This document provides side-by-side comparison tables across seven regulatory dimensions for all 18 jurisdictions studied in this research project. Each table synthesises data from the individual country regulation files in Americas, Europe, Asia-Pacific, and Middle East & Africa regions, as well as from the guidance documents on licensing, coverage gaps, deposit guarantees, market capacity, claims history, DeFi insurance, and captive structures.
The 18 jurisdictions are: United States, Bermuda, Canada, Cayman Islands (Americas); Australia, Hong Kong, Japan, Singapore, South Korea (Asia-Pacific); European Union, France, Germany, Liechtenstein, Switzerland, United Kingdom (Europe); Bahrain, United Arab Emirates, and the Emerging Markets group (Brazil, Nigeria, South Africa, India) (Middle East & Africa). Of these 18, 6 impose mandatory or mandatory-in-substance insurance (Hong Kong, South Korea, United Arab Emirates, Bahrain, Canada, Cayman Islands), while the remaining 12 are voluntary, insurance-or-capital, emerging, or no-framework regimes. No deposit or investor guarantee scheme covers unbacked crypto-assets in any of the 18 — the sole partial exception is Liechtenstein, where DLT security tokens (not unbacked crypto) are eligible for investor compensation up to CHF 30,000. The United Kingdom is added as the global Lloyd's hub jurisdiction (Europe region) even though it imposes no mandate.
Cells marked "No data" indicate that no verified information was found in the source files. Cells marked "N/A" indicate the dimension does not apply to that jurisdiction. Market-capacity, premium, and per-policy figures are self-reported by the named provider/aggregator unless otherwise sourced, and are flagged as such.
Table 1: Insurance Mandate Status
This table captures whether each of the 18 jurisdictions mandates digital asset insurance, the legal basis, coverage type, minimum amounts, and effective dates. Mandatory-in-substance means insurance is a gating factor or prescribed category (often on an "insure-or-mitigate" basis) rather than a hard numeric mandate.
| Jurisdiction | Mandate Type | Legal Basis | Coverage Type | Minimum Amount | Effective Date |
|---|---|---|---|---|---|
| United States | None (federal); voluntary in all states | No federal mandate; no state digital-asset insurance category; surplus lines market | N/A (market-driven) | N/A | N/A |
| Bermuda | None for DABs (flexible) | DABA 2018 (surety bond OR trust OR indemnity insurance) + Insurance Act 1978 | Client-asset protection; innovation classes (IIGB/IILT) for insurers | N/A; Class 1 captive USD 120K min capital | DABA: 2018 |
| Canada | Mandatory in substance (custodians) | CIRO Digital Asset Custody Framework (interim) | Fidelity (Crime/FI bond) + specie; tier-gating factor | Not prescribed; tier-dependent | Feb 2026 (interim) |
| Cayman Islands | Mandatory in substance (insure-or-mitigate) | VASP Act (Phase Two) + MC-RSOG (Feb 2026) | Prescribed categories: professional liability, theft/loss of client assets, business interruption, cybersecurity | No numeric minimum; alternative mitigation permitted | MC-RSOG: Feb 2026 |
| Australia | Emerging / voluntary (PI-only) | Existing AFSL regime; Digital Assets Framework Act 2026 (enacted, not yet in force) | PI insurance (AFSL holders); no crypto coverage ratio | Adequacy standard (no prescribed amount) | Act commences 9 Apr 2027 |
| Hong Kong | Mandatory (licensing condition) | SFC VATP licensing condition (SFO + AMLO) | 100% hot / 50% cold compensation arrangement | No fixed amount; ratio-based | 1 Jun 2023 |
| Japan | None today; mandatory reserve proposed | PSA (current); FIEA bill (Cabinet-approved 10 Apr 2026) | PSA: segregation/95% cold storage; proposed FIEA liability reserve (approved insurance may count) | Proposed reserve sized to trading volume / incident record (not a fixed figure) | Current: PSA; FIEA: expected FY2027 |
| Singapore | Voluntary (custody-first) | MAS PS-G03 (guidelines) | Voluntary crime/hot-wallet; insurance not a listed safeguarding method | No minimum prescribed | PS-G03: Apr 2024 |
| South Korea | Mandatory | VAUPA + Enforcement Decree | Liability insurance or equivalent reserves | 5% hot wallet; KRW 3B min (KRW-market exchanges); KRW 500M (coin-only / wallet) | 19 Jul 2024 |
| European Union | Insurance-or-capital option (voluntary) | MiCA Art. 67; Annex IV | PII covering 6 risk categories (incl. custodian liability) | EUR 50K-150K (by CASP class); no insurance-amount minimum | 30 Dec 2024 |
| France | Insurance-or-own-funds (voluntary; PACTE pioneer); now MiCAR | PACTE Law 2019; MiCAR transition | PII or own funds | EUR 50K-150K (MiCAR class) | May 2019 (PACTE); MiCAR by 1 Jul 2026 |
| Germany | Insurance-or-capital option (voluntary); MiCAR via KMAG | MiCAR; KMAG; BaFin oversight | PII covering 6 risk categories | EUR 50K-150K (MiCAR class) | 30 Dec 2024 (KMAG grandfathering closed 31 Dec 2025) |
| Liechtenstein | None for TT providers (voluntary); MiCAR insurance-or-own-funds | TVTG (no insurance mandate); EEA MiCAR Implementation Act | TVTG: none; MiCAR PII or own funds | EUR 50K-150K (MiCAR class) | TVTG: Jan 2020; MiCAR: 1 Feb 2025 |
| Switzerland | None (no statutory mandate) | No bespoke requirement; VAG / SST | Insurance optional; FINMA expects adequate risk mitigation | N/A | N/A |
| United Kingdom | None (voluntary) | No bespoke requirement; FCA/PRA general frameworks | Voluntary; remains voluntary under Oct 2027 regime (SI 2026/102) | N/A | N/A |
| Bahrain | Mandatory (PII + keyman + cyber) | CBB CRA Module (Vol. 6) | PII + keyman risk + cybersecurity | PII BHD 100K (~USD 265K); keyman/cyber no minimum | CRA: Feb 2019; cyber added Mar 2023 |
| United Arab Emirates | Mandatory (multi-perimeter) | VARA Company Rulebook v2.0; ADGM FSRA; DFSA | VARA 4 categories (PII, D&O, commercial crime for hot wallets, other); ADGM PII; DFSA PII + cyber | Principles-based adequacy (no prescribed minimum) | VARA: 19 Jun 2025; ADGM PII: 1 Jan 2026; DFSA: 12 Jan 2026 |
| Emerging Markets (BR/NG/ZA/IN) | Mixed: Nigeria partial; Brazil/India none; South Africa exempt | SEC Nigeria (ISA 2025); BCB Res. 519-521 (Brazil); FAIS s.13 (ZA); FIU-IND reg. (India) | Nigeria: fidelity bond + user-asset insurance; others: none | Nigeria fidelity bond ≥25% of paid-up capital + unquantified user-asset insurance; others N/A | Brazil: Feb 2026; Nigeria circular: 16 Jan 2026 |
Table 2: Insurance Provider Landscape
This table compares domestic insurance capacity, Lloyd's access, specialty MGAs/coverholders, and broker presence across the 18 jurisdictions. Per-policy and facility figures are self-reported unless sourced.
