Rising Cryptocurrency Arbitrage Transactions Raise Concerns in South Korea

Korbit, one of South Korea’s leading crypto exchanges, has recently conducted an education session on anti-money laundering (AML) for its employees, local tech media outlet ZDNet Korea reported.  Held in the office lounge of Korbit, the session was led by Hwang Seok-jin, an expert in financial crime and anti-money laundering regimes. A professor at the Graduate School of International Information Protection of Dongguk University, he has served as a compliance officer and a consultant at Digital Asset eXchange Alliance (DAXA), a group consisting of five leading cryptocurrency exchanges in South Korea.  Photo by Viacheslav Bublyk on UnsplashEmphasis on the Virtual Asset User Protection Act  Mr. Hwang informed Korbit’s employees about the upcoming Virtual Asset User Protection Act, effective July, highlighting guidelines for investor protection, prohibitions against unfair transactions and the financial regulators’ authority and oversight. The session especially focused on explaining the Virtual Asset User Protection Act, given that the Act would deeply influence many departments of Korbits ranging from the accounting and finance unit handling customer deposits to blockchain-related units responsible for the custody of virtual assets.  Korbit maintains a no-negotiation policy that bars projects from interacting with exchange employees prior to their tokens being listed. This policy enhances the transparency of Korbit’s evaluation process, ensuring that the exchange assesses projects impartially, without third-party influence or external pressures. After listing an asset, Korbit conducts quarterly risk assessments on all crypto assets traded on the platform. Additionally, it plans to adopt a stricter approach to internal controls to enhance customer protection, in line with the upcoming enactment of the Virtual Asset User Protection Act. 

Over Half of Leading Korean Conglomerates Are Venturing Into Web3 and BlockchainMore than half of South Korea’s conglomerates are ushering in the emerging era of Web3 in an attempt to seize new business opportunities presented by a decentralized internet that permits open access and sharing of resources as well as ownership of personal data.Photo by Abbe Sublett on UnsplashSurging interest among Korea’s biggest enterprisesAccording to a survey conducted by local news outlet E Today, 46 of Korea’s top 82 corporations as designated by the Fair Trade Commission (FTC) are pursuing ventures in Web3 and blockchain this year, including those related to non-fungible tokens (NFTs), security tokens, and logistics chains. The survey examined whether the corporations had issued coins, tokens, or NFTs; whether they had corporate divisions or subsidiaries dedicated to blockchain-related projects; and whether they had made investments in blockchain or digital asset-related companies as well as coin and token issuance projects. It was conducted remotely using publicly disclosed information and press releases.Of the 82 total companies, 48 are under the mutual investment restriction system, which prohibits independent corporations from investing their capital in the form of an exchange. Commercial law prohibits mutual stock holdings between parent companies and their subsidiaries in order to prevent a processive increase in company assets through mutual investments. Of those 48, the survey revealed that 32 are engaged in blockchain and Web3-related projects.Nearly 60.42% of the mutual investment restriction group and 48.78% of the total survey group were found to have become involved in the field by signing business deals with blockchain and digital asset-related companies or utilizing blockchain technology themselves.On the other hand, only seven corporations, or 8.54%, had directly issued digital assets or invested in related companies. On the other hand, 26 firms, or 31.71%, invested in NFT-related businesses.Navigating the path to Web3 adoptionHowever, although Web3 is gaining traction as the next generation of future innovation, it has not yet become the dominant trend as Web3 platforms have yet to attract a significant user base. This hindrance can be attributed to the ongoing crypto winter and strict financial regulations.Woo Jong-soo, Director of the Pohang University of Science and Technology’s (POSTECH) Blockchain Research Center and a professor at POSTECH’s Graduate School of Information and Communication, also pointed out that in order for blockchain to exert its influence as an innovative technology, it should be open to the public like Bitcoin. There will be limitations in implementing centralized private blockchains into corporate businesses, he said.But despite these challenges, major leading companies are still pushing their own Web3 and blockchain projects. “The current situation is not an ideal time for diving into Web3 and blockchain businesses, but everyone is quietly preparing while waiting for regulatory uncertainties to be resolved,” said an anonymous developer working at a major corporation.Notably, Park Hye-jin, a professor at the Seoul School of Integrated Sciences and Technologies, revealed that she had received separate Web3 business consultation requests from several teams under the same division of a particular corporation and that these teams were essentially unaware of each others’ ventures into the field. The corporation, which ostensibly announced that it had closed its business, also continues to request consultations, she claimed, highlighting the corporate world’s acknowledgment of Web3’s potential.“Individuals can now monetize and have control over their data, which big tech companies like Facebook and Instagram used to own,” Park explained. “The essence of Web3 is that it is ushering in an era where users have the ability to take initiative.”

Crypto vulnerability uncovered with $1B in digital asset exposureSecurity vulnerabilities in the validator infrastructure of InfStones, an established infrastructure provider, have been disclosed by Tel Aviv-headquartered cybersecurity firm dWallet Labs.Photo by Brett Jordan on UnsplashBlockchain network validator vulnerabilityIn a detailed Medium blog post published on Tuesday, dWallet Labs shed light on a series of vulnerabilities that, when exploited, could potentially allow attackers to gain full control, execute code and extract private keys from numerous validators on major blockchain networks. Cryptocurrencies such as ETH, BNB, SUI, APT and others were identified as at risk, with potential direct losses estimated to exceed one billion dollars.The vulnerabilities discovered by dWallet Labs opened the door for attackers to compromise the private keys of validators across multiple blockchain networks, putting over one billion dollars of staked assets at risk. In response to the findings, InfStones, a Web3 infrastructure platform, also released a statement on Tuesday acknowledging the potential threat. However, its representative, Darko Radunovic, disputed the figures provided by dWallet Labs in a statement sent to Cointelegraph. Radunovic stated that the vulnerabilities identified in the production environment account for below 0.1% of their active nodes launched to date, emphasizing that the impact would be limited to a small fraction of their operational nodes.According to InfStones, “237 instances were in scope, of which 212 instances were deployed for our development and testing purposes, and 25 freshly deployed instances in the production environment.”Mitigating steps takenThe company detailed the immediate actions taken to mitigate the vulnerabilities, including shutting down the affected ports, as well as rotating all credentials and keys within their platform. An internal review conducted by InfStones revealed no additional adverse effects. Notwithstanding that, the company took the additional step of hiring an external security firm to audit its systems and policies.Meanwhile, dWallet Labs Founder and CEO Omer Sadika shared his thoughts on the X platform as to how he believes such events should be handled. Sadika wrote:”The worst way to handle a cybersecurity vulnerability is not taking responsibility and lying. We were super open and transparent with the goal of eliminating the risk to web3. My take: it’s not about whether you are fully secure or not, because no one is, it’s about how you handle it and maintain the trust with your partners and customers.”The collaboration between dWallet Labs and InfStones sheds light on the ongoing challenges faced by the cryptocurrency industry in maintaining the security and integrity of blockchain networks. While vulnerabilities were identified and addressed, the incident underscores the importance of proactive security measures to safeguard the assets and data within the rapidly evolving landscape of digital assets.