India’s Jio Financial Services to Delve Into Blockchain

The Hong Kong Virtual Asset Consortium (HKVAC), a digital asset group in China's special administrative region, has announced modifications to its core cryptocurrency index, reshuffling the top contenders to the detriment of XRP, the payment solution token developed by Ripple Labs.Photo by Kanchanara on UnsplashSolana takes top 5 slotEffective as of this Friday, HKVAC will replace XRP with Solana (SOL) in its Top 5 Large Cryptocurrency Index, signaling a shift in the composition of its benchmark index. HKVAC is a collaborative effort between Hong Kong-based industry participants such as crypto exchanges and licensed ratings agencies. Its aim is to optimize the risk management capabilities of the crypto sector and in that way, assisting market participants including local regulatory bodies. Crypto exchange platform HTX, previously known as Huobi, became the first member of HKVAC in 2023. It was joined by iPollo, KuCoin, LK Venture, Nano Labs, Purise, Wealthking Investment, G-Rocket Global Accelerator, Hong Kong Data Infinity Technology and others in making up the organization’s membership. The HKVAC's Top 5 index reflects the global cryptocurrency ranking based on market capitalization, maintaining a pulse on the ever-evolving crypto landscape. However, beyond market cap, the digital asset group considers additional factors such as market valuation, investability and liquidity in its index rebalancing decisions. Solana’s growth and progressionSolana, currently ranked as the fifth-largest cryptocurrency, has been making substantial strides in the market. Despite the 2022 collapse of the FTX crypto exchange, which significantly impacted SOL's price, the cryptocurrency has made an impressive recovery. Over the past year Solana has surged by 315%. Presently, SOL boasts a market cap of $41 billion, securing its position in the top echelons of the cryptocurrency market. In contrast, XRP, the ousted cryptocurrency, has experienced a more modest price growth during the same period. As of the latest data, XRP holds the sixth position in the cryptocurrency ranking, with a valuation of $31 billion. The decision to remove XRP from the Top 5 index was met with a 3.9% decline in its value, settling at $0.57. XRP had moved within the Top 5 index in October of last year. It was added to the index alongside SHIB in 2023. At the time of its formation, HKVAC emphasized that market capitalization was one of the primary criteria incorporated within the evaluation, which extends to 30 cryptocurrencies. A re-evaluation is carried out each quarter on the basis of that market cap criterion. Crypto rating reshuffleThe HKVAC's reshuffling extends beyond the Top 5 index, impacting other leading cryptocurrencies. Notable changes include the removal of Filecoin (FIL), Binance USD (BUSD), Maker (MKR), Hedera (HBAR) and TrueUSD (TUSD) from the Global Large Cryptocurrency Index. These have been replaced by Near Protocol (NEAR), Internet Computer (ICP), Immutable (IMX), Optimism (OP) and Injective (INJ). Additionally, Avalanche (AVAX) is set to replace Tron (TRX) on the HKVAC Top 10 Global Large Cryptocurrency Index, effective this Friday. These adjustments come amid Hong Kong's ongoing efforts to bolster the cryptocurrency industry within the region. In December, the financial regulator in Hong Kong signaled its readiness to accept spot crypto exchange-traded funds (ETFs). This move aligns with the United States Securities and Exchange Commission's review of 11 spot bitcoin ETF applications, ultimately approved on Jan. 10.   

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Atomic Wallet Hacker Uses Lazarus Crypto MixerThe stolen cryptocurrency from the recent $35 million hack of Atomic Wallet is already being moved to a crypto mixer favored by North Korea’s notorious cyber-hacking group.Photo by Micha Brändli on UnsplashSinbad.ioAccording to UK-based crypto compliance analysis firm Elliptic, the funds have made their way to a crypto mixer used by Lazarus Group, a notorious hacker group that focuses on crypto heists which is believed to have direct ties with the North Korean government.On June 5, Elliptic’s Investigations Team revealed that it had traced the funds from the Atomic Wallet hack to the crypto mixer Sinbad.io. Lazarus had previously used the mixer to launder over $100 million in stolen crypto assets.While the exact amount sent to the mixer was not specified, Elliptic noted that the stolen funds were being exchanged for Bitcoin before undergoing obfuscation through the mixer. Additionally, Elliptic reported that Sinbad.io is likely a rebranded version of Blender.io, another mixer extensively used to launder funds by the Lazarus Group. Blender.io has been sanctioned by the US Treasury.Atomic Wallet hackThe hack of several user accounts on Atomic Wallet occurred on June 3, resulting in losses of up to $35 million. News of the issue broke with the following tweet from the project team (which has subsequently been deleted): “We have received reports of wallets being compromised. We are doing all we can to investigate and analyze the situation. As we have more information, we will share it accordingly.”In a follow-up tweet the next day, the team confirmed that it was investigating the matter with the assistance of a number of “leading security companies.”However, Atomic Wallet later downplayed the incident, stating that less than 1% of its monthly active users were affected. The project team was castigated by users for trying to present the hack as a minor incident. One user took to Twitter to call out the Atomic Wallet team for “having the nerve to come to the networks and say that only 1% of wallets were affected.”The Atomic Wallet project is based out of Tallinn, Estonia, having been founded in 2017. It claims to provide a non-custodial decentralized multi-currency crypto wallet. The product supports over fifty coins and two hundred tokens. It also offers atomic swaps between digital assets, while also supporting integrations with instant exchanges such as Changelly, ShapeShift, and others.Roland Säde, the Chief Marketing Officer of Atomic Wallet, assured users that the team is working tirelessly to recover the stolen funds. He emphasized the need to complete the investigation to develop a concrete plan.Despite the ongoing efforts, Säde urged victims to track the illicit transfers and report them to popular crypto exchanges. By doing so, it was thought that may hinder the scammers from exchanging the funds.Crypto hacking menaceLazarus Group hackers have been the bane of the crypto space in recent years. Elliptic released a report last month that identified Japan as having been the country most adversely affected by the North Korean hackers. It’s understood that the estimated $721 million in stolen crypto from Japan-based entities amounts to nearly nine times the value of North Korea’s exports based on 2021 data.While Atomic Wallet is directly reporting the incidents, Säde believes that having more individuals monitoring the hackers’ activities will make it more challenging for them to move the funds undetected. Unfortunately, Elliptic’s recent findings suggest that for many victims, it may already be too late to prevent further misuse of their stolen cryptocurrency.