What happened
BlockSec Research stated problems with HKDAP controls, but independent confirmation of these findings in the available sources is lacking.
Why it matters
The claimed KYC failures and concentration of powers affect trust in the controls of Hong Kong's first regulated stablecoin, but require independent verification.
BlockSec Research published an overview of HKDAP, named the first regulated stablecoin in Hong Kong. In a brief description of the study, it is claimed that the KYC revocation does not take effect, and one key can issue, burn, and freeze tokens.
The authors also point to discrepancies with HKMA requirements. These conclusions are based on the synopsis of BlockSec Research material; independent confirmation in the available source package is absent.
If the study's conclusions are confirmed, they will be important for assessing operational control and compliance of the regulated stablecoin with supervisory requirements. However, the available data do not allow establishing the scale of the problem, its cause, or the issuer's and regulator's reaction.
Confirmed facts
- BlockSec Research published an overview of HKDAP on August 14, 2026.
- In BlockSec Research's synopsis, HKDAP is named as Hong Kong's first regulated stablecoin.
- According to BlockSec Research's synopsis, the KYC revocation does not work.
- According to BlockSec Research's synopsis, one key has the ability to issue, burn, and freeze tokens.
- According to BlockSec Research's synopsis, there are discrepancies with HKMA requirements.
- In the available source package only one source is presented — BlockSec Research; independent verification is absent.
Context
BlockSec Research material is available in the source package only as a synopsis of metadata, and not as the full text of the study or independent verification of its conclusions.
What remains unknown
- What exactly does BlockSec Research's full on-chain analysis of the KYC revocation show?
- How did HKDAP and HKMA respond to the alleged discrepancies?
- Does one key truly hold all listed powers in the current version of the system?
- Will independent experts or auditors confirm the findings?
Editorial context
Confidence: medium
Possible consequence — increased scrutiny of HKDAP's access controls and KYC revocation procedures. The next observable signal would be an official response from HKDAP or HKMA or an independent verification of the findings. Substantial uncertainty remains: only the BlockSec Research synopsis is available, with no full text and no second source.