Japan Tightens Crypto Laws After $305M Exchange Hack to Boost Security and Innovation
Japan enacts new crypto regulations after $305M hack, focusing on security, AML, and stablecoin oversight.
In the wake of a $305 million cyberattack on DMM Bitcoin, Japan has enacted a sweeping new cryptocurrency law aimed at fortifying digital asset security and investor protection. The legislation, passed in early June 2025, represents one of the most comprehensive efforts globally to address systemic risks in the crypto sector.
Central to the law is the requirement that all cryptocurrency exchanges operating in Japan must hold customer assets domestically. This provision is designed to eliminate vulnerabilities linked to overseas custodianships, thereby improving asset recovery prospects in crisis situations. The regulation also signals Japan's intent to bolster investor confidence and reassert control over its rapidly expanding crypto market.
Another core feature of the law is its overhaul of anti-money laundering (AML) requirements. By instituting stricter compliance frameworks, the Japanese government aims to clamp down on digital currency use in illicit activities. This includes enhanced monitoring mechanisms and clearer obligations for reporting suspicious transactions.
A notable innovation in the law is the formal authorization of direct cryptocurrency usage within applications. This change paves the way for mainstream adoption, allowing users to make in-app crypto payments for services and goods with legal clarity. The provision is expected to catalyze growth in fintech and application development, while encouraging broader consumer use.
In tandem, the law imposes rigorous standards on stablecoin issuance. Issuers must now meet strict disclosure and operational criteria to ensure that these fiat-pegged tokens remain transparent, reliable, and insulated from potential collapse. This marks a proactive step to avoid destabilization seen in previous stablecoin controversies worldwide.
The urgency behind the legislation was amplified by the high-profile May 2024 hack, where 4,502.9 bitcoins were stolen from DMM Bitcoin, reportedly by North Korea-affiliated hacker group TraderTraitor. Although DMM pledged user compensation, it shuttered its operations and transferred assets to SBI VC Trade in early 2025. The scale and geopolitical implications of the breach underscored the critical need for regulatory reform.
Industry analysts expect Japan’s new legal framework to have broad implications, not only shoring up domestic protections but potentially influencing global standards. The balance between innovation and oversight positions Japan as a frontrunner in regulated cryptocurrency adoption, appealing to both developers and institutional investors.
Japan’s regulatory pivot demonstrates a mature and proactive stance toward cryptocurrency governance. By enhancing asset security, mandating local custody, strengthening AML protocols, and enabling secure stablecoin and app-based crypto use, the country is charting a course toward a safer and more dynamic digital financial landscape.
