HKDAP Whitepaper

1. DISCLAIMER

Anchorpoint Financial Limited is a company incorporated in Hong Kong SAR with limited liability (“AFL”). The information provided by AFL in this document and the other AFL documents (“Documents“) is for reference only. Each Document does not constitute accounting, tax, legal, regulatory, sustainability, financial, investment, or any other kind of advice from AFL (or from any of AFL’s affiliates). You must make your own independent judgment with respect to any matter referred to or contained in the Documents. AFL and its personnel (or AFL’s affiliates and their personnel) will not be responsible or liable for any losses or damages you or any other person suffers or incurs as a result of relying upon or using the Documents or as a result of any information being omitted from any of the Documents. Each Document does not constitute a recommendation or commitment for you to enter into any commercial relationship with AFL (or with AFL’s affiliates) and does not create any legally binding obligations on AFL (or AFL’s affiliates). AFL and its personnel (or AFL’s Affiliates and their personnel) do not owe any fiduciary or other duties to you or any other person. Please note, the information contained in each Document may be subject to change from time to time based on modifications to AFL’s business model, changes in applicable laws and regulations, and instructions or guidance from relevant regulators. Some of the information used in preparing the Documents may have been obtained from public sources. While AFL endeavours to ensure the accuracy of the information in the Documents, no express or implied warranty is given by AFL (or its affiliates) as to the accuracy of the information. AFL (or AFL’s affiliates) shall bear no responsibility for any error or omission.

AFL is licensed under section 15(1) of the Stablecoins Ordinance (Cap. 656) (the “Ordinance”) to issue specified stablecoins in Hong Kong (license number FRS01) (“License”).

2. LICENSEE PARTICULARS

3. STABLECOIN DETAILS

Category	Particular(s)
Name & Abbreviation	Hong Kong Dollar At Par (HKDAP)
Type(s) and composition of referenced currenc(ies);	Hong Kong Dollar (HKD)
Description of the characteristics of the specified stablecoin	HKDAP is defined as a stablecoin under section 3, and a specified stablecoin under section 4, of the Ordinance. HKDAP is a digital token issued by AFL with a par value of HKD1.00 each that operates on supported blockchains. HKDAP in circulation is backed by a reserve assets pool denominated in HKD (and/or any other currencies from time to time permitted under applicable Laws) the market value of which is required to be at least equal to the par value of the HKDAP in circulation. The reserve assets are held on trust for the benefit of the holders of HKDAP.
Starting date of offer to the public, or if not available, the intended starting date; and	TBA
Jurisdiction(s) where the specified stablecoin is authorised to be issued.	AFL is licensed to issue stablecoins in Hong Kong SAR with HKDAP distributed globally in accordance with local laws.

