US Treasury shares cyber intel with crypto

TLDR

The U.S. Treasury has opened its federal cyber threat?intelligence feeds to eligible crypto firms at no cost to help them defend against increasingly sophisticated hacks.

1. The Treasurys OCCIP unit will share real?time cyber alerts and indicators with U.S. digital asset firms, similar to what banks already receive.
2. The move follows a brutal 2025, when crypto platforms lost about $3.4 billion to hacks, with over $2 billion tied to North Korean groups.
3. Impact will depend on how many exchanges, custodians, DeFi teams, and service providers enroll and whether they can actually act on the data in their security operations.

Deep Dive

1. What The New Program Actually Does

The Office of Cybersecurity and Critical Infrastructure Protection (OCCIP) at the U.S. Treasury has launched a dedicated initiative to share cyber threat intelligence with digital asset firms. Participating crypto businesses can receive the same kind of timely, actionable alerts that traditional financial institutions already get, including early warnings on active campaigns, indicators of compromise, and best?practice guidance tailored to exchanges, custodians, and wallet providers. Reports describe this as a free opt?in service for eligible U.S. firms and industry organizations, with enrollment handled directly by OCCIP, giving crypto companies a formal channel into federal cyber intel rather than relying on ad hoc back?channels.

2. Why Treasury Is Doing This Now

Media and analytics firms report that digital asset platforms lost roughly $3.4 billion to hacks in 2025, with about $2.02 billion attributed to North Korean state?backed actors such as Lazarus and related groups, according to analyses cited by Treasury and Chainalysis. Broader crypto?related crime is even larger, with the FBIs Internet Crime Report putting total crypto losses (including scams) at $11.36 billion in 2025. Officials quoted in Treasury?linked coverage stress that attacks against exchanges, DeFi protocols, and infrastructure are growing in both frequency and sophistication, and that crypto is now systemically important enough to justify giving it the same cyber defenses as banks.

3. How It Could Change Risk For Crypto Users

For centralized exchanges, custodians, payment processors, and major infrastructure providers, the program can raise the baseline of operational security if they integrate the intel into monitoring, incident response, and patch management. Coverage in outlets such as CoinDesk and Yahoo Finance highlights that this is also part of a broader policy shift tied to the GENIUS Act stablecoin framework, treating large crypto players more like critical financial infrastructure rather than a separate shadow sector. The main risks are uneven uptake and capability: top venues will likely benefit first, while smaller wallets, niche DeFi teams, and offshore platforms may still be soft targets if they lack the tooling or staff to consume and act on the feeds.

Conclusion

Treasurys decision to share its cyber intelligence with crypto firms effectively pulls the industry inside the same defensive perimeter as traditional finance. If major exchanges, custodians, and core infrastructure providers actively use these alerts, it could reduce the frequency and scale of successful hacks over time, even as attackers continue to evolve. For users, the biggest practical shift will come from choosing platforms that treat this kind of institutional?grade security integration as a core part of their operations.