Blockchain security firm CertiK and professional services provider Moore Hong Kong have signed a memorandum of understanding (MoU) to explore joint services for businesses operating in the Web3 and digital asset sectors. The proposed collaboration will combine blockchain security expertise with traditional risk management, governance, and assurance capabilities.
The initiative is intended to help digital asset companies and institutions exploring blockchain technology address risks across both their technical infrastructure and business operations. The scope of services will depend on individual client requirements and the terms agreed for each engagement.
The partnership aims to connect on-chain security assessments with off-chain governance, compliance and operational risk management, helping organizations develop a more comprehensive approach to institutional trust in Web3.
CertiK specializes in blockchain and on-chain security services, while Moore Hong Kong provides expertise in technology risk, corporate governance, assurance and institutional risk management. By bringing these capabilities together, the firms plan to explore coordinated services for organizations seeking to strengthen their security and operational frameworks.
Hong Kong’s Digital Asset Sector Faces Broader Risk Requirements
The agreement comes as digital assets and tokenization create additional requirements for businesses seeking to demonstrate security, regulatory readiness and operational reliability. While smart contract vulnerabilities remain a significant concern, organizations must also address custody, internal controls, governance, compliance and business continuity.
Kenneth Ma, managing director of transaction services at Moore Hong Kong, said the region’s evolving framework for virtual assets, stablecoins and tokenization was increasing the importance of demonstrating effective controls both on-chain and off-chain.
He identified smart contract audits, custody arrangements, private key management, anti-money laundering (AML) screening and licensing readiness as areas that regulators, banks and investors may examine when assessing digital asset businesses.
Ma explained that a coordinated engagement could help clients address these requirements without having to manage separate providers for technical security assessments and off-chain assurance. Such an approach could be particularly relevant for companies seeking institutional partnerships or preparing to operate within regulated financial markets.
Joint Services to Cover Security and Operational Resilience
Under the MoU, CertiK and Moore Hong Kong will explore cooperation across several areas, including blockchain security, technology and cybersecurity risk, governance frameworks, internal controls, operational resilience and assurance readiness.
The arrangement establishes a framework for exploring potential collaboration rather than confirming a finalized package of jointly delivered services. The companies have not disclosed a commercial launch date, pricing structure or detailed implementation schedule.
Esme Pau, head of capital markets and policy at CertiK, said the collaboration reflected growing demand for an integrated approach to assessing on-chain and off-chain risks. She indicated that the partnership was intended to bring technical security and broader risk management within a coordinated scope, reflecting the importance of comprehensive controls in building confidence across the Web3 industry.
The proposed model recognizes that securing blockchain infrastructure alone may not be sufficient for organizations seeking institutional adoption. Businesses must also demonstrate that their internal processes, governance structures, and compliance procedures can support reliable operations.
By combining CertiK’s blockchain security capabilities with Moore Hong Kong’s governance and assurance expertise, the firms aim to help digital asset organizations address technical vulnerabilities and business-level risks through a coordinated framework.
Institutional Confidence Remains a Key Objective
The partnership reflects a wider effort to connect blockchain-specific security measures with the governance and assurance standards expected by institutional stakeholders. Digital asset businesses seeking relationships with banks, investors, and regulated organizations increasingly need to demonstrate both secure technology and credible operational controls.
For institutions evaluating blockchain-based products, these measures can help clarify how digital assets are protected, how risks are monitored and whether businesses have established processes for managing operational and regulatory obligations.
However, the MoU does not itself establish regulatory approval, guarantee compliance or confirm that all prospective services will be available to every client. Organizations will still need to meet the legal and regulatory requirements applicable to their activities and jurisdictions.
CertiK and Moore Hong Kong said their proposed collaboration was intended to support trust, transparency and resilience throughout the Web3 ecosystem as businesses evaluate opportunities involving digital assets and blockchain technology.
The initiative highlights the growing importance of treating blockchain security as part of a broader risk management strategy, particularly as digital asset companies seek stronger institutional participation and more established operating standards.