4. RESERVE ASSETS MANAGEMENT ARRANGEMENT

Category	Particulars
Type(s) and composition of reserve assets	AFL ensures that stablecoins remain directly pegged to that stablecoin’s reference fiat currency, by maintaining a pool of high-quality and highly liquid reserve assets in the reference currency of that stablecoin or any other currency that may be permitted by applicable policies, laws and regulations. Reserve assets can be held in any combination of the following; 1. Cash; 2. Bank deposits with a term of no longer than three (3) months; 3. Marketable debt securities that: a. Are issued or guaranteed by a government, central bank, public sector entity, qualified international organization or multilateral development bank; b. Have a residual maturity of no longer than one (1) year; c. Qualify, in the calculation of credit risk under the standardized (credit risk) approach, for a 0% risk weight pursuant to sections 55-58 of the Banking (Capital) Rules (Cap. 155L); or (ii) are denominated in the domestic currency of the issuer that is issued by a government or central bank; d. Are of high quality; and e. Are not an obligation of a financial institution or an associated entity of a financial institution, that is not a public sector entity bank; 4. Cash receivable from overnight repurchase agreements with minimal counterparty risk, collateralised by assets set out in (3); 5. Investment funds that invest in (1), (2), (3) and/or (4), where such investment funds should be set up dedicated for the sole purpose of managing the reserve assets of AFL; and/or 6. Other types of assets, which are acceptable to the HKMA.
Custody arrangement of the reserve assets, including but not limited to relevant segregation and safeguarding measures	The reserve asset custodian(s) (“Custodian”) and trustee(s) (“Trustee”) for AFL are selected and retained based on a comprehensive assessment criteria. These criteria are designed to ensure that the reserve assets are accorded with the maximum possible protection and are effectively always segregated. Selection criteria include, but are not limited to: • Being a licensed ‘Authorized Institution’ in Hong Kong and/or approved by the HKMA to provide the requisite services; • Having a significant market presence in Hong Kong; • Proven track record of providing applicable services within Hong Kong; • Strong positive reputation within Hong Kong and internationally; • Established systems and controls to ensure effective protection and segregation of reserve assets; • Compliance with AFL’s onboarding and due diligence criteria for providers; • Compliance with all other applicable policies of AFL including ‘Third Party Risk Management’, ‘Conflict of Interest’, ‘Client Asset Protection’, and ‘Anti Bribery and Corruption’; and • Competitive pricing and terms. Intended Custodian(s) & Trustee(s) Subject to the initial and ongoing satisfaction of the above selection criteria, AFL will retain Standard Chartered Bank (Hong Kong) Limited (“SCBHK”) as the Custodian and Standard Chartered Trustee (Hong Kong) Limited (“SC Trust”) as Trustee for non-digital reserve assets (including cash and securities) and either SCBHK or an associated subsidiary as Custodian and Trustee for any digital reserve assets. Key provider suitability analysis is an ongoing process to ensure the robustness of the AFL offering. AFL’s infrastructure allows for multi-bank and multi-custodian connectivity. Segregation and Safeguarding Measures AFL will create an effective trust(s) over each of the reserve assets backing each stablecoin and place them in segregated accounts or other arrangements with the Custodian. This trust and segregation structure ensures that all reserve assets fall outside of AFL’s own assets in the event of its insolvency.
Third-party custodian(s) of the reserve assets	AFL will retain SCB HK as the Custodian and SC Trust as Trustee for non-digital reserve assets, and either SCB HK or a member of the Zodia Custody Group (“Zodia”) for digital reserve assets. These custodians are chosen for their reputation, systemic importance, and ability to provide effective risk management and operational efficiency when managing a reserve. Overtime these relationships could change, but the procedures and policies that govern third party selection and risk management will remain at the highest standards.

