Chinese Official Gets Life Sentence on Crypto Mining-Related Corruption Charges

On Wednesday, the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong launched investigations at six premises controlled by Worldcoin, the biometric cryptocurrency project established by Sam Altman, the CEO of OpenAI. Potential personal data privacy risksIn a statement, the Privacy Commissioner expressed serious concerns about potential risks to personal data privacy. The PCPD executed warrants as part of the inquiry into Worldcoin's identity verification project, particularly focusing on the use of iris-scanning orbs for identity verification. The PCPD urged Hong Kong residents to consider the implications of Worldcoin's biometric data collection and emphasized the importance of evaluating the legitimacy of such data collection. The Commission also advised individuals to inquire about the purpose of data collection, the intended use of the data, the classes of entities with access to the data, the retention period of biometric data and the safety measures implemented to protect sensitive information. "The PCPD is concerned that the operation of Worldcoin in Hong Kong involves serious risks to personal data privacy, and believes that the collection and processing of sensitive personal data by the relevant organization may be in contravention of the requirements of the Personal Data (Privacy) Ordinance," stated the privacy watchdog. The Commission highlighted that any personal data controlled by Worldcoin must be collected for a lawful purpose related to the project's function or activity, with the information collected from users' irises deemed sensitive according to regulatory guidelines.Photo by Harpreet Singh on UnsplashGlobal scrutinyWorldcoin, which commenced operations in 2021 and officially launched in July 2023, has faced regulatory scrutiny in various countries due to privacy concerns. As of December 2023, Worldcoin reported that over 5 million people had created accounts using their identities. However, the project's approach to identity verification through iris scanning has triggered investigations and actions by regulators. Notably, the project suspended services in Kenya and halted iris scans in India in response to regulatory challenges.  The company’s activities in the French and Brazilian markets have been suspended. Last year the UK’s Information Commissioner’s Office said that it would make further enquiries into the company’s activities. Meanwhile, the German data watchdog has been investigating Worldcoin since 2022. In an effort to clarify the efforts the company is making to achieve compliance across international jurisdictions where data privacy is concerned, Worldcoin recently published a blog post on the subject. Within it, the company states that it “is designed to be fully compliant with all laws and regulations governing data collection and data transfer." Despite its ongoing regulatory challenges, Worldcoin CEO Alex Blania remains steadfast in advancing the project's mission, stating recently:"We race toward billions of users as fast as we possibly can."  The project closed out 2023 by expanding into Singapore. The privacy concerns surrounding Worldcoin underscore the growing importance of balancing technological innovation with robust data privacy regulations to ensure the protection of individuals' sensitive information.

The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an advisory to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks. The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users' wallets without proper authorization.Photo by Junrui Wu on UnsplashDrainer-as-a-service threatOf particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider. The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers. Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim's system, enabling hackers to withdraw funds without additional authorization. MS Drainer and Inferno DrainerWhile no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023. Last month, Singapore-based cyber security firm Group-IB produced a report concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November. In December, the Pink Drainer hacking group notched up another victim, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer reported that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days. Hardware walletsTo counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers. In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem. As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.  

Hong Kong Urged to Issue HKD StablecoinA new policy proposal is urging the Hong Kong government to take a bold step by issuing its own stablecoin, HKDG, pegged to the Hong Kong dollar. The aim is to compete with established stablecoins like USDT and USDC, according to a paper co-authored by notable experts in the field.The proposal, co-authored by Wang Yang, Vice Chancellor of the Hong Kong University of Science and Technology and Chief Scientific Advisor of the Hong Kong Web3 Association, angel investor Cai Wensheng, BlockCity founder Lei Zhibin, and Ph.D. student Wen Yizhou, stresses the significance of stablecoins as a link between traditional finance and the digital economy.Photo by Chapman Chow on UnsplashHKD stablecoin benefitsThe authors believe that a Hong Kong Dollar-pegged stablecoin can enhance financial inclusiveness, improve transaction efficiency, reduce costs, strengthen payment systems, and boost Hong Kong’s fintech capabilities.The experts argue that the current plan of allowing private institutions to issue stablecoins is not ambitious enough and may result in limited market share. They draw a comparison with Singapore’s XSGD stablecoin, issued by Xfers, which only has a market cap of $65 million, compared to the combined market capitalization of over $110 billion for USDT and USDC. With Hong Kong’s foreign exchange reserves surpassing $430 billion as of March, an HKDG stablecoin backed by the government would offer higher credibility and lower risk.Private vs. public issuanceWhile the proposal acknowledges potential risks, such as legal and regulatory challenges, technical risks, and short-term exchange rate fluctuations, it argues that government-issued HKDG would bear lower risks compared to stablecoins issued by private institutions. The authors assert that HKDG would benefit from government regulation and the transparency provided by blockchain technology.Furthermore, the paper suggests that HKDG could aid in Hong Kong’s de-dollarization efforts and challenge the dominance of the US Dollar in the crypto ecosystem. It is believed that HKDG could provide additional liquidity for government investment projects, facilitate the digitization of traditional assets, foster financial innovation and competitiveness, and increase transparency.Recent months have seen Hong Kong demonstrate its intention to establish itself as a global hub for the crypto industry. To support this, a Web3 task force has been set up to cultivate a thriving ecosystem in the region.There has been plenty of activity of late relative to stablecoin development in Asia. At the end of May, Hong Kong-based qualified custodian and trust company First Digital Trust, announced plans to introduce a US dollar stablecoin, issued and regulated in Hong Kong. Last month it emerged that Japan’s largest bank, Mitsubishi UFJ Financial Group, Inc. (MUFG), is in discussions regarding the issuance of stablecoins on its blockchain network.Competing internationallyIssuing a government-backed stablecoin could be a transformative move for Hong Kong’s fintech landscape. By leveraging its substantial foreign exchange reserves and embracing blockchain technology, Hong Kong could create a stablecoin that not only competes with established players but also promotes financial inclusiveness and strengthens its position as a fintech leader.With the potential benefits appearing to outweigh the identified risks, it still remains to be seen whether the Hong Kong government will adopt this proposal and pave the way for an HKDG stablecoin in the near future.