| Jurisdiction | Domestic Capacity | Lloyd's Access | Specialty MGAs/Coverholders | Major Brokers Present |
|---|---|---|---|---|
| United States | Surplus lines; admitted limited; exchange funds (Binance SAFU ~$1B, Coinbase $320M, Bitstamp $300M) | Via surplus lines (Arch, Atrium, Beazley, Canopius) | Evertas ($420M per policy, self-reported), Coincover (Atrium), Relm | Marsh ($825M facility, self-reported), Aon, WTW (IDEA), Lockton |
| Bermuda | Relm (Class IIGB, first/only commercial); Meanwhile (IILT, BTC); Nakamoto/Gemini captive | Reinsurance links | Relm Insurance (Class IIGB) | Aon, Marsh (via reinsurance) |
| Canada | No domestic dedicated DA lines (NOT VERIFIED — absence of evidence); Intact/Definity none announced | Via licensed Canadian brokers | No dedicated DA MGA identified | Marsh, Aon (Canadian offices) |
| Cayman Islands | 720 active Class B/C/D captives; SPC structures; no crypto-specific captive identified (NO DATA) | Retrocession links to Bermuda/London | No dedicated DA MGA identified | Marsh, Aon |
| Australia | No domestic dedicated DA products (QBE/IAG/Suncorp none) | Via Australian brokers (Arch, Atrium, Beazley, Canopius) | No dedicated DA MGA identified | Marsh (DART, Blue Vault), Aon |
| Hong Kong | IA-regulated insurers limited; ~158 insurers, HKD 635B (~USD 82B) GWP 2024 (self-reported) | Lloyd's Asia; Canopius lead on OSL USD 1B programme | HK-based crypto MGA (Lloyd's coverholder), Evertas | Marsh (Blue Vault, DART), Aon |
| Japan | Sompo, MS&AD, Tokio Marine (~90% of non-life, limited DA products) | Via Lloyd's syndicates / APAC coverholders | HK-based crypto MGA (Lloyd's coverholder) | Marsh, Aon |
| Singapore | MAS-licensed general insurers; 2nd-highest count of crypto insurers globally (10, Tracxn Jan 2025) | Lloyd's Asia (Canopius Syndicate 4444, up to US$130M/line) | Canopius, OneDegree; Evertas, Coincover, AnchorWatch (coverholders) | Marsh (DART), Aon, WTW |
| South Korea | Samsung Fire & Marine, DB Insurance, Hyundai Marine & Fire, KB Insurance (VAUPA-compliant products) | Lloyd's Asia-Pacific coverholders | Evertas (APAC distribution) | Marsh, Aon |
| European Union | Munich Re (Germany); AXA/Allianz/Chubb cautiously; limited local | Via Lloyd's (Arch, Atrium, Beazley, Canopius, TMK, Markel) | Marsh MiCAssure, Evertas, Coincover, Superscript, Nayms | Marsh, Aon, WTW |
| France | No French-domiciled DA underwriters; majors as investors/issuers only | Via London (Evertas up to USD 420M, self-reported) | Marsh MiCAssure | Marsh, Aon |
| Germany | Munich Re (domestic champion: Crime Plus, Staking, Smart Contract Risk); Boerse Stuttgart Digital + Munich Re | Via Lloyd's; Evertas (Lloyd's-backed) | Marsh MiCAssure | Marsh, Aon |
| Liechtenstein | No LI-domiciled DA underwriter; small captive market | Via London (Arch, Beazley, Canopius; Evertas) | Marsh MiCAssure (via EEA passport) | Aon (international) |
| Switzerland | Swiss Re (cautious); Sygnum & AMINA (institutional custody insurance); no dedicated DA products | Via London (Evertas up to USD 420M, self-reported) | Marsh MiCAssure (for EU/EEA) | Aon, Marsh |
| United Kingdom | Full London company market | Direct hub; Atrium/609, TMK, Markel, Canopius, Mosaic/1609, Chaucer, Arch | Evertas ($420M), AnchorWatch ($500M/customer), Coincover, Native | Marsh (DART, $825M facility), Aon, Howden, Gallagher |
| Bahrain | No Bahraini DA product (as of Jun 2026); PII from CBB-licensed insurers | Via international markets / Lloyd's | No dedicated DA MGA identified | Marsh, Aon (Gulf ops) |
| United Arab Emirates | Growing; CBUAE-regulated; underwriters Arch, Atrium, Beazley, Canopius, AXA, AIG, Chubb | Via Lloyd's syndicates | No dedicated DA MGA identified | Marsh (DART, Blue Vault with Arch/Canopius), Aon |
| Emerging Markets (BR/NG/ZA/IN) | No domestic DA product; Brazil 88i Seguradora Digital (SUSEP sandbox) | Bermuda/London theoretically accessible (institutional pricing) | None identified | International brokers (limited) |
Table 3: Deposit / Investor Guarantee Coverage
This table compares whether traditional deposit or investor guarantee schemes cover digital assets, scheme limits, and the alternative protection mechanism. No scheme covers unbacked crypto in any of the 18 jurisdictions; Liechtenstein's EAS is the only partial exception (DLT security tokens only).
