Hong Kong Regulator Calls for Tough Rules Despite Ambitions to Be Crypto Hub
Julia Leung, deputy CEO of Hong Kong’s Securities and Futures Commission, highlighted DeFi as an area that needs regulations.

Crypto service providers are moving from the fringe to provide a full range of financial services, making a "light touch" regulatory approach “far from adequate,” a Hong Kong regulator said on Thursday.
Julia Leung, deputy CEO and executive director at Hong Kong’s Securities and Futures Commission (SFC), said that the recent turmoil in crypto markets highlighted not only the volatility and structural vulnerabilities in the industry, but also how it is becoming more connected with traditional financial services.
Leung's comments during a speech at a crypto conference in London comes just as Hong Kong expressed a desire to open itself up to crypto – and possibly relax its tough regulations.
International cryptocurrency exchange FTX, which filed for bankruptcy last Friday, was once based in Hong Kong, and sources told CoinDesk that the exchange still has staff in the city.
Leung noted that Hong Kong’s opt-in regulatory framework requires that client assets be separated from a firm's own assets. To address conflicts of interest, it prohibits virtual-asset platforms from trading on their own account and they can't lend or pledge client assets.
Centralized virtual-asset trading platforms operate in ways similar to stock exchanges and broker-dealers, Leung said, adding that the SFC will hold the platforms to similar standards that apply to stock exchanges and broker-dealers.
She noted that the SFC had announced its opt-in framework for centralized trading platforms in 2018 but that authorities could apply the full force of their legal power only to platforms willing to trade at least one security token.
Only two companies in Hong Kong, OSL and HashKey, are licensed under the opt-in regime. Most retail investors in the city use unlicensed platforms.
A bill now in Hong Kong’s Legislative Assembly would expand the existing regulatory regime to platforms that don't trade security tokens. If that bill is passed, all centralized platforms would need to be licensed by the SFC, whether or not they trade security tokens, although they would receive a grace period.
Leung said that given recognition of the growing investor demand for virtual assets, particularly among private banks and hedge fund customers, it was important for regulators to provide clarity to banks, brokers and fund managers.
“Many financial institutions are now exploring how to tokenize financial assets or develop their own tokens on private blockchains,” Leung said.
The SFC plans to issue a notice to clarify that tokenized debt securities as digital representations of traditional securities on the blockchain should be treated in a similar way as existing conventional securities, she said.
Leung also spoke about decentralized finance, saying that “most DeFi activities operate outside any regulatory system”.
According to Leung, some operators are intentionally elusive to minimize liability and regulatory scrutiny. She said that regulators worldwide have reached a consensus on a coordinated approach and that they would be “relentless” in pursuing DeFi regulation.
More For You
Protocol Research: GoPlus Security

What to know:
- As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
- GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
- Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.
Di più per voi
CFTC Gives No-Action Leeway to Polymarket, Gemini, PredictIt, LedgerX Over Data Rules

The CFTC granted the operators of Polymarket, PredictIt, Gemini and LedgerX permission to skip certain recordkeeping requirements.
Cosa sapere:
- The Commodity Futures Trading Commission granted several prediction-market firms certain regulatory leeway in meeting derivatives rules, suggesting they won't get into enforcement trouble if they do business as intended.
- The no-action letters went to Polymarket, PredictIt, Gemini and LedgerX/MIAX.











