toward fewer, larger incidents culminated in the $1.5 billion Bybit breach in February 2025 — the largest single crypto theft on record. The group exploited a third-party wallet software vulnerability during a live fund transfer, laundering at least $160 million within 48 hours via DeFi protocols and bridge services. Lazarus operates a structured 45-day laundering cycle and relies heavily on Chinese-language OTC networks across the Asia-Pacific region.

Credential theft drives 60% of financial sector breaches; AI-powered fraud scaling fast

Stolen credentials remain the most efficient entry point for financial cybercrime in Asia, accounting for approximately 60% of attacks targeting financial firms. Ransomware continues to grow, with India and Japan among the highest-volume targets in the region. AI-powered fraud tooling is now accelerating attack scale: AI-driven spear-phishing messages are being reported as nearly three times more effective than conventional phishing. Crypto scams are increasingly targeting experienced investors and retired market professionals via trust-building schemes that exploit Web3 browser access within legitimate exchange apps.

3) Industry & Markets

Korean brokerages racing to acquire crypto exchange stakes

South Korean securities firms are aggressively consolidating with crypto exchanges as tokenised securities legislation stalls. Mirae Asset Group completed a 92% acquisition of Korbit for $92 million in February 2026, securing management control and a board seat. Korea Investment and Securities is now in early-stage discussions to acquire approximately a 20% stake in Coinone, South Korea’s third-largest exchange by volume. Separately, Naver Financial and Dunamu (operator of Upbit, the dominant Korean exchange) have approved a stock-swap merger that would create one of the most powerful digital asset platforms in Asia. Coinbase has also been reported to be exploring a Coinone acquisition.

Hong Kong consolidates position as Asia’s institutional digital asset hub

Hong Kong’s regulatory approach is diverging sharply from the rest of the region. The city has expanded permissible services for licensed virtual asset trading platforms, issued its first stablecoin licences, and advanced its A-S-P-I-Re governance framework. Major banks are applying for stablecoin licences. The HashKey On-Chain Finance Summit and the Hong Kong Web3 Festival in April 2026 are bringing together institutional investors, DeFi builders, and TradFi executives including representation from Standard Chartered, EY, and OSL to discuss programmable credit and real-world asset tokenisation. OSL has signalled that 2026 will see settlement infrastructure shift decisively toward regulated stablecoins and tokenised money.

4) Insurance Spotlight

Hong Kong Insurance Authority moves to allow insurers to invest in crypto

Hong Kong is set to become the first Asian jurisdiction to establish explicit rules permitting insurance companies to allocate capital into cryptocurrencies and regulated stablecoins. The Hong Kong Insurance Authority’s proposed framework applies a 100% risk charge to direct crypto holdings, meaning insurers must reserve a dollar in capital for every dollar invested. Stablecoins carry risk charges based on the underlying fiat peg. Public consultation ran from February through April 2026, with legislative submissions to follow. Japan, by contrast, currently excludes cryptocurrencies from eligible investment assets for insurers, though a 2026 reclassification remains under discussion.

APAC cyber insurance premiums tracking 25-28% CAGR through 2030

CyberCube analysis positions Asia-Pacific as one of the fastest-growing regions globally for cyber reinsurance, driven by lower current penetration rates against a backdrop of sharply rising incident frequency. Stricter data privacy and cybersecurity regulations across Singapore, Japan, South Korea, and emerging Southeast Asian frameworks are compelling organisations to seek coverage as part of licensing and compliance strategies. The DeFi protocols and Web3 platforms segment is projected to grow at the fastest rate within the crypto insurance sub-market, as on-chain application expansion increases smart contract, oracle, and governance exploit exposure.

Weekly Risk Update April 3, 2026

Continuum Editor — Thu, 02 Apr 2026 23:34:34 +0000

1) Regulatory

One year on from “Liberation Day” — APAC counts the costApril 2 marked the first anniversary of Trump’s sweeping tariff announcements. While several Southeast Asian markets negotiated rates down to 19-20%, the structural disruption has been lasting: supply chains have been rerouted, bilateral trade patterns reshuffled, and geopolitical alignments tested. New USTR Section 301 investigations launched in March add fresh uncertainty. For APAC insurers and risk teams, the tariff regime has materially complicated cross-border trade credit, supply chain, and political risk underwriting.

2) Hacking & Physical Risks

DPRK-linked hackers drain $285M from Drift Protocol in largest DeFi hack of 2026On April 1, attackers believed to be North Korean state actors drained approximately $285 million from Solana-based Drift Protocol — the largest DeFi exploit of 2026 and the second-largest in Solana’s history. The attack combined months of social engineering against multisig signers, oracle manipulation, and a zero-timelock governance exploit that executed in just 12 minutes. Drift suspended deposits and withdrawals immediately. The incident extends the DPRK’s record as the world’s most prolific crypto theft operation.

March 2026 crypto hack losses reach $52M across 20 incidentsPeckShield’s monthly tally confirmed that March 2026 saw $52 million lost across 20 major crypto exploits, with the Resolv Labs USR minting attack and several cross-chain bridge vulnerabilities accounting for the bulk of losses. The figures underscore a sustained pattern of elevated DeFi risk heading into Q2, with Q1 2026 total losses now exceeding $189M.

3) Industry & Markets

Sanlam acquires additional stake in India’s Shriram Life InsuranceSanlam Emerging Markets completed its acquisition of a 14.72% stake in Shriram Life from Piramal Finance, closing as targeted by March 31. The deal reflects continued international appetite for Indian life insurance assets as the market expands, and fits the broader pattern of cross-border stake accumulation in APAC emerging market insurance businesses that defined deal activity in 2025.

4) Insurance Spotlight

Triple-I and Fenix24: insurers are the target — and many are underpreparedPublished April 2, the joint Insurance Information Institute and Fenix24 report “Cybersecurity for Insurers: Squaring Safety with Service” found that while P&C insurers have invested meaningfully in cybersecurity, critical gaps remain. Only around half deploy security patches monthly, most have not tested recovery plans specifically for ransomware scenarios, and authentication weaknesses persist across the sector. The findings are pointed: insurers who underwrite cyber risk are themselves exposed to the same threats they price — and regulators are beginning to take note.