Key Takeaways CySEC and ESMA announced joint digital resilience audits for crypto custody providers under CSA 2026. EU crypto custodians must prove strict compliance across 6 core operational risk areas. CySEC will execute on-site and desk reviews on a sample of firms from H2 2026 to H1 2027. Targeting Custody and Infrastructure Risks The Cyprus Securities and Exchange Commission (CySEC) will launch a wave of on-site visits and desk-based reviews targeting authorized crypto asset service providers (CASPs) as part of a broader European effort to strengthen operational resilience in digital asset custody. In a circular issued to regulated firms, CySEC …