| Jurisdiction | Scheme Name | Crypto Covered? | Standard Limit | Alternative Mechanism |
|---|---|---|---|---|
| United States | FDIC / SIPC | No | $250K (FDIC); per SIPA limits (SIPC) | None; operator-funded. FDIC GENIUS-Act NPR (7 Apr 2026) bars pass-through insurance for stablecoin reserves |
| Bermuda | N/A (no DGS) | N/A | N/A | DABA surety bond / trust / indemnity insurance |
| Canada | CDIC / CIPF | No (explicit exclusion) | per CDIC Act (CDIC); per CIPF terms | CIRO custody-framework fidelity + specie insurance; CIPF covers cash and crypto ETFs/fund units only |
| Cayman Islands | N/A (no DGS) | N/A | N/A | VASP segregation + MC-RSOG insure-or-mitigate categories |
| Australia | FCS (APRA) / NGF (ASX) | No (crypto platforms not ADIs; non-ASX crypto not in NGF) | AUD 250,000 per account holder per ADI (FCS) | AFSL custody/safeguarding obligations; PI insurance |
| Hong Kong | DPS (HKDPB) / ICF | No (ICF excludes VAs; crypto not a bank deposit) | HKD 500,000 per depositor per bank (HKDPB) | SFC 50% cold / 100% hot compensation arrangement |
| Japan | DICJ | No (crypto is "property value" under PSA, not a deposit) | JPY 10,000,000 per depositor per institution | PSA asset segregation; proposed FIEA liability reserve |
| Singapore | SDIC (DI Scheme) | No (DPT providers not members) | S$100,000 per depositor per institution (SGD deposits only) | PSA trust-account segregation; PS-G03 90% cold storage; voluntary insurance |
| South Korea | KDIC | No (but KDIC now has crypto data-access authority) | KRW 50,000,000 per depositor per institution | VAUPA insurance/reserves (5% hot + KRW 3B min) |
| European Union | DGS Dir. 2014/49/EU / ICS Dir. 97/9/EC | No (explicitly excluded; tokenised deposits may qualify per EBA Dec 2024) | EUR 100,000 (deposits); EUR 20,000 (investor compensation) | MiCA Art. 67 insurance-or-capital; white-paper non-coverage disclosure |
| France | FGDR | No (only euro/official-currency products) | EUR 100,000 (deposits); EUR 70,000 (investor compensation) | MiCAR Art. 67 insurance-or-own-funds |
| Germany | EinSiG (Deposit Guarantee) / EntSchG (Investor Compensation) | No (tokenised securities under eWpG may qualify if via licensed firm) | EUR 100,000 per depositor | MiCAR Art. 67 (via KMAG) |
| Liechtenstein | EAS (PCC) | Partial — DLT security tokens eligible up to CHF 30K; unbacked crypto (BTC/ETH) No | CHF 100,000 (deposits, up to CHF 750K temporary high balances); CHF 30,000 (investor compensation) | MiCAR Art. 67 |
| Switzerland | esisuisse | No (covers only government-issued currency) | CHF 100,000 per client per bank | Insolvency segregation returns segregable custody assets as client property |
| United Kingdom | FSCS | No (excludes crypto, even under SI 2026/102 regime) | 90% general insurance (insurer failure, not the asset) | FCA conduct (ICOBS); CP26/4 CASS-17-style safeguarding (structural, not insurance) |
| Bahrain | N/A (no scheme discussed) | N/A | N/A | CBB CRA Module PII (BHD 100K) + keyman + cyber |
| United Arab Emirates | N/A (no federal DGS); VARA ETD Insurance Fund (Part V, 31 Mar 2026) | Included — ETD fund may hold underlying VAs, AED/USD, VARA-approved AED/USD-referencing VAs | No fixed figure; must cover client negative-equity under "extreme but plausible" conditions | VARA 4-category insurance; ADGM PII; DFSA PII + cyber |
| Emerging Markets (BR/NG/ZA/IN) | N/A (no crypto scheme discussed) | N/A | N/A | Nigeria fidelity bond + user-asset insurance; Brazil/ZA/India client-asset segregation only |
Table 4: Insurance Licensing Requirements
This table compares insurance licensing pathways relevant to digital asset insurance providers across the jurisdictions where the matrix records a pathway.
