Responsible Fintech Institute and Safeheron Launch Cross-Regional Post

The Responsible Fintech Institute (RFI) and digital asset security provider Safeheron have launched a cross-border post-quantum cryptography (PQC) pilot to evaluate quantum-resilient digital asset transaction infrastructure. The initiative convenes international commercial banks and financial regulators across multiple jurisdictions to test post-quantum wallet generation and transaction signing in a controlled environment.
| [ RFI & Safeheron Post-Quantum Pilot Architecture ] | ||
|---|---|---|
| PQC & Key Signing | Regulatory Sandbox | Ecosystem & Governance |
| • NIST FIPS 204 (ML-DSA-65) | • ADGM, GFSO & MFSA Observers | • Open-Source PQC Codebase |
| • Non-Custodial 2-of-2 MPC | • Multi-Jurisdiction Compliance | • Whitepaper & Standard Audits |
| • NEAR Testnet Integration | • Supervisory Policy Input | • RFI Cross-Regional Oversight |
NIST FIPS 204 Integration and Open-Source Commitments
The pilot moves post-quantum financial infrastructure from theoretical models to practical transaction flows:
- ML-DSA Signature Integration: Safeheron developed a multi-party computation (MPC) protocol that natively integrates ML-DSA-65—the module-lattice digital signature standard published in NIST FIPS 204.
- Non-Custodial Key Governance: The trial implements a non-custodial 2-of-2 MPC architecture, allowing financial institutions to maintain key share ownership while testing distributed signing workflows without single points of failure.
- Open-Source Codebase & Whitepaper: Safeheron plans to open-source the underlying PQC-MPC protocol code to enable independent security audits. The consortium will also publish a research whitepaper detailing protocol design, cross-border interoperability metrics, and operational resilience findings.
Regulatory Alignment and Cross-Jurisdiction Scope
The pilot addresses regulatory directives from central banks and supervisory authorities urging financial institutions to establish cryptographic agility and migration frameworks:
- Multi-Jurisdiction Sandbox: Financial regulators participate as observers in Phase 1 before contributing to a dedicated governance workstream in Phase 2, assessing supervisory expectations, cross-border compliance, and operational risks.
- Regional Mandate Context: The initiative aligns with supervisory frameworks in Asia and Europe—including the Monetary Authority of Singapore’s (MAS) technology risk directives, the Hong Kong Monetary Authority’s (HKMA) Fintech 2030 Quantum Preparedness Index, and the Malta Financial Services Authority’s (MFSA) ICT risk monitoring.
Led by RFI Chairman Chia Hock Lai, Safeheron Chief Security & Policy Officer Jag Foo, Bison Bank CEO António Henriques, and GFSO Managing Director David Peters, the consortium provides a collaborative testing environment for regulated entities preparing for post-quantum migration.
Review the press release via PR Newswire here.
August 24, 2026
Leave A Comment

Facts Only

* The Responsible Fintech Institute (RFI) and Safeheron launched a cross-border post-quantum cryptography (PQC) pilot.
* The pilot evaluates quantum-resilient digital asset transaction infrastructure.
* The initiative convenes international commercial banks and financial regulators across multiple jurisdictions.
* The test involves post-quantum wallet generation and transaction signing.
* Safeheron developed an MPC protocol integrating ML-DSA-65 from NIST FIPS 204.
* The trial uses a non-custodial 2-of-2 MPC architecture for key governance.
* Participants include observers from ADGM, GFSO, and MFSA.
* Safeheron plans to open-source the PQC-MPC protocol code.
* Regulators participate as observers in Phase 1 before contributing to governance workstreams in Phase 2.
* The initiative aligns with MAS technology risk directives, HKMA Fintech 2030 Index, and MFSA ICT risk monitoring.

Executive Summary

The Responsible Fintech Institute (RFI) and Safeheron initiated a cross-border post-quantum cryptography (PQC) pilot to test quantum-resilient digital asset transaction infrastructure. This initiative involves international commercial banks and financial regulators across various jurisdictions to evaluate post-quantum wallet generation and transaction signing in a controlled setting. The technical framework integrates the NIST FIPS 204 standard through a multi-party computation (MPC) protocol that natively supports ML-DSA-65 signatures. A non-custodial 2-of-2 MPC architecture is employed for key governance, allowing distributed signing workflows without single points of failure. The pilot includes participation from observers in regulatory sandboxes like ADGM, GFSO, and MFSA, aligning with regional mandates such as MAS technology risk directives and HKMA's Quantum Preparedness Index. Safeheron plans to open-source the underlying PQC-MPC protocol code and will publish a research whitepaper detailing interoperability metrics.

Full Take

The framework establishes a complex interaction between cryptographic standardization, decentralized security models, and multi-jurisdictional governance. The movement from theoretical PQC concepts to practical, regulated transaction flows introduces significant tension regarding the speed of technological adoption versus the measured pace of regulatory adaptation. The commitment to open-sourcing the protocol code creates an external mechanism for validation, shifting trust from proprietary implementation to auditable transparency—a crucial step in building collective resilience. The pattern observed is an attempt to leverage technical standardization (NIST) and regulatory urgency (supervisory directives) as a bridge toward shared infrastructural security. The core implication is whether distributed, open-source protocols can effectively bridge disparate legal and supervisory frameworks across borders without creating new compliance silos or introducing systemic fragmentation. The challenge lies in ensuring that the operational resilience metrics derived from cross-regional testing translate directly into harmonized regulatory policy rather than remaining as technical artifacts. How do regulators ensure that observer participation results in binding, coordinated action, and what mechanisms prevent the pilot from becoming an isolated technological exercise disconnected from established legal accountability structures?

Sentinel — Human

Confidence

The text reads like a formal press release detailing a specific, multi-party industry pilot project, characterized by high technical specificity and structured presentation typical of corporate or institutional communications.

Signals Detected

Moderate sentence length variance; uses dense technical phrasing typical of industry announcements.

Strong logical flow mapping the architecture, integration, and regulatory context without excessive hedging.

Follows a structured format (bullet points detailing technical components) typical of official press releases; lacks verbatim template matching.

References specific standards (NIST FIPS 204, ML-DSA-65) and named entities which suggests grounding in real documentation, though the future date (Aug 24, 2026) warrants caution.

Human Indicators

The structure is highly organized, merging technical specifications with regulatory context in a way that prioritizes clear communication for stakeholders. The specific naming of consortium members and regulatory bodies suggests an origin from an institutional announcement.