5. ISSUANCE, DISTRIBUTION AND REDEMPTION

Category	Particular(s)
Number of units of the specified stablecoin in circulation	Please refer to periodic reserve statements and attestation reports, which will be disclosed on AFL’s corporate website.
Issuance, distribution and redemption channels maintained by the licensee	AFL operates under a wholesale distribution model, whereby only entities that have undergone a comprehensive due diligence and onboarding process are designated as “Authorised Distributors”. Authorised Distributors may include, but are not limited to, “permitted offerors” as defined in the Ordinance and (in the case of any distribution of the stablecoin outside of Hong Kong SAR) reputable overseas institutions. This model supports AFL’s objective of achieving universal usability across a broad range of use cases, while supporting global adoption. AFL stablecoins are issued on public blockchain network(s) which enables the acquisition or disposal of stablecoins via Authorised Distributors or alternatively through other third-party trading or liquidity platforms. AFL will disclose Authorised Distributors on the website.
Any issuance, distribution and conversion channels maintained by third-party entities	AFL Authorised Distributors or other third parties may maintain conversion channels for AFL issued stablecoins to facilitate the adoption of the stablecoins.
Procedures and timeframe for specified stablecoin holders to redeem their specified stablecoin at par	Authorised Distributors may request redemption of stablecoins in line with the Distribution Agreement and the Coin Terms and Conditions. The procedure is summarised below: Deposit Stablecoin AFL operates on a pre-funded model which ensures redemption is only initiated once the stablecoins are received and verified. Authorised distributors are required to transfer stablecoins from an AFL recognised whitelisted wallet to AFL’s designated client wallet before requesting redemption. Request Redemption Subject to deposit confirmation on-chain, the Authorised Distributor shall submit a redemption request via AFL’s client interface, specifying the stablecoin type (i.e. if multiple stablecoin currencies in circulation), blockchain network, redemption amount, and AFL recognised whitelisted destination bank account. AFL’s system validates the redemption request and initiates internal ledger entries to lock the redemption amount and record applicable fees. The stablecoins are transferred from the client wallet to the redemption wallet and then burned on-chain. Upon successful burn confirmation, the ledger is updated to reflect the reduction in circulating supply, adjust the reserve assets accordingly and transfer redemption proceeds from the reserve assets to the AFL collection account. Fiat Transfer Phase The redemption proceeds are transferred from AFL’s bank account to the distributor’s whitelisted bank account, and final ledger adjustments are made to reconcile the transaction and transfer to AFL’s operational accounts. Redemption Timeframe AFL aims to process all redemption requests within one (1) business day. The system is designed for straight-through processing with high integration across custodians, blockchain networks, and banking partners. If a redemption is not completed within this timeframe AFL incident management process will be initiated.
Procedures and timeframe for specified stablecoin holders to convert their specified stablecoin at par via third-party entities (if any);	Given the diverse nature of AFL Authorised Distributors, supported use cases, and the profiles of intended stablecoin holders, the conversion procedures via third parties may vary depending on several factors. Please refer to the Authorised Distributors for details of specific procedures and timeframes applicable.
Redemption arrangement when the incident response plan, business continuity plan, and/or business exit plan is activated	Triggering Conditions The incident response plan, business continuity plan and/or business exit plan may be activated when: • A material incident disrupts normal stablecoin operations (e.g. blockchain failure, custodian breach); • AFL declares insolvency or enters liquidation; and/or • AFL initiates a business exit, including voluntary wind-down or license revocation. Redemption Rights of Holders • Holders retain the right to redeem stablecoins at par value subject to any fees levied by Authorized Distributors; • Redemption is executed via liquidation of Reserve Assets, which are held in trust for holders; and • If Reserve Assets are insufficient, holders have the right to claim shortfall against AFL. Operational Execution • Stablecoins must first be transferred to the AFL specified wallet from recognised addresses and subsequently redemption must be requested; • AFL transfers coins to the Redemption Wallet, where they are burned on-chain; and • The corresponding fiat amount is disbursed from the Reserve Assets Account to the Collection Account and then to the stablecoin holder’s whitelisted bank account. Governance and Oversight • The Executive Committee (ExCo) and Executive Risk Committee (ERC) oversee the incident response. • A root cause analysis and audit trail are maintained. • AFL reports material breaches or insolvency events to the Hong Kong Monetary Authority (HKMA) as soon as practicable and in any case not later than 20 business days. Client Asset Offramp • If holders fail to redeem within six months, AFL may forcibly offramp assets; • Stablecoins are redeemed and fiat returned to the source bank account. • If fiat withdrawal fails, AFL remints stablecoins and returns them to the source wallet.
Approach to securing the issuance and redemption lifecycle	AFL’s digital asset custody and token key management model is designed to operate within a tightly controlled enterprise risk management framework. This means the critical control environment surrounding wallet operations, reserve-backed issuance and redemption, and key lifecycle management is embedded within Standard Chartered Bank’s safeguarded perimeter built on governance, risk and control standards expected of a globally systemically important bank (“GSIB”). Therefore, AFL’s custody and key-management stack has in place the same type of layered physical, logical and operational safeguards expected in a regulated banking environment. Equally important, no single individual can unilaterally sign or execute smart contract transactions. AFL employs multi-approval controls, sets strict transaction thresholds, ensures adequate segregation of duties, and comprehensive audit logging that is available through the immutable distributed-ledger platform design. Wallet keys remain secured within FIPS-rated hardware security modules and are not distributed to individuals. For custody-linked wallet creation, deactivation and transfer activities, execution is performed under the procedures of the appointed custodian and, for key operational wallets, in coordination with the trustee. In practice, this creates a control model in which critical actions require both authorised AFL participation and the embedded involvement of regulated banking/custody infrastructure provider.