| Jurisdiction | Licence Type | Authority | Min Capital | Formation Timeline | Passporting |
|---|---|---|---|---|---|
| United States | State-licensed admitted; eligible surplus lines (non-admitted) | 50 state DOIs + DC + 5 territories (NAIC-coordinated) | Surplus lines $15M-$45M typical (state-set); MTL surety bonds $10K-$500K (up to $2M) | 3-12 months | Multi-state licensing; NRRA home-state rule for surplus lines |
| Bermuda | Class 1-4, 3A/3B, A-E long-term; innovative Class IIGB/IILT; DABA T/M/F | BMA | Class 1 captive USD 120K; Class 2 USD 250K; Class 3 USD 1M; Class 4 USD 100M; IIGB/IILT BMA-determined | 3-4 weeks (captive); 3-6 months (IIGB) | No passporting; global contracts available |
| Canada | Provincial insurer licence; OSFI (federal capital) | Provincial DOIs / OSFI | Varies by province; OSFI Group 2 crypto cap 5% of Net Tier 1 (raised from 1%, Jan 2026) | 6-12 months | Multi-province licensing required |
| Cayman Islands | Insurance Act 2010 Class B(i)/B(iii)/C/D; SPC; VASP licence (custody / trading) | CIMA | Class B+; VASP app fees KYD 30K (custody) / KYD 50K (trading) | 4-8 weeks (captive) | No passporting |
| Australia | AFSL for DAPs/TCPs; DCE registration; APRA for major SVF/stablecoin issuers | ASIC / AUSTRAC / APRA | AFSL capital adequacy; APRA for major SVF issuers over AUD 100M (carried, NOT re-verified) | No data | Australia only |
| Hong Kong | IA-authorised insurer; VATP licence (Type 1 + Type 7) | Insurance Authority / SFC + HKMA | No numeric capital figure in file; compensation arrangement (50%/100%) is the key obligation | 6-12 months | Hong Kong only |
| Japan | FSA-licensed insurer (Insurance Business Act); CAESP registration (PSA→FIEA) | FSA / JVCEA | Insurer: per IBA; CAESP min JPY 10M (~USD 67K), practically JPY 50M (~USD 350K) | 6-12 months | Japan only |
| Singapore | Direct Insurer (General/Life), Licensed/Authorised Reinsurer, Lloyd's Asia Scheme; DPT via MPI / DTSP | MAS | Direct Insurer (General) S$10M; (Life) S$5M; Reinsurer S$25M (+S$2M/class); Broker S$300K/class | 6-12 months | Singapore only; Lloyd's Asia for regional |
| South Korea | FSC-licensed insurer; VASP registration (FIU) | FSC / FSS / FIU | VAUPA insurance/reserve minimums KRW 3B (KRW-market) / KRW 500M (coin-only, wallet) | No data | South Korea only |
| European Union | Solvency II authorisation (non-life); CASP authorisation (MiCA Art. 63) | National competent authority / ESMA-EBA | Insurer EUR 3.7M non-life / EUR 1.2M reinsurance-only; CASP EUR 50K-150K | 6-12 months | EEA-wide (freedom of services + establishment) |
| France | Code des Assurances / Solvency II insurer; CASP (MiCAR); DASP (PACTE) | ACPR / AMF | Insurer EUR 2.5M min guarantee fund (non-life); CASP EUR 50K-150K | 6-12 months | EU/EEA passporting |
| Germany | VAG / Solvency II insurer; CASP (MiCAR/KMAG) | BaFin | Insurer min guarantee fund from EUR 2.5M (non-life); CASP EUR 50K-150K + EUR 10,750 filing fee | 6-12 months | EU/EEA passporting |
| Liechtenstein | VersAG / Solvency II insurer (incl. captive reinsurer); CASP (MiCAR); TT provider (TVTG) | FMA | Insurer EUR 2.5M (non-life) to EUR 3.7M (life); captive reinsurer EUR 1.2M; CASP EUR 50K-150K | 3-6 months | EEA + Switzerland (bilateral) |
| Switzerland | VAG insurer (SST); DLT trading facility (FinMIA Art. 73a); captive under VAG | FINMA | DLT facility CHF 1M (CHF 5M with custody/settlement); insurer varies by line under SST | No data | No EU/EEA passporting (Liechtenstein can passport in) |
| United Kingdom | Lloyd's syndicate; Lloyd's coverholder/delegated authority; PRA-authorised insurer (Solvency UK) | PRA + FCA; Lloyd's Corporation | Solvency UK standard formula (no bespoke crypto charge); intermediary fees GBP 280-222,940 | 6-12 months | UK only (post-Brexit) |
| Bahrain | CBB CRA Module licence; SIO Module (stablecoin issuers) | CBB | CRA varies by category; SIO stablecoin issuers BHD 250K (~USD 660K), must be a BSC | No data | Bahrain only |
| United Arab Emirates | VARA VASP licence; ADGM FSRA (Cat 3B/3C/4); DFSA crypto-token; CBUAE insurer | VARA / ADGM FSRA / DFSA / CBUAE | VARA Custody higher of AED 600K or 25% fixed overheads; Exchange higher of AED 1.5M or 25%; ADGM Cat 4 USD 50K / PFP USD 150K / custody USD 250K | 3-6 months | ADGM/DIFC only; no federal passport |
| Emerging Markets (BR/NG/ZA/IN) | Brazil VASP (BCB); Nigeria SEC VASP/DAX/DAOP/DAI; South Africa FSP/CASP; India FIU-IND registration | BCB / SEC Nigeria / FSCA / FIU-IND | Nigeria (16 Jan 2026): DAX/Custodians ₦2bn, DAOP ₦1bn, DAI ₦500m; others not specified | No data | None |
Table 5: Claims History & Recovery
This table documents major incidents recorded in the matrix, the jurisdiction involved, loss amounts, insurance recovery (if any), and the recovery mechanism used. Figures are as reported in the per-jurisdiction files.
