Upbit Launches “Experimental Lab” for Users to View Investment Performance

Atomic Wallet Hacker Uses Lazarus Crypto MixerThe stolen cryptocurrency from the recent $35 million hack of Atomic Wallet is already being moved to a crypto mixer favored by North Korea’s notorious cyber-hacking group.Photo by Micha Brändli on UnsplashSinbad.ioAccording to UK-based crypto compliance analysis firm Elliptic, the funds have made their way to a crypto mixer used by Lazarus Group, a notorious hacker group that focuses on crypto heists which is believed to have direct ties with the North Korean government.On June 5, Elliptic’s Investigations Team revealed that it had traced the funds from the Atomic Wallet hack to the crypto mixer Sinbad.io. Lazarus had previously used the mixer to launder over $100 million in stolen crypto assets.While the exact amount sent to the mixer was not specified, Elliptic noted that the stolen funds were being exchanged for Bitcoin before undergoing obfuscation through the mixer. Additionally, Elliptic reported that Sinbad.io is likely a rebranded version of Blender.io, another mixer extensively used to launder funds by the Lazarus Group. Blender.io has been sanctioned by the US Treasury.Atomic Wallet hackThe hack of several user accounts on Atomic Wallet occurred on June 3, resulting in losses of up to $35 million. News of the issue broke with the following tweet from the project team (which has subsequently been deleted): “We have received reports of wallets being compromised. We are doing all we can to investigate and analyze the situation. As we have more information, we will share it accordingly.”In a follow-up tweet the next day, the team confirmed that it was investigating the matter with the assistance of a number of “leading security companies.”However, Atomic Wallet later downplayed the incident, stating that less than 1% of its monthly active users were affected. The project team was castigated by users for trying to present the hack as a minor incident. One user took to Twitter to call out the Atomic Wallet team for “having the nerve to come to the networks and say that only 1% of wallets were affected.”The Atomic Wallet project is based out of Tallinn, Estonia, having been founded in 2017. It claims to provide a non-custodial decentralized multi-currency crypto wallet. The product supports over fifty coins and two hundred tokens. It also offers atomic swaps between digital assets, while also supporting integrations with instant exchanges such as Changelly, ShapeShift, and others.Roland Säde, the Chief Marketing Officer of Atomic Wallet, assured users that the team is working tirelessly to recover the stolen funds. He emphasized the need to complete the investigation to develop a concrete plan.Despite the ongoing efforts, Säde urged victims to track the illicit transfers and report them to popular crypto exchanges. By doing so, it was thought that may hinder the scammers from exchanging the funds.Crypto hacking menaceLazarus Group hackers have been the bane of the crypto space in recent years. Elliptic released a report last month that identified Japan as having been the country most adversely affected by the North Korean hackers. It’s understood that the estimated $721 million in stolen crypto from Japan-based entities amounts to nearly nine times the value of North Korea’s exports based on 2021 data.While Atomic Wallet is directly reporting the incidents, Säde believes that having more individuals monitoring the hackers’ activities will make it more challenging for them to move the funds undetected. Unfortunately, Elliptic’s recent findings suggest that for many victims, it may already be too late to prevent further misuse of their stolen cryptocurrency.