6. RIGHTS AND OBLIGATIONS

Category	Particular(s)
Terms and Conditions	Please refer to HKDAP – Coin Terms and Conditions
Detailed description of the rights and obligations of specified stablecoin holders, including the right to redeem at par value	Stablecoin holders are granted a clear and fundamental right even in the event of AFL’s insolvency to redeem their coins at par value, meaning each stablecoin unit can be exchanged for an equivalent amount of corresponding FIAT currency on a one-to-one basis. During normal operations, stablecoin holders can request redemption via any one of our Authorised Distributors. This redemption will be processed by Authorised Distributors as promptly as practicable, subject to their respective terms and applicable laws. In the event of issuer insolvency, holders retain the right to direct the disposal of the Reserve Assets to recover their holdings on a pro rata basis. If the Reserve Assets fall short of covering the total redemption amount, holders may pursue a claim against the issuer for the deficit. The stablecoin is backed by a pool of Reserve Assets denominated in the corresponding FIAT currency or other permitted currencies, which are held in trust and segregated from the issuer’s own assets. These assets must maintain a market value at least equal to the total par value of the stablecoin in circulation, ensuring that holders’ claims are supported by tangible reserves. Legal title to the stablecoin is transferred upon confirmation on a supported blockchain, although the issuer does not guarantee the success or finality of such transfers on the blockchain itself. To hold AFL stablecoins, individuals must meet eligibility criteria, including not residing in prohibited jurisdictions or engaging in restricted activities. Holders are prohibited from using the stablecoin for unlawful purposes such as money laundering, terrorism financing, or transactions involving controlled substances, weapons, illegal gambling, or darknet markets. They are also obligated to comply with all relevant laws and issuer policies and may be required to provide documentation or information for compliance purposes. The issuer reserves the right to freeze assets or accounts to adhere to legal directives or regulatory requirements. Importantly, AFL stablecoin is a bearer instrument, meaning holders are solely responsible for safeguarding their wallets and private keys. The issuer does not offer custodial services, and any loss of access to the stablecoin due to compromised keys is the holder’s responsibility. Users must also acknowledge and accept various risks associated with blockchain-based assets, including potential forks, technical vulnerabilities, and service disruptions. AFL stablecoins are not legal tender and are not insured or guaranteed by any governmental authority, underscoring the importance of informed and responsible use by its holders.
Conditions under which the rights and obligations may be modified	The rights and obligations of stablecoin holders, as set out in the Coin Terms and Conditions, may be modified by the issuer, AFL, under specific conditions. The issuer reserves the right to amend, modify, or update the Terms at any time, provided such changes comply with applicable laws. These modifications become effective upon publication of the revised Terms on the issuer’s official website, unless a different effective date is specified. Continued use of AFL stablecoins after the effective date of any changes constitutes acceptance of the revised Terms. If a holder disagrees with the updated provisions, they are required to cease obtaining, holding, or using the stablecoin. AFL’s ability to modify the Terms is not subject to prior notice or holder consent, reinforcing the unilateral nature of such updates. However, all changes must remain within the bounds of applicable regulatory and legal frameworks, including those set by the HKMA under the Stablecoins Ordinance.
Rights of specified stablecoin holders in the event the licensee fails to meet its obligations	In the event that the licensee fails to meet its obligations, particularly in the case of insolvency, specified stablecoin holders are granted a set of protective rights under the Coin Terms and Conditions. Most notably, holders retain the right to direct the disposal of the Reserve Assets. These directions would typically be via a court-appointed liquidator, provisional liquidator or an AFL appointed representative whose authority is limited to administering the holders claim process. These assets, which are held in trust and segregated from the issuer’s own funds, are intended to back the stablecoins in circulation at par value. If the issuer becomes insolvent, holders may instruct that these Reserve Assets be liquidated in order to redeem all outstanding stablecoins on a pro rata basis, meaning each holder receives a proportionate share based on their holdings. If the proceeds from the disposal of the Reserve Assets are insufficient to fully redeem all stablecoins, holders also have the right to claim against AFL for any shortfall. This establishes a dual-layer protection: first through the asset-backed trust structure, and second through a residual claim against the issuer itself. These rights are designed to ensure that holders are not left without recourse and that their entitlement to redemption at par value is preserved even in adverse scenarios.
