Real-World Assets Emerge as a Beacon of Hope for the Blockchain Industry Amid Crypto Winter

CoinGecko expands data offering through Zash acquisitionCoinGecko, the Malaysian crypto data aggregator, has intensified its focus on the non-fungible token (NFT) market through the recent acquisition of London-headquartered Zash. The move forms part of CoinGecko’s initiative to enhance its API offering by providing comprehensive data on digital collectibles.Photo by Andrey Metelev on UnsplashSolving for crypto data fragmentationIn a statement published to its website on Wednesday, CoinGecko provided further details on its acquisition of the enterprise-grade NFT and blockchain analytics company. Separately CoinGecko Co-Founder Bobby Ong told Tech in Asia that the crypto data sector is fragmented. As a consequence, it leads to inefficiency as market participants are forced to navigate multiple crypto data APIs. It’s in an effort to solve that issue that Ong and CoinGecko have moved to acquire Zash.Zash Co-Founder and CEO Parit Patel expressed optimism about the evolving nature of NFTs and their potential to unlock new use cases globally, creating value for both companies and consumers. The company plans to introduce new services derived from the acquisition by the second quarter of 2024.Enriched data offeringIn its own statement, CoinGecko emphasized its commitment to offering more NFT-related metrics. The acquisition aims to enrich CoinGecko’s data offerings with information such as metadata, historical trades and lending data related to NFTs. The specific financial details of the deal were not disclosed.With the integration of Zash, users can expect access to a broader range of data across multiple blockchain networks, including Ethereum, Polygon, BNB Chain (formerly Binance Smart Chain), Bitcoin Ordinals and Solana. The extended services will cover NFT lending information indexing various marketplaces, such as Blend, X2Y2 and NFTfi.In reflecting on the acquisition, CoinGecko Co-Founder TM Lee considered the move in terms of the ongoing process of asset tokenization. Taking to the X platform, Lee wrote:“Any asset that can be tokenized, will be tokenized. Like tokens, NFT is a core primitive to the crypto economy stack. We’ve been building http://coingecko.com/nft earlier even in the bear market and I’m excited on possibilities within the NFT industry with @zash_api joining us!”Monitoring wash tradingOne notable feature introduced through Zash is the ability for users to monitor wash trading, an illegal form of market manipulation that gives the false impression of market activity. CoinGecko clarified that this feature would be available for “major collections” minted on Ethereum.Wash trading, involving the simultaneous buying and selling of assets, has been associated with the NFT bubble of 2022. Blockchain forensic firm Chainalysis reported that over 100 profitable wash traders collectively earned nearly $9 million from this activity. However, it noted that the majority of NFT wash traders have been unprofitable, resulting in losses exceeding $416,984 from more than 150 wash trades.While the NFT market has faced challenges, with total sales currently at $80.8 million, significantly lower than the peak in August 2021 when daily sales exceeded $2 billion, CoinGecko’s strategic move positions the company to provide users with enhanced tools for assessing and ranking their cryptocurrency holdings. Established in 2014, CoinGecko operates as a platform offering comprehensive data and information on digital currencies, contributing to the quantitative evaluation of cryptocurrency portfolios.

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Korea to Ban Virtual Asset Deposit Services from Next JulyDuring a recent criminal law seminar held at the Supreme Prosecutors’ Office, Park Min-woo, Director of the Capital Markets Bureau at the South Korean Financial Services Commission (FSC), underscored that starting next year, virtual asset service providers (VASPs) will no longer be permitted to offer deposit and management services for virtual assets. That’s according to a report by local crypto news outlet Digital Asset.This is seen as a response to the suspension of virtual asset deposits and withdrawals carried out by virtual asset yield platforms Haru Invest and Delio a few months ago.Photo by Mathew Schwartz on UnsplashLegal backgroundDirector Park referred to Article 7, Paragraph 2 of the Virtual Asset User Protection Act, clarifying that the intention behind this provision is to ensure that VASPs have the ability to fulfill asset withdrawal requests, even in the scenario where all their customers make such requests. This Act is scheduled to go into effect in July of next year, and Article 7 prohibits VASPs from entrusting customer assets to third parties.Deposit service providers receive cryptocurrency deposits and then distribute the resulting yields to their customers. In a bull market, these entities can manage yields on their own. However, in a flat or bear market, these asset managers may face challenges in paying yields unless they can generate profits by handing over customer assets to external custodians.Signs of giving upIn fact, centralized finance (CeFi) company HeyBit made an announcement last month, stating that it will discontinue its virtual asset deposit service starting from October 2. They cited this specific provision as the reason for their decision.Fraud chargesBoth Haru and Delio have been indicted by the Seoul Southern District Prosecutors’ Office on fraud charges.As an unregistered VASP, Haru suspended its deposit and withdrawal services on multiple occasions in June, causing substantial financial losses to numerous investors. This suspension was triggered by significant losses incurred at B&S Holdings, another unregistered entity to which Haru had entrusted virtual assets.Similarly, Delio, although registered, entrusted a considerable amount of virtual assets to Haru and Traum Info Tech but was unable to recover them.