EU cyber rules put crypto wallet makers on 24-hour reporting clock

The 24-hour early warning window is the real story: it compresses the disclosure timeline for wallet teams that often learn about an exploit from third parties, and it puts the reporting burden on the provider rather than the attacker. Self-custody wallet makers with EU users now carry a compliance cost that their non-EU peers do not, which could shape where such teams base operations or how they segment European services. Whether the 24-hour clock proves workable for small teams, and whether fines reach that ceiling in practice, is the open question.