Rights of specified stablecoin holders in the event the licensee activates the business exit plan	In the event that AFL activates a business exit plan, such as ceasing operations or entering insolvency, the Coin Terms and Conditions provide specified stablecoin holders with a set of enforceable rights designed to protect their interests. Most critically, holders retain the right to direct the disposal of the Reserve Assets, which are held in trust and segregated from the issuer’s own assets. These assets are intended to back the stablecoin in circulation at par value. Upon activation of the exit plan, holders may instruct that these Reserve Assets be liquidated in order to redeem all outstanding stablecoin on a pro rata basis, meaning each holder receives a proportionate share based on their holdings. If the proceeds from the disposal of the Reserve Assets are insufficient to fully redeem all stablecoin, holders also have the right to claim against the issuer for any shortfall. This dual-layer protection first through the asset-backed trust structure and second through a residual claim ensures that holders are not left without recourse. The issuer may suspend or cease services related to AFL stablecoins on any blockchain or protocol. In such cases, holders are required to take all actions reasonably necessary to migrate their AFL stablecoins to a supported blockchain or protocol identified by the issuer. Failure to do so may result in loss of access or functionality for which the issuer is not liable for any losses arising from such failure. These provisions collectively form the backbone of the exit protections afforded to holders, ensuring that their redemption rights and claims are preserved even in the event of a wind-down or operational failure.
Complaint-handling arrangement, procedures and expected timeframe	AFL’s complaint handling arrangements are as follows: Complaint Submission A complainant may submit a complaint via online form on AFL’s website. • Complaints are accepted free of charge and may be submitted in English or any official language of Hong Kong. • Upon receipt, AFL’s Client Servicing Team logs the complaint and issues an automated acknowledgment to the complainant, including a link to the published complaint-handling procedures. • If further information is required, the complainant will be contacted promptly. Initial Review and Investigation • A trained staff member, who is not deemed to be conflicted in the subject matter of the complaint, is assigned to conduct an objective investigation. • If the complaint involves a third-party distributor, AFL coordinates with the relevant entity to ensure appropriate handling. • Staff implicated in the complaint are excluded from the investigation process. Escalation Protocols • Complaints involving fraud, regulatory breaches, or potential litigation are escalated to AFL’s Legal and Compliance teams. • Complaints referred by the Hong Kong Monetary Authority (HKMA) are escalated directly to the Chief Risk Officer (CRO). • Repeat complaints or unresolved issues are escalated to the Chief Commercial Officer (CCO), and if deemed material, further escalated to the CEO. Resolution and Response • AFL aims to issue a final written response to the complainant within 30 business days of receipt. • If resolution is delayed, a holding reply is issued, and the final response must be provided within 60 business days. • In exceptional cases requiring extended investigation and potentially third-party sourced information, AFL provides regular updates to the complainant until resolution is achieved. Outcome Communication The final response includes: • A summary of the investigation findings. • Any remedial actions taken (e.g., refunds, corrections, process improvements). • Clear reasoning if the complaint is not upheld. • Information on further recourse options, including referral to the HKMA or alternative dispute resolution mechanisms. Record-Keeping • AFL retains all complaint records, including investigation notes, communications and outcomes for a minimum of two years (or longer if required by law or regulators). • Records are maintained in accordance with internal audit and regulatory compliance standards.
Contact details for filing complaints	Submit online form on AFL’s website https://anchorpoint.hk/contact/