| Incident | Year | Jurisdiction | Amount Lost | Insurance Recovery | Recovery Mechanism | Recovery Outcome |
|---|---|---|---|---|---|---|
| Mt. Gox | 2014 | Japan | ~$450M / ~800,000 BTC | None | Bankruptcy/civil rehabilitation (repayments from 2024) | Partial (BTC appreciation) |
| Bitfinex | 2016 | United States (Bitfinex) | 119,756 BTC | None | US govt seizure + in-kind restitution >94,000 BTC | No commercial insurance recovery |
| Coincheck | 2018 | Japan | ~$530M / 500M NEM | None | Operator self-funded (~$420M to 260,000 users) | ~90% (JPY) |
| Bithumb (1st) | 2018 | South Korea | ~$30M | No public record | Corporate funds | No data |
| Upbit (1st) | 2019 | South Korea | ~$50M / 342,000 ETH | No public record | Corporate funds | No data |
| FTX | 2022 | United States / Bermuda (Relm cover) | ~$8.7B shortfall | Minimal (>$15M Relm policies; fraud excluded) | Chapter 11; ~$7B recoverable; plan pays ~118% to ~98% of creditors | No meaningful insurance recovery |
| 3AC (Three Arrows) | 2022 | Singapore | ~$3.5B creditor claims | None | Liquidators' Crypto Loss Claim ($1.3B suit vs Terraform Labs) | No insurance recovery |
| BingX | 2024 | Singapore | ~$52M hot-wallet | No reported recovery | ~$10M frozen; compensated from own reserves | No insurance recovery |
| DMM Bitcoin | 2024 | Japan | ~$305-308M / 4,502.9 BTC | None | Parent DMM.com support (~$365M); exchange closed; assets to SBI VC Trade | No insurance recovery |
| Bybit | 2025 | European Union / US-cited (Lazarus) | ~$1.5B ETH (largest single theft) | UNVERIFIED | Bridge loans + emergency funding (reserves replenished <72 hrs) | ~100% reserves restored; no insurance recovery |
| Upbit (2nd) | 2025 | South Korea | ~$28M (KRW 44.5B) Solana tokens | Yes (insurance + reserves) | VAUPA-mandated insurance — first publicly reported use | 100% (full restoration); cold storage raised to 95% |
| Bithumb (keystroke error) | 2026 | South Korea | ~620,000 BTC distributed to 249 users | N/A (operational error) | Recovery of mis-sent assets | ~99.7% recovered (industry-reported) |
DeFi/parametric, EU, France, Germany, Liechtenstein, Switzerland, UK, Bahrain, UAE, and Emerging-Market files record no jurisdiction-specific insured-loss claim or recovery event (NO DATA / NOT VERIFIED). Lloyd's claims-level data is confidential and not disclosed. Global recovery rates remain low — only ~4.2% of stolen assets recovered globally in H1 2025 (EU file).
Table 6: DeFi / Parametric Insurance Classification
This table compares how the jurisdictions that the matrix addresses classify DeFi insurance protocols and parametric/on-chain insurance. DeFi-insurance protocol figures (Nexus Mutual capital pool, claims paid, active cover) are self-reported by the protocol.
| Jurisdiction | DeFi Insurance Classification | Parametric Insurance Status | Regulatory Vehicle / Sandbox | Key Development |
|---|---|---|---|---|
| United States | Discretionary / unregulated as insurance (P2P risk pools, e.g. Nexus Mutual); not licensed as insurers in any state | May be CFTC-regulated event contracts/swaps | State sandbox programmes | NXM may be a security under Howey; no SEC/state enforcement vs DeFi insurance as of Mar 2026 |
| Bermuda | Embedded Supervision DeFi pilot (Chainlink/Apex/Bluprynt/Hacken, completed 6 May 2026) | Proposed Parametric SPI (PSPI) class — traditional parametric only (excludes hybrid indemnity); not yet enacted, targeted end Q2 2026 | BMA innovative classes IIGB/IILT, sandbox, SPI/PSPI | Relm II crypto-collateralized reinsurance (May 2022); proposed PSPI; Embedded Supervision pilot |
| Canada | Not addressed as regulated insurance — treated as a coverage gap, not a regulated/discretionary category | Not addressed | None | Smart-contract/DeFi exploit cover "very limited"; staking loss NOT VERIFIED |
| Cayman Islands | No specific DeFi/parametric regulated classification; SPC/captive vehicles regulated but crypto adoption nascent | Possible via SPC transformer (ILS); MC-RSOG principles-based insure-or-mitigate | SPC (rent-a-captive, transformer); Class C/D reinsurers | DeFi/staking/smart-contract largely uninsurable via conventional structures; no crypto-specific captive identified |
| Australia | NOT VERIFIED / NO DATA — file does not address DeFi/parametric classification | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA |
| Hong Kong | NOT VERIFIED / NO DATA — file does not address DeFi/parametric classification | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA |
| Japan | NOT VERIFIED / NO DATA — file does not address DeFi/parametric classification | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA |
| Singapore | Discretionary / unregulated — decentralised protocols outside MAS perimeter; Nexus Mutual is a UK discretionary mutual, not MAS-licensed | No specific MAS parametric guidance (sandbox pathway available) | MAS FinTech Regulatory Sandbox; DTSP framework (FSMA, from 30 Jun 2025) may apply if SG presence/control | No SG-based MAS-licensed DeFi insurance protocol identified |
| South Korea | NOT VERIFIED / NO DATA — file does not address DeFi/parametric classification | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA | NOT VERIFIED / NO DATA |
| European Union | Undefined — MiCA does not apply to "fully decentralized" services (term not yet defined); grey-zone insurance/derivatives/gambling challenge | Not defined; EIOPA reviewing under Solvency II | National sandboxes | Discretionary mutuals (Nexus Mutual) likely outside Solvency II/MiFID II/gambling; no definitive EU ruling as of Mar 2026 |
| France | Unregulated / grey — no French-specific classification; follows EU MiCAR perimeter | Not addressed | (EU national sandboxes) | DeFi/NFT/smart-contract risks remain largely uninsurable in the French market |
