Hong Kong puts quantum readiness on the tokenization agenda with a 2030 banking target

Hong Kong is moving post-quantum security from a research topic into the operating checklist for banks that want to handle tokenized finance at scale. The Hong Kong Monetary Authority on July 27 released a new white paper on quantum preparedness alongside the banking sector’s first Quantum Preparedness Index, making it clear that the city’s tokenization agenda will be judged not only by issuance volume and settlement speed, but also by whether institutions can keep core cryptography trustworthy as computing threats evolve. For a market that is actively building tokenized bonds, deposit pilots and regulated digital-money rails, that is an important signal: the next phase of RWA infrastructure has to be secure enough for long-lived institutional assets, not just functional enough for pilots.

The regulator’s baseline numbers show why it acted now. The inaugural Quantum Preparedness Index came in at 2.3 out of 10, which puts the sector in an early-stage posture rather than a migration-ready one. The HKMA said 68% of surveyed banks were at least aware of the issue or had moved into planning or pilot work, but 32% had not started the transition journey at all. It also said preparedness remains uneven, with around half of surveyed banks lacking a formal post-quantum transition plan. The authority’s target is ambitious: raise the sector to full readiness by 2030, supported by practical guidance, training and a toolkit being developed with academia and industry.

That matters more in Hong Kong than it would in a market where digital-asset experimentation is still peripheral. The city is steadily pushing pieces of mainstream finance onto blockchain-based rails, and those systems depend heavily on digital signatures, key management and secure message exchange. If those controls age badly, the weak point is not just a wallet or a database entry. It is the integrity of bond ownership records, tokenized deposit instructions, settlement finality and the trust model between banks, custodians and market infrastructure providers. In other words, quantum readiness is becoming part of market structure.

Hong Kong’s own issuance record shows how quickly that structure is taking shape. In February 2023, the government completed what it described as the world’s first tokenized green bond issued by a government, a HK$800 million transaction under its Green Bond Programme. A year later it followed with roughly HK$6 billion of digital green bonds across Hong Kong dollars, renminbi, US dollars and euros, explicitly positioning the deal as a second step beyond the inaugural issue. In November 2025, the government priced a third digital green bond offering of around HK$10 billion, again across multiple currencies. Taken together, those transactions show that Hong Kong is no longer treating tokenized fixed-income issuance as a one-off demonstration; it is building a repeatable sovereign-backed workflow and widening the investor base around it.

The broader digital-asset footprint is also growing inside the banking system. In a February 2026 speech at Consensus Hong Kong, Financial Secretary Paul Chan said banks in the city were holding more than HK$14 billion in digital assets under custody at the end of 2025, up about 180% year over year. He also said tokenized deposits had reached HK$29 billion by year-end. At the policy level, officials have been linking those growth figures to Project Ensemble and the newer Ensemble TX pilot, which are designed to test how tokenized deposits, real-value settlement and other onchain financial transactions can move through regulated infrastructure more efficiently. Once deposits and bond-like instruments begin to circulate in that environment, the cryptographic shelf life of the whole stack becomes a practical supervision issue.

The immediate implication is that banks can no longer treat post-quantum work as a distant cyber program running separately from product teams. Institutions that want to participate in tokenized capital markets will need an inventory of where vulnerable cryptography sits across custody systems, DLT connectors, APIs, signing workflows and vendor dependencies. They will also need migration plans that work across counterparties, because a bank cannot fully modernize a settlement flow if the transfer agent, wallet provider, exchange link or securities depository on the other side is still anchored to older assumptions. Hong Kong’s approach suggests regulators are starting to see that coordination problem early, before production volumes get much larger.

There is still plenty of uncertainty around timing. No regulator can say exactly when a cryptographically relevant quantum machine will arrive, and not every tokenized-finance workflow carries the same exposure window. But financial authorities do not need a precise countdown to act. Long-lived records, sensitive transaction data and the risk of harvest-now, decrypt-later attacks make delay costly, especially in markets trying to position themselves as safe venues for digital versions of cash and securities. The lesson from Hong Kong is less about predicting a sudden break than about avoiding a slow mismatch between headline tokenization progress and the security foundations required to support it.

For RWA markets, that makes the HKMA’s move more consequential than a narrow technology notice. It ties Hong Kong’s tokenization strategy to operational resilience in a way that other financial centers will probably have to copy. If the city succeeds, it will not just have shown that governments and banks can issue and settle tokenized instruments; it will have shown that those instruments can be embedded in a supervisory framework built for the next cryptographic cycle, not the last one. That is the standard institutional allocators, issuers and regulated intermediaries are increasingly going to expect from any jurisdiction that wants to host serious onchain finance.