7. TECHNOLOGY UNDERPINNING STABLECOIN ISSUANCE

Category	Particular(s)
Information on the underlying technolog(ies), including distributed ledger(s)	AFL’s stablecoin platform is built on an EVM-compatible blockchain infrastructure nodes. EVM-compatible ledgers also support modular contract architecture, which is critical for stablecoin issuers and underpins AFL’s technology platform design principles. AFL’s smart contracts are segmented into functional modules such as token issuance, whitelist enforcement, blacklisting, and administrative overrides allowing for granular control and upgradability. This modularity is especially important to support the regulated nature of AFL in its ability to respond to compliance directives, freeze assets, or adapt to evolving legal frameworks without disrupting the entire token infrastructure. This architecture is designed to deliver high performance and low latency while maintaining strict control over network participants and consensus mechanisms. Smart contracts form the backbone of token operations, governing minting, burning, whitelisting, blacklisting, and administrative functions. These contracts are deployed only after undergoing rigorous quality assurance, peer review, and penetration testing to ensure security and reliability. Token issuance and redemption are managed through a dedicated Token Management Module, which interfaces with AFL’s internal ledger and custodial systems. Cryptographic key management is split into two distinct layers. The first layer, the Token Key Management System, secures keys used for token operations and employs clear-signing principles alongside air-gapped hardware security modules rated at FIPS 140-2 Level 3 or higher. The second layer, Digital Asset Custody, handles wallets that store client assets and in-transit tokens. Custody services are provided by properly vetted third parties, whom operate under bank-grade risk frameworks and enforce multi-signature schemes, whitelisting, and transaction screening. Ethereum serves as the primary distributed ledger for deployment, though other blockchains are under evaluation. AFL assesses blockchain platforms based on their security resilience, codebase maturity, decentralization, and compatibility with custodial and compliance infrastructure. Security monitoring is embedded throughout the technology stack. AFL uses SIEM tools for continuous surveillance of blockchain activity, infrastructure, and user behavior. All production environments are managed through CI/CD pipelines, with strict segregation between development, staging, and live systems. Vulnerability scanning and patch management are integrated into the software lifecycle to maintain a hardened and resilient platform.
Technical requirements for specified stablecoin holders	To become a distributor of AFL stablecoins, a client must meet several integrated technical requirements that ensure secure, compliant, and auditable participation in the platform. First, the distributor must support robust identity and access management. This includes integration with digital identity providers that issue JWT tokens for single sign-on, or alternatively, support Web3 wallet connectors such as WalletConnect or Metamask Institutional, which are linked to approved custody providers. Two-factor authentication is mandatory across all access points, and each user must be assigned a unique wallet key with clearly defined roles. Communication with AFL must occur through approved channels, which include secure email and help desk systems for manual interactions, a client web portal that supports either SSO or decentralized app access, and an API gateway that accommodates both REST and Web3 JSON-RPC calls. All API traffic must be encrypted using TLS 1.2 or higher, and critical requests such as wallet updates or token issuance must be digitally signed using approved cryptographic schemes. Distributors are required to whitelist both their bank accounts and wallet addresses through AFL’s onboarding process. Wallets must be hosted or verified by AFL-approved custodians and must pass screening and monitoring protocols. Wallet control is verified through micro-payment tests to ensure operational integrity. Operationally, distributors must adhere to a pre-funding model, meaning they must deposit fiat or stablecoins before initiating any issuance or redemption requests. All sensitive actions, including account changes and token operations, must follow maker-checker protocols to enforce dual authorization. Every interaction is recorded on AFL’s permissioned blockchain and internal systems to maintain an immutable audit trail. From a security and compliance standpoint, distributors must align with AFL’s internal cybersecurity standards, which cover secure configuration, identity and access controls, and continuous logging and monitoring. Transactions are subject to fraud detection, sanctions screening, and velocity limits. Additionally, AFL conducts quarterly reviews of distributor accounts to identify dormant activity and enforce deactivation protocols where necessary. This framework ensures that any distributor operating within AFL’s ecosystem does so with full transparency, operational rigor, and regulatory alignment.
Audit results of the underlying technologies used	AFL engages a well-established information assurance firm to conduct an extensive penetration testing program. Any findings that were identified have been remediated prior to deploying the HKDAP smart contract onto the ethereum mainnet.

