Korea’s Intragovernment Group Launched to Thwart Crypto-Related Crimes

Zettai Pte Ltd., the Singapore-based holding company that controls Indian crypto exchange WazirX through its subsidiary Zanmai India, has filed an application for a moratorium with the Singaporean High Court, under section 64 of the Insolvency, Restructuring and Dissolution Act 2018. Six months requestedIn the filing (HC/OA 861/2024), the company has pleaded with the court to be granted a six-month moratorium, which would give the firm the space and time needed to restructure its liabilities. The company laid out details of its moratorium application in a blog post published to its website on August 28. The firm outlined that a moratorium represents “ the most efficient way to address users’ cryptocurrency balances on the Platform and facilitate recovery for users.” An automatic moratorium of 30 days has effectively been granted as a consequence of the application itself, and it is up to the court if it approves the six-month moratorium that is being sought. A date for the hearing of that matter has yet to be scheduled.Photo by Palu Malerba on Pexels$234 million hack falloutWazirX has been dealing with the fallout from a $234 million hack which occurred in July. One key entity that is owed funds is Indian crypto app CoinSwitch. In an effort to get its funds back, the company has sued WazirX. Taking to the X social media platform, CoinSwitch outlined why it felt the need to take legal action. It stated: "From the day of the incident, we have tried to be in constant touch with the WazirX team, seeking recovery of the funds that are stuck on their exchange. However, our efforts have not come to fruition." In a follow-up tweet, CoinSwitch assured its own users that its exposure to WazirX has no impact on user balances. The company has WazirX exposure that amounts to 2% of its overall user funds. That exposure is reduced further if WazirX’ claim that only ERC-20 tokens were affected is taken on board, accounting for 1% of CoinSwitch user deposits. White KnightWazirX co-founder Nischal Shetty spoke to the notion of a “white knight” in an affidavit submitted under the Zettai name to support the application. He outlined that WazirX is in talks with 11 crypto exchanges and has signed three non-disclosure agreements (NDAs). The company has also received offers for financing and for partnering with Zettai, the WazirX parent company. WazirX has outlined that it has set aside $12 million in digital assets to cover legal and associated costs that the company anticipates incurring as part of its restructuring efforts. Matters are further compounded by the fact that a cloud hangs over the ownership of the company. Shetty has claimed that he is no longer an owner of the exchange. In 2022, he wrote that Binance had acquired WazirX. Around the same time frame, Binance’s Changpeng Zhao (CZ) outlined that Binance didn’t control WazirX systems.  India’s economic intelligence agency, the Enforcement Directorate, has claimed in the past that Shetty has gone out of his way to obscure the ownership structure by way of a complex chain of companies in Singapore.

The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an advisory to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks. The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users' wallets without proper authorization.Photo by Junrui Wu on UnsplashDrainer-as-a-service threatOf particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider. The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers. Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim's system, enabling hackers to withdraw funds without additional authorization. MS Drainer and Inferno DrainerWhile no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023. Last month, Singapore-based cyber security firm Group-IB produced a report concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November. In December, the Pink Drainer hacking group notched up another victim, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer reported that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days. Hardware walletsTo counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers. In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem. As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.  

OKX is set to compensate users after its native exchange token, OKB, experienced a rapid 48% flash crash on Tuesday. OKB price fluctuationThe crash occurred within a brief three-minute window, triggered by a series of liquidations resulting from an abnormal price fluctuation. During the event, OKB's diluted market capitalization plummeted by $6.5 billion. At around 9 a.m. GMT on Tuesday, the price of OKB dropped from $46.80 to $25.10, representing a 48% decrease within 15 minutes. However, the token has since recovered, currently trading at $47.63 at the time of writing. The crash led to the triggering of liquidations for large leverage positions, causing a cascading effect on pledged loans, leverage transactions and cross-currency transactions.Photo by Nicholas Cappello on UnsplashCompensation planOKX responded promptly, pledging to fully compensate users for any additional losses incurred due to abnormal liquidation. The exchange aims to launch a specific compensation plan within the next three days, taking into account users who engaged in on-chain trades. In a statement on Tuesday, the platform suggested that it is committed to enhancing "margin position tier rules, risk management controls and liquidation mechanism" to prevent similar issues in the future. The flash crash coincided with a day of notable price swings across cryptocurrency markets, partly driven by the Grayscale Bitcoin Trust's (GBTC) sale of bitcoin to meet investor redemption demands on its exchange-traded fund (ETF). Additionally, the bankrupt crypto exchange FTX has been selling nearly $1 billion worth of GBTC ETF shares recently, further contributing to market volatility. Focusing on complianceOKX has been actively focusing on regulatory compliance in recent times. On Dec. 29, the exchange announced the delisting of several privacy coins, including Monero (XMR), Zcash (ZEC), Dash (DASH) and Horizen (ZEN). Subsequently, on Jan. 2, the platform introduced additional requirements for United Kingdom users to comply with the new Financial Conduct Authority (FCA) regulations, including the mandatory completion of risk assessment questionnaires before engaging in trading activities. Flash crashes are a common occurrence in cryptocurrency markets, often attributed to thin liquidity distributed across multiple venues. The 2% market depth for OKB indicates that a sell order exceeding $224,000 could potentially trigger another price cascade. Notwithstanding that, oftentimes it can be difficult to pinpoint the precise reason for a flash crash. In 2021 global crypto exchange Kraken experienced a flash crash that saw token prices drop by in excess of 50% over the course of one hour before recovery was achieved. While some suggested it was caused by a technical glitch, Kraken founder Jesse Powell dismissed that notion, pointing instead to the possibility of a large-scale sell-off by a service user. Despite this recent challenge, OKB remains a significant player in the cryptocurrency space, boasting a market cap of $2.8 billion, making it the fourth-largest exchange token in circulation, according to CoinGecko.