A closed silver toolkit case beside a plain silver shield with orange reflections on black

HKMA and HKUST Launch Post-Quantum Planning Toolkit for Banks

Yuki Lin
Yuki Lin
Updated on 11/04/2026 10:41:27

The HKMA and HKUST launched a PQC Toolkit on November 2. It supports bank transition planning after an initial readiness score of 2.3/10; full readiness by 2030 is a target.

The Hong Kong Monetary Authority and the Hong Kong University of Science and Technology launched a Post-Quantum Cryptography Toolkit on November 2. It gives banks a framework for planning their transition to post-quantum cryptography, rather than certifying that their systems are already quantum-safe.

Related quantum-readiness reporting.

From readiness score to implementation plans

The toolkit covers governance, cryptographic exposure, asset and dependency inventories, supplier engagement, priorities and transition timelines. The HKMA introduced its Quantum Preparedness Index in July 2026. The initial sector score was 2.3 out of 10, indicating an early stage of readiness. A score of 10 by 2030 is the stated objective, not a result already achieved.

More OrangeX.com Security coverage.

OrangeX.com Analysis

Our assessment is that the useful next step is turning awareness into accountable plans and testable migration milestones. Publication of a toolkit does not prove that banks, crypto wallets or blockchains have completed an upgrade. Actual progress will depend on implementation evidence, supplier coordination and sustained testing as standards and technology evolve.

OrangeX.com Trust Center.

Related Reports

BTCPay Urges Fresh Servers for Affected Old Instances, Beyond a Version Update

BTCPay Urges Fresh Servers for Affected Old Instances, Beyond a Version Update

BTCPay’s November 2 advisory links attacks to 2.4.1 and earlier. It recommends a fresh server and new wallet for affected old instances, even if subsequently updated.

Yuki Lin
Yuki Lin
11/05/2026 08:09:14
Concept illustration of a silver data vault with an orange-lit shield.

Chainalysis Discloses Customer Data Access as Security Investigation Continues

Chainalysis says customer identity records were accessed, with no evidence to date of access to investigation content, clear-text passwords or session tokens.

Yuki Lin
Yuki Lin
11/04/2026 07:21:12
A closed silver laptop with a simple warning triangle and orange reflections.

Cursor Flags Two Malicious Claude Code Extension Versions

Cursor’s October 29 notice, updated October 30, identifies malicious Anthropic.claude-code versions 2.1.312 and 2.1.313 distributed for macOS and Windows.

Yuki Lin
Yuki Lin
11/04/2026 06:59:41