Hong Kong gives crypto platforms one year to ditch one-time passwords or cover user losses

Story

The SFC wants phishing-resistant login and device binding by July 8, 2027, while monitoring and response duties apply immediately.