8. RISK DISCLOSURE

Category	Particular(s)
Risks associated with the licensee, the specified stablecoin, and the technolog(ies) used, including but not limited to the risks referred to in section 7	As a licensed stablecoin issuer, AFL and the stablecoins it issues operate within a dynamic landscape of financial, operational and technological risk. These risks are outlined below. Licensee Risks AFL is exposed to credit and counterparty risk: in the event of the company’s insolvency, holders’ redemption claims may exceed the value of the segregated reserve assets. Even with segregated reserves, holders ultimately bear the risk that the realised value of those assets due to market, credit, or counterparty factors may be insufficient to fully meet all redemption claims in an insolvency scenario. Operational risk arises from any breakdown in internal processes, human error, system failures or external shocks whether cyberattacks, natural disasters or service outages at critical infrastructure providers. Governance and compliance risk reflects AFL’s obligation to adhere to the HKMA’s licensing requirements, anti-money-laundering rules, data-privacy laws and financial reporting standards; any material breach or reporting failure could trigger enforcement action, suspension or revocation of its license. Specified Stablecoin Risks AFL stablecoins are backed by a pool of high-quality assets, but it remains subject to reserve asset risk; market fluctuations, credit events or sudden illiquidity in these assets could compromise the one-to-one peg to the underlying FIAT currency. Redemption risk manifests if simultaneous conversion requests outstrip the available reserves, potentially causing partial redemption or delayed payment. Market confidence risk captures the possibility of a “run” if users lose faith in the stablecoins stability or in AFL’s ability to honor redemptions. Mass redemptions could amplify pressure on reserves and trigger a de-pegging scenario. Technological Risks The blockchain and cloud infrastructure that underpin AFL stablecoins introduce their own set of vulnerabilities. Cybersecurity and hacking risk spans unauthorized access, private-key theft or malicious manipulation of the token ledger. Technology and infrastructure risk encompasses software-defined outages, disruptions in the consensus layer of the permissioned blockchain or downtime at cloud and node-hosting vendors. Smart contract and software risk arises from coding defects, logic errors or undiscovered vulnerabilities in the token issuance, redemption or administrative modules. Regulatory and legal compliance risk reflects potential misalignment between the platform’s technical architecture, for example cross-border data transfers, wallet management or transaction screening and evolving global or local regulatory frameworks. Data privacy and protection risk centers on potential leaks, unauthorized disclosures or misuse of user identities and transaction metadata. Interoperability and integration risk captures failures in the links between AFL stablecoins and external systems whether fiat-on-/off-ramps, custodial services or other blockchains while scalability risk highlights the challenge of sustaining uninterrupted service under surging transaction volumes. Third-party dependency risk arises from reliance on external technology and service providers custodians, key-management systems, cloud hosts any of which could suffer disruptions that impact AFL’s operations. Finally, blockchain fork and governance risk acknowledges that changes in the underlying protocol whether hard forks, software upgrades or disputes among node operators could force suspension of token issuance, redemption or transfers until AFL determines a safe resolution.
Mitigation measures to address these risks	To mitigate credit and counterparty risk, AFL will only hold reserves in Tier 1 banks with credit ratings no lower than A1/A+, P-1/A-1. AFL closely monitors reserve volumes and at certain thresholds may diversify the placement of reserves across multiple banking partners to mitigate concentration risk. To mitigate operational risk, AFL is implementing a robust internal control framework mandated by the HKMA. Key functions such as issuance, redemption, reserve management and compliance are performed by dedicated teams with clearly defined roles and dual‐control protocols. Disaster recovery and business continuity plans, tested at least annually, will ensure that critical services remain available even in the event of system failures, personnel shortage or external disruption. To manage governance and compliance risk, AFL has established a compliance