Community Trust ScoreVerified
Hong Kong’s banking regulator just told its sector, bluntly, that it’s not ready. The Hong Kong Monetary Authority dropped a white paper Monday laying out a quantum-computing security framework — and the numbers aren’t flattering.
The centerpiece is something called the Quantum Preparedness Index, or QPI. Banks in Hong Kong currently sit at 2.3 out of 10 on that scale. The HKMA wants a perfect 10 by 2030. That’s a steep climb, and the regulator isn’t pretending otherwise. The white paper calls on banks to run comprehensive inventories of their cryptographic systems, identify vulnerabilities, and start planning migration paths toward post-quantum security — all before quantum computers capable of running Shor’s algorithm become widely available. Shor’s algorithm, for context, can theoretically crack RSA and elliptic-curve cryptography, the two pillars holding up most of today’s financial security infrastructure. If those fall, a lot of blockchain-based financial plumbing falls with them.
Why Quantum Threats Hit Crypto Harder
The timing matters. Hong Kong hasn’t just been dabbling in blockchain — it’s been going deep. Since 2023, the city has issued roughly HK$16.8 billion in tokenized green bonds, equivalent to about $2.1 billion. Digital assets held by Hong Kong banks surged past HK$14 billion (around $1.785 billion) by end of 2025, a jump of approximately 180% from the year before, per Financial Secretary Paul Chan. Tokenized deposits hit HK$29 billion, or $3.7 billion. Those aren’t small numbers. And every single one of those positions depends on cryptographic security to function.
The HKMA’s own white paper is direct about it: distributed ledger technology relies on cryptography as its core security mechanism. Break the cryptography, and you don’t just have a software bug — you have a systemic exposure across an entire asset class. That’s the scenario the regulator is trying to get ahead of.
HSBC already ran a proof of concept in 2024. The bank moved tokenized gold across distributed ledgers using quantum-safe technology, applying post-quantum cryptography to financial networks in a live setting. It’s probably the clearest example so far of a major institution actually testing these defenses rather than just writing about them. The white paper also mentions at least one other financial institution completing a proof of concept applying post-quantum cryptography to distributed-ledger connectivity, though the source didn’t specify which firm.
Fintech 2030 and the Tokenization Push
All of this sits inside a bigger play. The HKMA’s Fintech 2030 strategy, launched in 2025, puts tokenization at the center of Hong Kong’s financial future. More than 40 initiatives are in motion — regularizing tokenized government bond issuance, exploring blockchain settlement solutions, and pushing forward with digital currency options including e-HKD and regulated stablecoins. Project Ensemble, another HKMA effort, is specifically focused on improving tokenized deposits and digital-asset settlements.
That’s a lot of infrastructure being built on cryptographic foundations that are, by the regulator’s own admission, not yet quantum-resistant. The 2.3 out of 10 score makes that gap pretty obvious.
So the white paper is basically a call to action. Banks are being told to start now — not when quantum computers are commercially available, but now, while there’s still runway to plan and migrate. The HKMA’s logic is straightforward: cryptographic migration at banking scale takes years. If institutions wait until the threat is imminent, they won’t have enough time to adapt cleanly.
What Banks Are Being Asked to Do
The ask is concrete. Inventory your cryptographic systems. Assess which ones are most exposed. Prioritize migration to post-quantum standards. And do it on a timeline that gets you to full readiness before the threat window opens — which the HKMA has loosely pegged around 2030.
Whether banks move fast enough is unclear. A score of 2.3 out of 10 suggests the sector hasn’t treated this as urgent yet. That’s not unique to Hong Kong — quantum preparedness is a slow burn across global banking, and most institutions are still in early-stage assessment mode. But Hong Kong’s specific exposure is probably higher than average, given how aggressively the city has pushed tokenized assets and blockchain settlement into live financial infrastructure.
And it’s not just about protecting existing assets. The HKMA is building toward a future where e-HKD, tokenized government bonds, and regulated stablecoins form a meaningful part of settlement infrastructure. If that future arrives before the cryptography is secured, the vulnerabilities won’t be theoretical.
HSBC’s 2024 tokenized gold transfer remains the clearest benchmark for what post-quantum cryptography looks like in practice inside a major financial institution. The regulator seems to want more institutions running similar experiments — fast.
Financial Secretary Paul Chan’s figures put the stakes in plain view: HK$29 billion in tokenized deposits, HK$14 billion in digital assets, 180% growth in a single year.
Frequently Asked Questions
What is the Quantum Preparedness Index and what score do Hong Kong banks currently hold?
The Quantum Preparedness Index (QPI) is an HKMA tool measuring how ready Hong Kong’s banking sector is against quantum-computing threats. Banks currently score 2.3 out of 10, with the HKMA targeting a perfect score by 2030.
What did HSBC do with quantum-safe technology in 2024?
In 2024, HSBC moved tokenized gold across distributed ledgers using quantum-safe technology, making it one of the first major banks to apply post-quantum cryptography to a live financial network transfer.