| Germany | Unregulated / grey for DeFi protocols; Munich Re Smart Contract Risk Insurance is a regulated commercial product | Not separately addressed | (EU MiCAR perimeter) | Munich Re Smart Contract Risk Insurance (regulated); broader DeFi protocol risk a coverage gap |
| Liechtenstein | Unregulated / grey for DeFi; TVTG Token Container Model provides infrastructure for tokenised insurance / ILS | Not specifically addressed | TVTG Token Container Model; follows EU/EEA MiCAR perimeter | No LI-domiciled DeFi insurance examples; TVTG enables tokenised insurance products |
| Switzerland | Unregulated / technology-neutral; no bespoke DeFi insurance classification | Permitted in principle (technology-neutral) | FINMA Sandbox; DLT Act framework | Coverage gap acute for DeFi/hot-wallet/smart-contract; Munich Re staking product accessible |
| United Kingdom | Discretionary — Nexus Mutual operates without FCA authorisation; not "insurance business" under FSMA; members lack regulatory protection | Not separately addressed | FCA Regulatory Sandbox | Nexus Mutual Ltd (co. 10917763, London, limited by guarantee); Evertas/Nayms on-chain Lloyd's policies |
| Bahrain | Not addressed — no DeFi/parametric classification in file | Not addressed | None identified | None identified |
| United Arab Emirates | Regulated perimeter (Federal Decree-Law No. 6 of 2025, Art. 62 covers DeFi protocols/platforms/infrastructure), but no established DeFi-specific insurance products | Emerging/limited | VARA Sandbox; ADGM RegLab; captive/PCC structures (ADGM/DIFC) | Aon supports DeFi protocol-exploit cover; smart-contract-failure cover emerging (limited capacity) |
| Emerging Markets (BR/NG/ZA/IN) | Not addressed — no DeFi/parametric classification in file | Not addressed | Brazil/India insurance sandboxes (none tested for DA) | None identified |
Table 7: Regulatory Direction
This table assesses whether each jurisdiction's digital asset insurance regulation is tightening, balanced/stable, or permissive, with evidence and upcoming changes from the matrix.
| Jurisdiction | Direction | Evidence | Upcoming Changes |
|---|---|---|---|
| United States | Stable | No federal mandate; surplus lines flexibility; no NAIC DA-insurance working group (Spring 2026) | FDIC GENIUS-Act NPR (FIL-11-2026, comments due 9 Jun 2026); SEC/CFTC joint interpretation (Release 33-11412, 17 Mar 2026); OCC Bulletin 2026-3 NPR |
| Bermuda | Permissive (innovation leader) | Dedicated IIGB/IILT classes; sandbox; ~50 yrs captive expertise; Solvency II + NAIC reciprocal equivalence | Proposed PSPI class (target end Q2 2026); Asset Tokenisation consultation; Operational Resilience Code (by 31 Mar 2028) |
| Canada | Balanced (trending mandatory-for-custodians) | CIRO Feb 2026 tiered custody framework (insurance gating factor); OSFI Group 2 cap raised 1%→5% | Stablecoin Act (Bill C-15, Royal Assent 26 Mar 2026, not yet in force, implementation ~2027); CIRO "interim" — minimum coverage amounts may follow |
| Cayman Islands | Permissive (moved to prescribed categories) | MC-RSOG (Feb 2026) prescribes insurance categories after 82%-uninsured finding; first full VASP licence to BCXPro (5 Feb 2026) | Supervision/enforcement of "insure-or-mitigate" not yet established via published guidance (NOT VERIFIED) |
| Australia | Emerging | Digital Assets Framework Act enacted but not in force; PI via existing AFSL; no crypto coverage thresholds | Act commences 9 Apr 2027 (6-month transition); ASIC 18-month roadmap; INFO 225 no-action expires Jun 2026; AML/CTF existing entities 31 Mar 2026, tranche 2 NEW sectors 1 Jul 2026 |
| Hong Kong | Balanced (most prescriptive coverage) | 50% cold / 100% hot compensation; 13 licensed VATPs (NewBX added 18 May 2026); daily monitoring | IA RBC amendments (conclusions 8 May 2026): 100% downward stress on crypto, look-through+counterparty overlay for stablecoins, tokenised conventional instruments excluded; implementation 31 Dec 2026 pending LegCo |
| Japan | Balanced (moving to insurance-integrated reserve) | FIEA bill Cabinet-approved 10 Apr 2026; reclassifies crypto as financial instruments; penalty raised to 10 yrs / JPY 10M | FIEA mandatory liability reserves with approved-insurance option; effective as early as FY2027; insurance-as-reserve details not finalised |
| Singapore | Balanced (custody-first, voluntary) | DTSP framework (30 Jun 2025); 37 MPIs with DPT activity; PS-G03 90% cold storage; no insurance mandate | MAS consultation on prudential treatment of cryptoassets on permissionless chains (17 Apr 2026, closed 18 May 2026, banking-focused, no insurance mandate) |
| South Korea | Balanced (most prescriptive; mandate validated) | VAUPA effective Jul 2024; Nov 2025 Upbit restoration via insurance+reserves; operational-resilience package Apr 2026 | No-fault liability PROPOSED, not enacted (second-phase DABA bill, 8 Apr 2026; dropped from subcommittee agenda 12 May 2026, review to H2 2026) |
| European Union | Balanced (regulatory pull) | MiCA Art. 67 insurance option drives demand; Solvency II conservative supply-side | Solvency II Delegated Reg (EU) 2026/269 (OJ 18 Feb 2026) contains NO crypto charge; EIOPA 100% crypto stress (Mar 2025) still PENDING a subsequent delegated act; MiCA transition ends 1 Jul 2026 |
| France | Balanced (pioneer; no domestic supply) | PACTE Law (2019) insurance-or-capital model; smooth MiCAR transition; demand without domestic underwriting | DASP transition ends 1 Jul 2026; ~90 PSANs unlicensed Jan 2026 (~30% applied); wind-down plans invited |
| Germany | Balanced (strongest domestic supply) | MiCAR insurance-as-capital; Munich Re domestic champion; ~53 CASPs (largest EU market, self-reported) | National KMAG grandfathering closed 31 Dec 2025; EU-wide transition ends 1 Jul 2026; VAG Sec.125(1) insurer crypto-investment restrictions persist |
