Bank of Korea Surveys 31 Financial Firms on Crypto Risk Exposure

The Bank of Korea is surveying 31 financial institutions — 18 banks and 13 brokerages — on their exposure to cryptocurrency-related risks, in what local reports describe as the central bank's first review of how deeply financial firms have moved into the virtual asset market.

The survey began on Oct. 23, according to The Herald Business and Yonhap, citing financial industry sources. Responses are reportedly due Wednesday.

What is the central bank asking?

The questionnaire covers each institution's crypto-related staffing and budgets, its business activities in the sector, and its stated reasons for entering the market. It also asks for figures on investments in domestic and overseas crypto companies.

But the heart of the review is scenario-based. The Bank of Korea wants firms to model their vulnerability to three specific shocks.

• A temporary suspension of operations at South Korea's largest crypto exchange by market share, triggered by a major hack or similar incident.
• A steep fall in cryptocurrency prices followed by a sustained trading slump.
• Heavy crypto-related losses at another financial institution, and the fallout that would follow.

The timing is hard to miss. The survey launched before last week's $6.3 billion Binance hack, an attack US authorities have attributed to North Korean hackers. The incident was an order of magnitude beyond anything South Korean institutions have faced, and it maps almost exactly onto the scenario the central bank put in front of its respondents.

What does this change for Korean banks and brokerages? For now, it forces them to put numbers on exposures many have never quantified in one place — staffing, budgets, equity stakes and counterparty links — and hand them to the regulator on a deadline measured in days.

The stablecoin backdrop

The review lands amid a broader drift by South Korean financial firms into digital assets, despite legislative delays.

KB Financial Group completed a pilot of a won-denominated stablecoin in May. In September, Kakao Pay and KakaoBank partnered with the digital asset infrastructure firm Fireblocks to explore similar ground.

The Bank of Korea has itself pushed for bank-led stablecoin issuance. But progress on the proposed Digital Asset Basic Act has stalled amid disagreements over which institutions should be allowed to issue stablecoins.

"Financial institutions are making their own preparations even as virtual asset legislation is moving more slowly than the market expected," a Bank of Korea official told The Korea Herald.

That gap — firms moving while lawmakers argue — is precisely what the survey appears designed to measure. The central bank wants a baseline on how much of the domestic financial system now touches crypto, before it decides how tightly to regulate those links.

Regulators tighten cybersecurity screws

The survey is not the only supervisory response in motion. In October, the Financial Services Commission proposed tougher security requirements after finding deficiencies at 130 of 555 financial companies it examined.

The proposals call for more frequent vulnerability assessments and greater executive accountability for security failures. They follow security incidents at 16 companies, including crypto exchanges.

The pattern across both agencies is consistent: Seoul's regulators are shifting from asking whether financial firms should touch crypto to demanding proof they can survive when something breaks.

Why the scenarios matter

The exchange-shutdown question deserves attention. South Korea's crypto market is unusually concentrated, with one exchange holding the largest share of domestic trading. A hack severe enough to suspend that platform would freeze the primary on-ramp and off-ramp for millions of retail traders, and any bank providing real-time KRW deposits and withdrawals to that exchange would feel the interruption immediately.

The contagion scenario — heavy losses at one financial institution spreading to others — echoes the credit and counterparty channels that supervisors elsewhere have spent two years mapping after the 2022 collapses of Terra, Celsius and FTX. Korean banks' exposure is smaller than that of their US counterparts was, but the central bank clearly wants that verified rather than assumed.

Wednesday's response deadline will give the Bank of Korea its first consolidated picture of institutional crypto exposure in one of the world's largest retail crypto markets. How the regulator acts on that data — and whether it accelerates the stalled Digital Asset Basic Act — is the question the survey's answers will now inform.