Hong Kong's First Licensed Stablecoin Fails Security Review

Hong Kong's ambitions to become a regulated digital-asset hub have taken an unexpected hit. Anchorpoint Financial, backed by major institutions such as Standard Chartered and Animoca Brands, launched HKD At Par (HKDAP) in August 2026. This stablecoin was designed to demonstrate how regulated digital money can support payments and settlement.

However, a review conducted by blockchain security firm BlockSec revealed technical weaknesses involving know-your-customer controls and governance architecture in the live smart contract. The report found that some KYC and revocation mechanisms do not function as intended, and a single key has the ability to mint, burn, pause or freeze tokens.

The issue raises concerns about the security of HKDAP's implementation, which is critical for a stablecoin. A stablecoin promises users that digital representations of fiat currency can be issued, transferred, and redeemed under clearly defined rules.

Hong Kong has created a regulatory framework for stablecoins, but this episode highlights the need for technical scrutiny comparable to traditional financial systems. The city's experiment is now in its crucial phase, where institutional credibility must extend from the licence and reserve structure down to the code.