| Liechtenstein | Permissive | TVTG (no insurance mandate, event-driven); MiCAR voluntary insurance-or-own-funds; dual EEA+Swiss passporting; EAS PCC | TT providers must obtain MiCAR authorisation by 1 Jul 2026; TVTG insurance gap persists for non-MiCAR categories (NFTs, Physical Validators, TT Protectors) |
| Switzerland | Permissive | No statutory insurance mandate; insolvency segregation + private-market insurance; FINMA Guidance 01/2026 | Proposed FinIA Crypto Institution + Payment Instrument Institution licences (consultation closed 6 Feb 2026); framework not before 2027; capital/insurance not finalised |
| United Kingdom | Permissive (global Lloyd's hub) | No bespoke mandate; Lloyd's dominant capacity; FSCS excludes crypto; capacity-constrained vs USD 3T+ market | New regime SI 2026/102 in force 25 Oct 2027 (gateway 30 Sep 2026-28 Feb 2027); CP26/13 perimeter guidance (15 Apr 2026, closes 3 Jun 2026); no insurance mandate introduced |
| Bahrain | Permissive (expanding; prescriptive on minimums) | CRA Module since Feb 2019; quantified PII (BHD 100K) + keyman + cyber; separate Digital Tokens (2023) and Stablecoin (SIO, Jul 2025) frameworks | SIO Module reserve/custody/audit duties; no explicit issuer insurance mandate in published SIO text (NOT VERIFIED); local specialty capacity very limited |
| United Arab Emirates | Permissive (comprehensive, expanding) | Multi-regulator mandatory regime (VARA 4-category, ADGM PII, DFSA PII+cyber); FIDA cluster (ADGM) | Existing operators comply with Federal Decree-Law No. 6 of 2025 by Sep 2026; VARA ETD Insurance Fund (31 Mar 2026); Takaful/Sharia DA-insurance gap (NOT VERIFIED) |
| Emerging Markets (BR/NG/ZA/IN) | Emerging | Crypto licensing/AML advancing; insurance mandates lag, implicit, or absent; no domestic DA products | Brazil VASP authorisation deadline 30 Oct 2026; Nigeria fidelity-bond enforcement (deadline 30 Jun 2027); ZA Section 13 exemption may be revisited; India COINS Act/CARA shelved again (1 Apr 2026) |
International Standards Context
Across the 18 jurisdictions, supranational insurance and AML standards remain unsettled. The FATF's sixth Targeted Update (26 June 2025) reported that, of 138 jurisdictions assessed for Recommendation 15 (new technologies and VASPs), only ~1% were fully compliant and 29% (40 of 138) largely compliant, while 49% were partially compliant and 21% non-compliant — i.e. roughly 70% are not yet largely or fully compliant. See FSB / BIS / FATF standards, IAIS, and IOSCO for the international-frameworks layer.
Abbreviations
| Abbreviation | Full Term |
|---|---|
| ADGM | Abu Dhabi Global Market |
| AFSL | Australian Financial Services Licence |
| AML/CTF | Anti-Money Laundering / Counter-Terrorism Financing |
| BMA | Bermuda Monetary Authority |
| CASP | Crypto-Asset Service Provider |
| CBB | Central Bank of Bahrain |
| CBUAE | Central Bank of the UAE |
| CIMA | Cayman Islands Monetary Authority |
| CIRO | Canadian Investment Regulatory Organization |
| D&O | Directors and Officers |
| DA | Digital Asset |
| DABA | Digital Asset Business Act (Bermuda) / Digital Asset Basic Act (South Korea) |
| DAP | Digital Asset Platform (Australia) |
| DASP | Digital Asset Service Provider (France, PACTE) |
| DFSA | Dubai Financial Services Authority (DIFC) |
| DGS | Deposit Guarantee Scheme |
| DPT | Digital Payment Token |
| DTSP | Digital Token Service Provider (Singapore) |
| EAS | Einlagensicherungs- und Anlegerentschädigungs-Stiftung (Liechtenstein) |
| EIOPA | European Insurance and Occupational Pensions Authority |
| ETD | Exchange-Traded Derivatives |
| FATF | Financial Action Task Force |
| FCA | Financial Conduct Authority (UK) |
| FDIC | Federal Deposit Insurance Corporation (US) |
| FIEA | Financial Instruments and Exchange Act (Japan) |
| FMA | Finanzmarktaufsicht (Liechtenstein) |
| FSC | Financial Services Commission (South Korea) |
| FSCS | Financial Services Compensation Scheme (UK) |
| FSRA | Financial Services Regulatory Authority (ADGM) |
| IA | Insurance Authority (Hong Kong) |
| IILT | Innovative Insurer Long-Term (Bermuda) |
| IIGB | Innovative Insurer General Business (Bermuda) |
| KMAG | Kryptomärkteaufsichtsgesetz / Crypto Markets Supervision Act (Germany) |
| KDIC | Korea Deposit Insurance Corporation |
| MAS | Monetary Authority of Singapore |
| MC-RSOG | Market Conduct Rule, Statement of Guidance (Cayman) |
| MGA | Managing General Agent |
| MiCA / MiCAR | Markets in Crypto-Assets Regulation |
| MPI | Major Payment Institution (Singapore) |
| PCC | Protected Cell Company |
| PII | Professional Indemnity Insurance |
| PSA | Payment Services Act |
| PSPI | Parametric Special Purpose Insurer (Bermuda) |
| RBC | Risk-Based Capital (Hong Kong IA) |
| SFC | Securities and Futures Commission (Hong Kong) |
| SPC | Segregated Portfolio Company |
| SST | Swiss Solvency Test |
| TCP | Tokenised Custody Platform (Australia) |
| TT | Trustworthy Technology (Liechtenstein TVTG) |
| VARA | Virtual Assets Regulatory Authority (Dubai) |
| VASP | Virtual Asset Service Provider |
| VATP | Virtual Asset Trading Platform |
| VAUPA | Virtual Asset User Protection Act (South Korea) |
Verification Notes
- Source of truth: This refresh mirrors
.claude/digital-asset-insurance-fact-matrix.json(canonical per-jurisdiction facts, tables t1-t7) as of 2026-06-04. No web search was performed; no fact was introduced that is not in the matrix or the prior version of this file. Aggregates ("X of N") are computed for N = 18 jurisdictions. - 18 jurisdictions: United States, Bermuda, Canada, Cayman Islands, Australia, Hong Kong, Japan, Singapore, South Korea, European Union, France, Germany, Liechtenstein, Switzerland, United Kingdom, Bahrain, United Arab Emirates, and the Emerging Markets group (Brazil, Nigeria, South Africa, India). Mandatory or mandatory-in-substance: 6 (Hong Kong, South Korea, UAE, Bahrain, Canada, Cayman Islands).
