Bitget Adopts Stricter KYC Measures in Line with Global Regulations

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Krafton and Naver Z Unveil a Metaverse Joint Venture ‘Overdare’Krafton, the developer behind the popular shooter game PlayerUnknown’s Battlegrounds (PUBG), made an announcement on Thursday regarding its collaboration with augmented reality company Naver Z for a metaverse platform project. The official name of their joint venture has been revealed as “Overdare.” Furthermore, its forthcoming metaverse service, previously referred to as Migaloo, will also be rebranded under the name Overdare.Photo by Tima Miroshnichenko on PexelsInvestment breakdownThe total investment in the joint venture amounts to KRW 48 billion (approximately $36 million), with Krafton’s anticipated purchase price standing at KRW 40.8 billion and Naver Z’s expected purchase price at KRW 7.2 billion. Following the acquisition, Krafton will hold an 85% stake in the joint venture, while Naver Z will possess the remaining 15%.Meaning behind ‘Overdare’The company has chosen the English word Overdare to convey two meanings–“dare too much” and “over there,” which has a phonetic resemblance. Through this name, the joint venture aspires to establish itself as a pioneer in the realm of interactive user-generated content (UGC) platforms. Simultaneously, its service aims to provide a place where users can freely and fearlessly express themselves.As a mobile UGC platform, Overdare offers users the ability to craft games of diverse genres, including action RPGs, sports games, and shooting games. Leveraging the power of generative artificial intelligence and the advanced capabilities of Unreal Engine 5, a renowned video game engine, the platform facilitates the streamlined creation of top-notch content. Beyond game development, users can immerse themselves in a wide array of social activities, ranging from personalizing their avatars to engaging in lively conversations.C2E systemOverdare has adopted a create-to-earn (C2E) system within the metaverse, empowering creators to produce their own content, which users can then purchase and own. The trading of these creations is facilitated through non-fungible tokens (NFTs) and blockchain technology. Every transaction that takes place within the metaverse is recorded on the blockchain, and creators are duly compensated based on these transaction records. This system enhances the transparency of transactions and settlements.Compensation in USDCIn pursuit of this vision, Overdare has selected Settlus, a Cosmos-based blockchain developed by Krafton’s subsidiary of the same name, as its mainnet. Settlus has been dedicated to licensing creators’ intellectual property through NFTs on Web2 platforms. As part of this ecosystem, creators have the flexibility to receive compensation in USDC, the US dollar-pegged stablecoin issued by crypto company Circle.Overdare has its sights set on a soft launch of its service in December, followed by the official global release planned for the first half of next year.

Bitget Exec Speaks to Utility of Enhanced KYCCrypto continues to undergo significant transformation as regulatory authorities across Asia tighten their grip on the industry. In response to these regulatory changes, Seychelles-headquartered Bitget has joined KuCoin and OKX, which have recently bolstered their Know Your Customer (KYC) measures to ensure compliance and safeguard their operations.In a recent interview with Cointelegraph, Bitget Managing Director Gracy Chen spoke to the utility of KYC measures, stating that KYC is useful in filtering out illegitimate users, particularly those engaged in activities such as money laundering.Photo by Pixabay on PexelsMeeting Asian regulatory requirementsThe Seychelles-based exchange with ties to China and Singapore recently announced updates to its KYC protocols. These changes come in the wake of the Monetary Authority of Singapore’s (MAS) directives, which advise financial institutions, including cryptocurrency exchanges, to implement robust risk management procedures. The MAS has taken a stringent stance, shutting down certain digital payment token service providers to prevent them from facilitating lending and staking activities by retail customers.Starting from October 1, Bitget will require users who have not completed level 1 KYC verification to be restricted from creating new trading orders. This move aims to ensure that users comply with the newly updated guidelines and maintain the integrity of the exchange’s operations.Following industry peersKuCoin and OKX, two other prominent exchanges which, like Bitget, have their corporate headquarters in Seychelles and a strong presence in Asia, have also revamped their KYC policies. While KuCoin initially introduced KYC in 2018, the exchange has strengthened its identity verification procedures, requiring users to upload documents and complete face checks.Furthermore, in July, it announced a mandatory KYC requirement, in line with anti-money laundering (AML) regulations. While the mandatory KYC requirement is already in force, the other changes are set to take effect at the end of the month.OKX, on the other hand, has implemented stringent requirements, including the submission of a government-issued ID selfie for users to access all its services. The exchange recently set a deadline for service users to complete KYC.Bitget’s Chen highlighted that its decision to embrace KYC measures was driven by a commitment to serving the market responsibly. She acknowledged that while some users may have reservations about KYC, it is a necessary step to maintain the integrity of the exchange and prevent illicit activities. Speaking at the fringes of the firm’s EmpowerX Summit in Singapore, Chen said:“I’m pretty sure if the user is a financially healthy user, such as, like, if they’re not doing something illegitimate, such as money laundering, they should be pretty comfortable with the KYC process.”Tightening regulationThe tightening of regulations in Asia is not limited to Singapore alone. Japan has also taken steps to enhance anti-money laundering measures related to cryptocurrency transactions, responding to international calls for stricter oversight. Additionally, South Korea’s Financial Services Commission (FSC) has announced plans to require companies to disclose details about their cryptocurrency holdings, expected values, and related business models in their financial statements, aligning crypto accounting with conventional financial reporting.These regulatory developments signify a broader trend in the region, with cryptocurrency service providers proactively adapting to the changing landscape. As governments and regulatory authorities take steps to address the potential risks associated with cryptocurrencies, exchanges are prioritizing compliance to ensure their longevity and continued growth.