CoinGecko Report Points to Q3 Market Contraction

Korea’s FSS to Collect Public Comments on Financial Statement Guidelines for Virtual Asset EntitiesThe South Korean Financial Supervisory Service (FSS) has revealed a set of exemplary financial statements aimed at clarifying the disclosure requirements of virtual asset-related entities. These guidelines have been designed to align with the Korean version of International Financial Reporting Standards (K-IFRS), which was established by the Korea Accounting Institute (KAI).It was reported earlier this month that the Financial Services Commission (FSC) brought forward these regulations to tackle accounting uncertainties within the blockchain industry.The main goal of these exemplary guidelines is to help entities provide financial statement readers with essential information regarding virtual assets. This includes details about the reserve amount held by virtual asset issuers and information about the virtual assets held by virtual asset service providers (VASPs).Photo by Kelly Sikkema on UnsplashPresentation sessionsTo ensure effective dissemination and understanding of these guidelines, the FSS, KAI, and the Korean Institute of Certified Public Accountants (KICPA) have planned presentation sessions. These sessions will take place from July 26 to August 11, which will involve visits to VASPs, listed companies, and accounting firms. Valuable feedback and suggestions from these stakeholders are anticipated, as the events encourage open two-way communication and welcome participation from anyone interested.Discussion meetingsTo further refine the ideas put forward during the presentation sessions, two separate discussion meetings with experts are scheduled for September and October. The recommendations gathered from the industry will undergo a careful review by experts and be thoughtfully incorporated into the guidelines.The FSS will finalize the guidelines in cooperation with the FSC, and the Securities and Futures Commission under the FSC will review them and give approval for their implementation. This is expected to take place between October and November.The FSC has stated that these exemplary guidelines are currently in their preliminary stage and open to potential changes during the public comment period. Additionally, companies have the flexibility to make necessary adjustments to these practice guidelines to suit their specific needs and requirements.Issuers, holders, exchangesThe exemplary practice guidelines are specifically targeted at three types of entities: virtual asset issuers, virtual asset holders, and virtual asset trading exchanges.For virtual asset issuers, providing essential information about their virtual assets is a key requirement. This information should encompass their business models, accounting policies, obligations (e.g. whitepapers), and the current status of their projects. Such details should be disclosed in the annotations of their financial statements. Furthermore, revenue generated from the sales of virtual assets must be recognized, and any changes to their obligations should be duly noted. Moreover, disclosure of the reserved amount of issued virtual assets and their intended usage plan is mandatory.Companies holding virtual assets must provide information regarding accounting policies, the total value of assets held, the reasons behind their holdings, and any gains or losses incurred. Additionally, holders are obligated to disclose risks associated with virtual assets and their potential impact.Virtual asset trading platforms, such as exchanges, are mandated to disclose not only their own virtual asset holdings but also those held on behalf of their customers. This disclosure should encompass detailed information about their accounting policies, the total value of assets under their custody, associated risks, and the involvement of third-party custodians. In particular, the platforms must indicate whether they treat customer assets under their custody as assets or liabilities and provide a clear rationale for such classification in the annotations of their financial statements.

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.

The South Korean financial authority will establish new policies and guidelines for token listing and provide admirable examples from past listing events for local exchanges to follow, according to local media outlet News1.  So far, fiat-to-crypto exchanges in Korea have been listing tokens on their platforms under a guideline issued by Digital Asset eXchange Alliance (DAXA) – a self-regulatory consultation group comprised of five major Korean crypto exchanges. The existing DAXA guideline outlines basic yet vague instructions, which have allowed exchanges to list tokens largely at their discretion.  However, the new guideline from the financial authority, expected to be released by this June, will mark the government’s first official manual on token listing. This is in line with the upcoming Virtual Asset User Protection Act, which will be effective in July. Photo by Hitesh Choudhary on UnsplashSetting clear guidelines for token listingsThe new guidelines are expected to include examples of past fraud detection and real-time monitoring cases which are deemed to have set precedents for the industry players. Moreover, the financial authority plans to distribute past exemplary cases of token listing as early as April, which is anticipated to set a model listing process and help local crypto exchanges adhere to the law and requirements.  This announcement comes after the local game company Wemade relisted its native token WEMIX on Korbit, one of DAXA's member exchanges, just a year after it was delisted on major exchanges due to its deviant practices in token issuance. The relisting of WEMIX has since raised concerns among crypto insiders about the lack of criteria regarding token listings. More refined token listing process As the crypto market's bullish trend continues, Bithumb and Coinone – the second and third-largest exchanges in Korea – are stepping up their efforts to speed up the listing of new coins. Industry experts expect these exchanges will double down on their efforts in screening and reviewing processes for tokens to align with the new guidelines in the future.  An official from the Korean Financial Intelligence Unit (FIU) said that while the anticipated listing process is not legally binding, it will definitely have a more profound impact on local crypto exchanges compared to the self-regulated DAXA guidelines.