- Mandatory vs voluntary distinction: Canada and Cayman are "mandatory in substance" (insurance is a gating factor / prescribed insure-or-mitigate category, no numeric minimum), distinct from Hong Kong/South Korea/UAE/Bahrain hard mandates and from the EU/France/Germany/Liechtenstein insurance-or-capital option (voluntary). Japan has no current mandate (PSA) but a proposed FIEA liability reserve. Australia is voluntary PI-only under an enacted-but-not-yet-in-force framework (commences 9 Apr 2027).
- Deposit-scheme inclusion vs exclusion: All 18 schemes exclude unbacked crypto. Liechtenstein's EAS is the sole partial exception (DLT security tokens eligible up to CHF 30,000; BTC/ETH excluded). US FDIC GENIUS-Act NPR (7 Apr 2026) bars pass-through insurance for stablecoin reserves. Canada CIPF covers cash and crypto ETFs/fund units, not direct crypto. The UAE entry in Table 3 is the VARA ETD Insurance Fund (a default-protection buffer), not a depositor scheme.
- Regulated insurance vs discretionary mutual: Nexus Mutual is a UK discretionary mutual (company limited by guarantee, co. no. 10917763) — not regulated as insurance under FSMA and not MAS-/EU-licensed; cited via the protocol/company record, not via Medium. Munich Re's Smart Contract Risk Insurance (Germany) is, by contrast, a regulated commercial product. Bermuda's proposed PSPI and Cayman's SPC/transformer vehicles are regulated structures.
- Self-reported figures: Market-capacity, premium, per-policy, and coverage figures (e.g. Marsh USD 825M facility, Evertas/Arch up to US$420M per policy, Singapore SRA cyber pool up to US$1B, OSL US$1B HK programme, Germany ~53 CASPs, ABIR Bermuda GWP, Cayman 720 captives / USD 51B premiums) are self-reported by the named provider/aggregator/regulator and flagged accordingly; not independently re-verified this cycle.
- Key corrections this cycle: US (FDIC GENIUS-Act NPR Apr 2026, no pass-through for stablecoin reserves; SEC/CFTC joint interpretation 17 Mar 2026); Canada (Stablecoin Act Royal Assent 26 Mar 2026, not in force; CIRO 20% self-custody allowance; mandatory-in-substance gating); Cayman (first full VASP licence to BCXPro 5 Feb 2026; MC-RSOG insure-or-mitigate effective Feb 2026 — upgraded from disclosure-only); Australia (Framework Act Royal Assent 8 Apr 2026, commences 9 Apr 2027; AML/CTF existing entities 31 Mar 2026, tranche-2 NEW sectors 1 Jul 2026); Hong Kong (13 VATPs; IA RBC 100% downward stress, conclusions 8 May 2026; HKDPB limit HKD 500,000); Japan (FIEA Cabinet-approved 10 Apr 2026, penalty 10 yr / JPY 10M; reserve sized to volume/incident, not a JPY 2-40B figure); Singapore (37 MPIs with DPT activity; Evertas/Arch up to US$420M per policy, self-reported); South Korea (no-fault liability PROPOSED, not enacted; DABA phase-2 bill 8 Apr 2026); EU (Solvency II Delegated Reg (EU) 2026/269, OJ 18 Feb 2026 — NO crypto charge; EIOPA 100% stress still pending a subsequent delegated act; MiCA transition ends 1 Jul 2026); France (DASP transition ends 1 Jul 2026); Germany (~53 CASPs, largest EU market, self-reported); Liechtenstein (MiCAR authorisation by 1 Jul 2026; EAS is a PCC); Bahrain (separate Digital Tokens 2023 + Stablecoin SIO frameworks); FATF (R.15: of 138 jurisdictions assessed 2025, ~1% fully / 29% largely compliant).
- Tags / regions: Tagged with the canonical
type/analysis. The five canonical regions used are Americas, Asia-Pacific, Europe, and Middle East & Africa (with International Standards as the cross-cutting frameworks layer); the matrix's lowercase region values (asia-pacific,middle-east-africa) map to these canonical names. - Wikilinks: Same-domain links use the
deep-research/digital-asset-insurance/path prefix (basenames such as canada/japan/united-states/european-union are ambiguous across deep-research domains); cross-domain links would use thedeep-research/prefix. File slugs match the regulation/guidance filenames (e.g.united-states,european-union,cayman-islands,fsb-bis-fatf). </content>