Thailand’s KBank Furthers Crypto Business Through Satang Acquisition

OKX shores up App security following bug discoveryCryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.User data and asset vulnerabilityThe flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.Taking to the X social media platform on Tuesday, CertiK wrote:”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”Photo by FLY:D on UnsplashPrompt responseRecognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”Ongoing exploitsThis security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.Industry collaborationThe collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

OpenAI CEO Sam Altman's Worldcoin project aims to bolster ties with Malaysian officials amid concerns over data privacy. Sam Altman and Alex Blania, key figures behind the Worldcoin project, recently engaged in discussions with Malaysian leaders, including the nation's Prime Minister, to enhance government relations. The move comes as Worldcoin faces scrutiny and seeks to address concerns surrounding data protection.Photo by Esmonde Yong on UnsplashAddressing privacy concernsThe "proof-of-personhood" crypto project has been under scrutiny for its data collection practices. Last month, temporary bans were imposed by Spain and Portugal, halting Worldcoin's data collection activities. The project offers WLD tokens to users in exchange for iris scans to create their personal World ID, prompting privacy advocates' concerns. Government attention and oversightWorldcoin's high-profile nature, coupled with Sam Altman's involvement, has drawn significant government attention. Countries like Germany, France, Argentina, Kenya and South Korea have initiated investigations into the project's data collection practices. Despite challenges, senior government officials continue to engage with Worldcoin amidst growing concerns about artificial intelligence threats like deepfakes. Strengthening government relationsTo address regulatory concerns, Worldcoin's parent company, Tools for Humanity, appointed Trevor Traina, former U.S. ambassador to Austria, as Head of Global Affairs. Traina emphasized the importance of meeting policymakers' expectations regarding data privacy and security. New privacy measuresIn response to regulatory pressures, Worldcoin introduced "Personal Custody," discontinuing the storage of biometric data for new signups. Additionally, users can now request the deletion of their iris codes, and stricter age verification measures have been implemented to prevent minors from signing up. These measures were developed in consultation with privacy experts and data protection authorities. Despite challenges, Worldcoin has assigned over five million World IDs, according to project data. 

Thailand’s Securities and Exchange Commission (SEC), the independent state agency responsible for oversight and development of the Southeast Asian nation’s capital markets, is seeking public commentary on the updated set of rules it has proposed to regulate initial coin offering (ICO) portals.  In a notice published on its website on July 18, the SEC outlined that it is seeking public comments in relation to the criteria it has established for investor communication and service provision by ICO portals as part of its proposed regulations.Photo by Alin Meceanu on UnsplashEasing knowledge test requirementsThe regulations had been approved in principle last month and put an onus on ICO portals to ensure that retail investors take a knowledge test and pass that test before they are permitted to participate in trading ICO tokens. The current regulations stipulate that retail investors must undertake knowledge tests on an ongoing three-monthly basis. The updated regulations propose that ICO portals conduct suitability tests that are sufficiently comprehensive such that the investor understands the risks associated with any potential ICO-related investment. The SEC stated that the objective is that the investor has “a risk tolerance level appropriate and in alignment with the product risk.” Instead of quarterly knowledge tests, the proposed regulations require suitability assessments to be carried out once every two years. In this way, the commission believes that it will reduce the administrative burden for ICO portals while reducing friction for the investor. It stated: “These proposed requirements are in line with regulatory practices applicable to both securities and digital asset business operators.” Jagdish Pandya, founder of blockchain venture builder BlockOn Ventures, told Decrypt that “Thailand has been a first mover for crypto regulations and the SEC has played a pivotal role in providing all regulated activities and licenses, much ahead of Singapore, Malaysia, Philippines, and Vietnam in South East Asia.”  Moving past previous ICO market failuresPandya added that the proposed suitability tests would protect “amateur investors” from piling into ICOs and losing their funds like in the “old ICO scam era.” ICOs first gained significant popularity in 2017 as the crypto market started to expand. Around $6.2 billion in funding was raised by a broad range of crypto projects in that year. However, a complete lack of regulation at the time meant that the ICO marketplace was laden with outright scams. ICOs were being hyped up in pump-and-dump schemes, with investors losing most, if not all, of their funds as the fraudulent ICO promoters rug-pulled them, abandoning the projects and taking off with the ICO funding. Thailand’s existing ICO portal regulations were introduced in November 2023. The regulations require project promoters to make disclosures with regard to project creditworthiness and risk for debt-like tokens with a predetermined fixed rate of return.  Those promoting infrastructure-backed tokens, which allow the token holder to earn a revenue share from infrastructure projects, are subject to rules regarding items such as due diligence, asset valuation and issuer asset management.