National Bank of Kyrgyzstan, CertiK Sign Digital Som Security Pact

A Memorandum of Understanding has been signed by the National Bank of the Kyrgyz Republic and CertiK, focusing on security collaboration for the Digital Som and wider digital asset regulation. Cybersecurity, formal verification, AML/CFT, operational resilience, supervision, and knowledge exchange are among the areas covered by the agreement.

In Bishkek on September 9, 2026, the NBKR and CertiK inked a Memorandum of Understanding, creating a cooperation structure for Digital Som security and digital asset oversight.

Sanzhar Abdygaziev, a Board Member of the NBKR, along with CertiK representatives, signed the agreement.

The MoU outlines plans for the parties to share knowledge in cybersecurity, blockchain security, digital assets, regulatory supervision, and risk management.

Backing Digital Som Security

A key focus of the cooperation is the Digital Som, the central bank digital currency project of the NBKR.

During the platform's development and testing phases, the parties intend to examine security assessments, formal verification, cybersecurity controls, and operational resilience measures.

Formal verification applies mathematical techniques to determine if software satisfies predefined properties within a given model. This method can supplement conventional security reviews by analyzing system behavior against formally specified requirements.

Operational resilience also falls under the MoU's scope. It encompasses the capacity of digital financial infrastructure to maintain operations and recover predictably after technical disruptions or cybersecurity events.

“Digital asset infrastructure requires security and risk management to be considered from the earliest stages of design through ongoing operation,” said Ronghui Gu, Co-Founder and CEO of CertiK. “We look forward to bringing CertiK’s expertise and experience to our long-term cooperation with the NBKR, supporting the secure development of the country’s digital asset ecosystem.”

Oversight of Digital Assets and AML/CFT

The cooperation framework extends to topics beyond the Digital Som.

Under the MoU, CertiK and the NBKR plan to share expertise regarding the supervision of digital assets and digital asset service providers.

This encompasses AML/CFT practices, transaction monitoring, digital asset custody, technical security standards, and licensing requirements.

“The Memorandum of Understanding that we are signing today establishes a framework for further dialogue and cooperation,” said Sanzhar Abdygaziev, Member of the Board of the NBKR. “We see particular value in exchanging experience and expertise in blockchain and digital asset security, cybersecurity, AML/CFT, and the analysis and monitoring of digital asset transactions.”

The parties also intend to collaborate on analyzing risks and compliance trends linked to digital assets.

Monitoring Security and Regulatory Oversight

Within the cooperation framework, the NBKR and CertiK will look into using CertiK's Supervision and Compliance solutions for continuous risk monitoring and regulatory oversight.

CertiK Compliance integrates features such as AML screening, fund tracing, threat intelligence, compliance reporting, and asset and counterparty assessments.

CertiK Supervision, built for regulatory purposes, facilitates monitoring of virtual asset service providers, tokens, wallets, and transactions.

Under the MoU, any deployment of these tools is still exploratory and not yet a contracted implementation.

Training and knowledge exchange between the organizations are also part of the cooperation framework.

CBDC Development Security

The agreement arrives as central banks and financial institutions keep exploring digital currency infrastructure and its operational demands.

For a CBDC, security considerations may involve software integrity, key management, payment settlement, transaction monitoring, privacy, system availability, and operational resilience.

The NBKR-CertiK MoU provides a framework to address several of these areas during the Digital Som's development.

CertiK's Hack3D reports indicate that Web3-related losses hit $3.35 billion in 2025. In the first half of 2026, the company reported an additional $1.31 billion in losses across 344 incidents.

Wallet compromises caused over $444 million in losses in the first half of 2026, and code vulnerabilities accounted for $152 million.

These numbers underscore the variety of security risks impacting digital asset infrastructure, including risks that go beyond software vulnerabilities.

Wider Digital Asset Cooperation

Beyond the Digital Som, the MoU offers a structure for technical and strategic collaboration across the wider digital asset ecosystem.

Areas identified in the agreement include:

• Security of blockchain and digital assets
• Cybersecurity
• Formal verification
• Operational resilience
• AML/CFT
• Digital asset custody
• Technical security standards
• Licensing and supervision
• Risk monitoring
• Training and knowledge exchange

The agreement does not grant CertiK a license or authorization from the NBKR.

Licensing references in the MoU pertain to regulatory frameworks for entities engaged in digital asset activities.

The parties stated they plan to maintain dialogue and share expertise as the NBKR advances its approach to digital currency infrastructure and digital asset oversight.

CertiK's Profile

CertiK is a blockchain and Web3 security firm that offers security assessment, formal verification, monitoring, compliance, and risk management services.

Established in 2017, the company collaborates with blockchain projects, financial institutions, and public-sector entities on digital asset security and associated risk management.

Its services encompass smart contract and blockchain security assessments, formal verification, AML screening, transaction monitoring, threat intelligence, and regulatory supervision tools.

CertiK adheres to SOC 2 Type II and ISO 27001 standards.