Korea Investment and Securities Completes the Construction of Security Token Infrastructure

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.Photo by FlyD on UnsplashHot-wallet breach hits 24 tokensThe exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP). According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance. This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1. Authorities focus on Lazarus’ involvementFinancial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported. Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case. Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea. Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline. Dunamu, Naver set $6.8B growth planThe security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users. The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 2.54 to 1. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

Philippines breaks new ground in first-ever tokenized bonds saleThe Philippines is set to offer the country’s first tokenized treasury bonds, a novel way of issuing debt securities using blockchain technology.Photo by Mara Rivera on Unsplash$179 million tokenized bond issuanceAccording to a report by Bloomberg on Thursday, the Bureau of the Treasury announced that it will issue 10 billion pesos ($179 million) of one-year tokenized bonds next Monday after canceling the conventional auction scheduled for the same day. The bonds will be issued by the Development Bank of the Philippines, a state-owned entity, together with the Land Bank of the Philippines.The tokenized bonds will be sold to institutional investors at a minimum denomination of 10 million pesos, with increments of 1 million pesos. The bonds will have a one-year validity, maturing in November 2024. The treasury bond interest rate has yet to be determined and will be confirmed on the date of issuance.Deputy Treasurer Erwin Sta said that the government is exploring the potential of tokenizing real-world assets and bonds and will “continue to study the technology and test how far we can take it.”Tokenization is the process of converting physical or digital assets into digital tokens that can be stored, transferred and traded on a blockchain network. Tokenization can offer several benefits, such as lower costs, faster transactions, greater transparency and enhanced security.Asian surge in tokenizationThe Philippines is not the only Asian country that is experimenting with tokenized bonds. This latest bond tokenization project follows hot on the heels of a similar move in Singapore. Earlier this week, British banking conglomerate Standard Chartered, through its Singapore-based fintech investment subsidiary SC Ventures, unveiled a new platform called Libeara. Libeara is gearing up to offer the first-ever tokenized Singapore-dollar government bond fund.In February, Hong Kong issued $100 million of tokenized green bonds under its Green Bond Programme, using Goldman Sachs’ tokenization protocol. The tokenized green bonds, a first-of-its-kind issuance, have a one-year validity and aim to support environmental projects in the region.Authorities in Singapore have also launched a series of pilots on tokenizing real-world assets in collaboration with JPMorgan, DBS Bank, BNY Mellon and Apollo, an investment firm. The pilots will test the feasibility and efficiency of tokenizing assets such as equities, bonds and funds. The United Arab Emirates (UAE) partnered with HSBC to conduct the tokenization of bonds as well.The tokenization of real-world assets is not limited to Asia. Israel’s Tel Aviv stock exchange completed a proof-of-concept for tokenizing fiat and government bonds, demonstrating the potential of blockchain technology to transform the capital markets.The tokenization of real-world assets using blockchain technology is a growing trend among governments and financial institutions. According to the Boston Consulting Group, tokenized assets could reach a market capitalization of $16 trillion by 2030. By issuing tokenized bonds, the Philippines is joining the ranks of the pioneers in this field, opening up new possibilities and opportunities for the crypto industry and the economy as a whole.

Japan’s Financial Services Agency (FSA), a government agency and financial regulator responsible for overseeing banking, securities and exchange, has ordered both Apple and Google to remove specified unregistered crypto exchange apps from the Japanese versions of their app stores.Photo by Louie Martinez on UnsplashFive exchange apps specifiedIt is understood that the request was made at the beginning of this month, with the regulator specifically calling for the removal of the ability of Japanese consumers to download apps related to Bybit, MEXC Global, LBank Exchange, KuCoin and Bitget. In response to a query from The Block, Bitget Chief Legal Officer (CLO) Hon Ng said that the company is “aware of the issue and sincerely apologize for any inconvenience caused by the temporary removal of the Bitget app from the iOS App Store in Japan." The Bitget CLO went on to state that the company is working with Apple and regulators to resolve the matter. News of the regulator’s request emerged via a report published by Japanese financial media platform Nikkei on Feb. 7.  Apple had removed the apps from its App Store on Feb. 6. Reclassification of digital assets as securitiesA subsequent report by Nikkei on Feb. 10 suggests that the FSA is considering classifying digital assets as financial products akin to securities. The objective of the move is to protect Japanese investors as it would mean increased disclosure requirements from those that offer crypto-related investment products. Last August, FSA Commissioner Hideki Ito told Bloomberg that any decision to approve crypto-linked exchange-traded funds (ETFs) requires “careful consideration.” At the time Ito said that many people believe that digital assets “do not necessarily contribute to the wealth creation of the Japanese people in a stable and long-term manner.” The Japanese have been far more cautious in their approach to virtual assets by comparison with other Asian centers such as Hong Kong, which had approved spot Bitcoin and Ether ETFs some time ago. It appears that Japan’s FSA is wary of the volatility of cryptocurrencies and risks associated with the nascent assets. It’s understood that the FSA will announce crypto policy reforms by June 2025. Legislative amendments would then follow in the following parliamentary session in 2026. The change would mean a lifting of the current prohibition related to crypto ETFs. Another aspect likely to be reformed is taxation as it relates to crypto. It’s thought that a reduction from the existing 55% tax rate on crypto to 20% is on the cards. This is not the first occasion when a regulator has leaned on Apple and Google to cut off access to crypto exchange apps. In January 2024 Apple India blocked access to eight exchanges which had been subject of a show-cause notice from India’s Financial Intelligence Unit (FIU). Following a seven month ban, access to the Binance app was subsequently restored once it had come back into compliance in India. In April 2024 the Securities and Exchange Commission (SEC) in the Philippines had ordered both Google and Apple to remove the Binance app from their app stores on the basis that it posed a risk to Filipino investors at the time.