South Korea’s Financial Supervisory Service (FSS) has initiated on-site consultation services for virtual asset businesses to help them comply with the upcoming Virtual Asset User Protection Act (Virtual Asset Act), which is set to be effective in July. This news was reported yesterday by local media outlet News1. Photo by Hunters Race on UnsplashSupporting VASPs in preparation for the Virtual Asset ActThe consultation services offered by the FSS are fundamentally different from the on-site inspections that have been conducted by the Financial Intelligence Unit (FIU).  Until now, the FIU has been conducting on-site inspections to ensure virtual asset service providers (VASPs) have adequate anti-money laundering (AML) systems in place and comply with the Act on Reporting and Using Specified Financial Transaction Information (the Financial Transaction Information Act). While the FIU has been tasked with conducting inspections, the FSS’s latest on-site consultation services are dedicated to supporting businesses in developing new monitoring systems, which would enable them to prevent unfair transactions ahead of the implementation of the Virtual Asset Act. The FSS has already begun providing consultation services, with the local crypto exchange Upbit being its first client last week. An insider of FSS stated that the schedule for the on-site consultation will be arranged in advance for those seeking the service.  Demand for new FDSDuring a roundtable meeting with VASP CEOs held on Feb. 7, Lee Hyun-deok, the director of the Virtual Asset Regulatory Bureau under the FSS, emphasized the importance of coming up with a new fraud detection system (FDS) specifically designed to block unfair transactions. Most of the current FDSs within local crypto exchanges are focused on AML.  Unlike the Financial Transaction Information Act which mainly focuses on AML, the Virtual Asset Act focuses on punishing unfair trading practices that exploit abnormal price fluctuation or undisclosed information. The FSS recommends that VASPs implement a new system preventing such practices by April, as the Virtual Asset Act’s enactment is just around the corner.  An FSS insider said there is a high chance that VASPs will get the consultation service multiple times on various themes since a lot has to be done before the Act takes effect in July, adding that this consultation is to encourage VASPs to comply with the law rather than to conduct inspections on them. 

Bybit Denies Plans to Leave UK MarketReporting related to Dubai-based crypto exchange Bybit had suggested in recent days that the firm was leaving the UK market. However, the company has since responded to state that it has strongly reaffirmed its commitment to the UK market and its dedication to collaborate with regulators to find mutually agreeable solutions.Photo by Marcin Nowak on UnsplashCompany clarificationThat speculation had arisen in the first place on the basis of difficulties the business may experience as a consequence of the upcoming implementation of new strict marketing rules for crypto firms in the UK. Taking to social media on Thursday, the company stated:”At Bybit, we consider the UK to be a highly important market for the advancement of crypto and blockchain technologies. Our commitment to this market is unwavering, and we intend to maintain our presence in the UK for the long term. Meanwhile, we are dedicated to working collaboratively with regulators upon the new law to ensure the responsible and secure development of the industry.”The reports published earlier in the week had fueled speculation that Bybit might exit the UK market, along with other jurisdictions characterized by rigorous crypto regulations. The concerns primarily centered around the UK’s recently introduced financial promotion rules, designed to bolster customer protection and enhance understanding of crypto investments.Ben Zhou, Co-Founder and CEO of Bybit, commented on the situation, underscoring the exchange’s unwavering commitment to regulatory compliance. Zhou confirmed that ongoing discussions with UK regulators aimed to find mutually beneficial solutions, aligning the interests of all stakeholders involved. He emphasized Bybit’s commitment to keeping its community well-informed about the progress of these discussions.Regulatory changesThe recent move by Bybit is in direct response to regulatory changes introduced by the UK’s Financial Conduct Authority (FCA) in June. These changes were implemented to improve transparency and enhance customer protection within the crypto sector, with a particular focus on ensuring that UK customers have a clear understanding of the risks associated with crypto investments. The FCA also outlined various pathways for asset promotion, including those involving FCA-authorized personnel or crypto companies registered with the FCA.Exchanges have been very much under the cosh in 2023 when it comes to regulatory pressures. Bybit, accompanied by MEXC Global, Bitforex, and Bitget, were all issued with a warning by the Japanese regulator, the Financial Services Agency (FSA), in April on the basis that the exchanges were running unregistered crypto asset exchange business operations within Japan. In May Binance left the Canadian market.In the months that followed, the leading global crypto exchange was forced out of markets in Germany, Belgium, The Netherlands, and Cyprus due to regulatory pushback. In May Seychelles-based Huobi was ordered to cease its business offering in Malaysia by the local regulator.Moving forwardDespite these setbacks, Bybit has been making efforts to move the business forward. In May it obtained approval from the authorities in Kazakhstan to offer its services within the country. Some weeks prior, it announced that it had chosen Dubai as the global exchange’s headquarters.The firm also introduced TradeGPT recently, an AI-powered educational tool designed to enrich traders’ engagement with the crypto market.