LivePhase 2 of the RMF is now available — application-layer risks open for public consultation in Q2 2026

GBBC 

Capital Markets Risk Mitigation Framework (RMF)

An industry-led standard for the non-financial risks of blockchain infrastructure — built so regulated financial institutions can safely adopt public networks.

2
Phases released
5
Risk Assessment Partners
30+
Contributing institutions

The framework

A common reference for blockchain risk in regulated finance.

As blockchain infrastructure moves into the regulated core of capital markets, there has been no shared lens for assessing — and mitigating — its non-financial risks. The RMF closes that gap.

A cross-sector working group—comprising financial-market infrastructures, global systemically important banks, multilateral development banks, and leading Layer-1 protocol teams—has collaborated to provide a common reference rooted in their practical experience of managing risks in blockchain implementations and to provide an overview of how the new technology can be incorporated into established risk-management frameworks.

Industry-led
Built by the institutions that have to operationalize it.
Risk-based
Aligned to established non-financial risk taxonomies.
Public consultation
Each phase released openly for refinement before adoption.
Implementation-ready
RAPs translate the framework into deployable controls.

Three phases

A staged path across the blockchain stack.

Each phase opens for public consultation, incorporates feedback, then ships as a working reference.

Phase 1 · July 2025Released

Public Layer-1 blockchain infrastructure

The foundational framework: a global, risk-based assessment and proposed mitigation path for non-financial risks of public Layer-1 networks, designed to plug into existing risk-management frameworks at regulated financial institutions.

Phase 2 · April 2026Live now

Layer-2 infrastructure, digital payments & tokenized securities

Extends the RMF to Layer-2 infrastructure risks today, with application-layer risks for stablecoins, deposit tokens, tokenized bank deposits, and digital asset securities coming for public consultation in Q2 2026.

Phase 3 · UpcomingUpcoming

On-chain digital payments and native crypto assets

Extends RMF coverage to native crypto assets and remaining on-chain digital payment instruments, completing the risk lens across the full blockchain stack.

Scope being defined — contact rmf@gbbc.io to participate.

Who's behind the RMF

The institutions writing the standard.

Core Contributors

Ava LabsCanton FoundationCardano FoundationChainlink LabsDTCCDigital AssetEuroclear GroupGBBCHederaKinexys by J.P. MorganOliver WymanRipple

Observers

Asian Development BankBTG PactualDiameter PayClearstreamDeutsche BoerseDTIFEnterprise Ethereum AllianceEuropean Central BankGLEIFGK8 by GalaxyIDB LabISSAMIT DCIMoody’s RatingsState StreetSwiftTemasekVerifyVASPUNJSPFThe World BankWyoming Stable Token Commission

Frequently asked

About the RMF

What is the Risk Mitigation Framework?
The RMF is an industry-led framework facilitated by GBBC and Oliver Wyman that provides a foundational, global, risk-based assessment and proposed mitigation path for the non-financial risks of blockchain infrastructure used by regulated financial institutions.
Who built it?
A cross-sector working group of financial-market infrastructures, global systemically important banks, multilateral development banks, and leading Layer-1 and Layer-2 protocol teams — coordinated by GBBC and Oliver Wyman.
How are the phases organized?
Phase 1 covered public Layer-1 infrastructure. Phase 2 extends to Layer-2 infrastructure plus on-chain digital payments (stablecoins, deposit tokens, tokenized deposits) and tokenized securities. Phase 3 will cover native crypto assets and remaining on-chain payment instruments.
What are Risk Assessment Partners (RAPs)?
RAPs are vetted technology and regulatory providers that have designed concrete solutions for practical implementation of the RMF by regulated financial institutions — ranging from zero-trust infrastructure to compliance monitoring and ranking tools.
How can my institution contribute or become a RAP?
Reach out to rmf@gbbc.io. GBBC welcomes participation from financial institutions, infrastructure providers, regulators, and standards bodies.

Get involved

Help shape the standard for blockchain risk in regulated finance.

Contribute to future phases, join as a Risk Assessment Partner, or share feedback during public consultation.

Contact
rmf@gbbc.io

For Phase 2 / Phase 3 participation, RAP applications, and public-consultation comments.