Key Takeaways
- Moody’s identifies quantum computing as an emerging cybersecurity threat facing financial institutions, cryptocurrency exchanges, digital asset custodians, and stablecoin operators as blockchain adoption accelerates across the financial sector.
- Advanced quantum computers could potentially crack current encryption standards that protect cryptographic keys, digital wallets, and secure banking communications, creating pathways for unauthorized asset access.
- JPMorgan is developing quantum-resistant infrastructure while HSBC has conducted trials using quantum-secure communication technologies for operational systems.
- The European Union’s Digital Operational Resilience Act (DORA), now active, mandates enhanced technology risk management, while regulatory bodies in the United States and Asia intensify oversight.
- According to Citi Institute research referenced by Moody’s, a successful quantum-based attack targeting payment systems could generate $2–3 trillion in cascading economic damage.
Moody’s Ratings has released a comprehensive sector analysis alerting the financial industry that quantum computing represents an emerging cybersecurity challenge for banking institutions, cryptocurrency trading platforms, and digital asset service providers.
The analysis highlights how blockchain-related cyber risks have evolved from peripheral concerns into critical considerations for major financial organizations.
Moody’s attributes this transformation to the accelerating expansion of institutional involvement in digital finance, encompassing tokenized securities, stablecoin ecosystems, and blockchain-powered payment infrastructure.
The primary threat isn’t the current state of quantum computing technology. Rather, financial institutions must prepare for when these systems achieve sufficient computational power to compromise contemporary encryption methods.
Quantum computing systems could theoretically reverse-engineer private cryptographic keys from publicly available data. Such capabilities would enable malicious actors to penetrate digital wallets, custody platforms, and the cryptographic signatures that validate financial transactions.
This vulnerability presents particularly acute concerns for public blockchain networks. Traditional banking systems allow institutions to halt accounts or reverse fraudulent transactions, but most public blockchains operate with irreversible transaction finality.
Major Financial Institutions Launch Defensive Initiatives
JPMorgan has begun cataloging its cryptographic infrastructure and developing what Moody’s characterizes as “crypto-agile” architecture — platforms capable of rapidly replacing compromised encryption protocols.
HSBC has advanced even further, implementing experimental quantum key distribution technology, which leverages quantum mechanical principles to safeguard data transmission. The institution has deployed this approach for internal networks and conducted simulated foreign exchange trading scenarios.
Moody’s observed that numerous leading financial entities are participating in collaborative initiatives through the Bank for International Settlements and G7 frameworks to initiate early transition strategies.
The strategic approach focuses on proactive preparation rather than reactive response to “Q-Day,” the theoretical threshold when quantum computers gain the ability to defeat standard encryption algorithms including RSA and ECC.
Security professionals are increasingly concerned about “harvest now, decrypt later” tactics — where adversaries capture encrypted information today for eventual decryption once quantum technology matures.
Regulatory Framework and Industry Momentum Accelerate
Regulatory authorities are intensifying their scrutiny. The European Union’s Digital Operational Resilience Act became operational in 2025, mandating that financial organizations establish robust technology risk oversight capabilities.
United States regulatory agencies have elevated their focus on cybersecurity governance and vendor risk management. Singapore’s Monetary Authority has recommended that institutions begin evaluating their cryptographic infrastructure vulnerabilities.
Moody’s cautioned that organizations postponing cryptographic modernization investments may encounter escalating expenses, heightened regulatory intervention, or diminished market confidence.
The assessment particularly emphasized that custody providers, stablecoin operators, and asset tokenization services may confront elevated vulnerabilities, given their operational dependence on cryptographic key management systems.
From an investment perspective, these developments could generate sustained interest in enterprises developing quantum computing and artificial intelligence capabilities, including IBM, Nvidia, Microsoft, Alphabet, IonQ, and Rigetti Computing.
However, Moody’s central thesis centers on proactive risk mitigation. While quantum computing may remain years from compromising existing security frameworks, the report emphasizes that preparation must begin immediately.