program that meets or exceeds regulatory requirements. All material changes, incidents or breaches must be reported immediately to regulators. The issuer’s license and ongoing standing with the HKMA are monitored through regular oversight by an executive risk committee, which receives notifications of any deviation from approved policies or performance thresholds. Because AFL stablecoins depend on the value and liquidity of its underlying assets, AFL will restrict its reserve portfolio to high‐quality, highly liquid securities and cash equivalents. Detailed breakdowns of the reserve composition will be published regularly, and each pool will be verified by an independent auditor at least on a quarterly basis. Those disclosures will include market valuations and any material concentration risks. To mitigate redemption risk, AFL has codified explicit redemption rights and streamlined, on‐chain redemption procedures. Holders may convert tokens back to the base fiat currency at par at any time, subject only to market competitive, transparent fees that reflect the cost of execution and network charges. Redemption requests will be processed on a straight‐through basis and settled within defined timelines, ensuring that liquidity remains available even under elevated demand. AFL acknowledges the danger of a loss of market confidence, which could trigger simultaneous redemptions. To prevent a “run,” the issuer will maintain crisis‐management playbooks and communication protocols designed to reassure stakeholders. These include real‐time dashboards and public attestations of reserve levels, as well as if deemed necessary potentially pre‐agreed lines of credit to address extraordinary, short‐term liquidity needs. Technology risk is mitigated by ensuring AFL’s infrastructure is fortified by mandatory, recurring cybersecurity audits and penetration tests, aligned to NIST and ISO 27001 standards. All private keys are protected by multi‐signature, air-gapped hardware security modules (HSMs) certified to FIPS 140-2 Level 3 or higher. Real-time threat-monitoring tools scan for anomalies across both the permissioned blockchain and associated cloud environments. To guard against blockchain and infrastructure failures, AFL’s platform is architected with redundancy at every layer. Multiple blockchain nodes operate in parallel across distinct cloud regions, and core services are deployed in active-active clusters with automated failover. System upgrades and security patches undergo rigorous testing in staging environments, and formal change-management procedures govern every release. Smart contracts that underpin AFL stablecoins have passed external code audits and formal verification for all critical functions; minting, burning, freezing and governance overrides. Compliance-driven update cycles ensure that any legal or regulatory changes are reflected in the codebase within prescribed timeframes. To maintain regulatory and legal compliance, AFL monitors global rule-making and jurisdictional specific updates. Regulatory-focused audits of infrastructure, data flows and transaction logs occur annually, and staff receive ongoing training in emerging compliance requirements. These programs ensure that the technical architecture remains aligned with evolving standards for consumer protection, data privacy and anti-money laundering. User data and transaction records are encrypted both in transit and at rest, with strict role-based access controls governing who may view or process any personal information. To facilitate seamless integration, AFL publishes detailed API specifications and open-standard protocols, subjecting each external connection to interoperability testing before production rollout. Scalability testing simulates transaction spikes to verify that the platform can accommodate rapid growth without degradation. Traffic is load-balanced across nodes, and proactive capacity management ensures resource availability ahead of peak demand. Finally, AFL’s reliance on third-party providers from custodial partners to key-management vendors is governed by rigorous due-diligence processes, ongoing performance reviews and contractual uptime commitments. Contingency agreements allow for rapid provider replacement or internalization of critical services should any partner fail to meet its obligations. In the event of a blockchain fork or governance dispute, AFL’s governance charter prescribes decision-making protocols for determining which chain to support. Those rules are disclosed in the Coin Terms and Conditions and are designed to minimize disruption and preserve token holders’ ability to transact and redeem at par.