HKMA Scores Banks 2.3/10 on Quantum Readiness, Sets 2030 Target

The Hong Kong Monetary Authority (HKMA) has put a hard number on how exposed the territory’s banks are to quantum computing: 2.3 out of 10. That is the score the regulator assigned in its first Quantum Preparedness Index, published Monday alongside a whitepaper unveiled at the eighth FiNETech conference. The HKMA wants the industry at a full 10 by 2030.

The index is built on a survey of Hong Kong banks conducted earlier this year and tracks four stages of maturity: awareness, planning, pilot programs and practical preparedness. Roughly 68% of respondents showed at least some awareness of quantum risk or had moved into planning or pilot phases. The remainder — nearly a third of the sector — had not started at all.

Digging into the numbers, about half of surveyed banks have yet to formalize any plan for migrating to post-quantum cryptography, the encryption standards designed to resist attacks from sufficiently powerful quantum computers. Board-level discussions on the topic had taken place at roughly half the institutions, but only one-third had actually begun exploring or testing quantum-resistant tools. In short, most of the industry is still at the “figuring out the problem” stage rather than building real defenses.

Why a 2.3 score matters beyond Hong Kong

The cryptography flagged as at risk — the public-key systems securing bank transactions and, crucially, most blockchain networks — is the same math that protects Bitcoin’s signatures and wallet security. The HKMA whitepaper frames the threat as “harvest now, decrypt later”: adversaries can already be capturing encrypted data today with the expectation of cracking it once quantum machines mature enough to break current algorithms.

Unlike Hong Kong’s banks, Bitcoin has no central authority capable of issuing a compliance deadline or a preparedness index. Any shift to quantum-resistant signatures on Bitcoin would need to clear the network’s decentralized governance process — a rough consensus among developers, miners and node operators that has historically moved far slower than a regulator’s roadmap. That leaves the asset’s timeline for hardening its cryptography an open question, even as the same underlying risk that worries Hong Kong’s central bank applies directly to on-chain holdings.

What the HKMA plans to do about it

To close the gap between the current 2.3 score and the 2030 target, the HKMA says it will roll out toolkits, workshops and skills training aimed at pushing banks from mere awareness into concrete pilot projects and, eventually, practical deployment of post-quantum cryptography. The move puts Hong Kong alongside other jurisdictions, including U.S. government agencies, that have set parallel timelines for migrating critical infrastructure to quantum-safe standards.

For crypto holders, the takeaway is less about a specific deadline and more about the shared clock. Traditional finance is now measuring its quantum exposure in a published, trackable score, while Bitcoin and other blockchains carry the same underlying vulnerability without an equivalent public benchmark or enforced upgrade path.

Sources

• coindesk.com
• beincrypto.com