Midas Investments Founder Launches Locus Finance

Singapore’s Regulator Imposes 9-Year Ban on 3AC FoundersSingapore’s central bank and financial regulator, the Monetary Authority of Singapore (MAS), has handed down a nine-year prohibition order to Kyle Davies and Su Zhu, co-founders of the failed crypto hedge fund Three Arrows Capital (3AC).Photo by Swapnil Bapat on UnsplashSevere restrictionsThe penalty relates to alleged violations of the city-state’s securities laws. The prohibition order came into effect on Wednesday, carrying severe restrictions for Davies and Zhu.During this nine-year period, Davies and Zhu are prohibited from engaging in any regulated activities in Singapore. They are also barred from managing, serving as directors, or holding substantial shares in any capital market services business within the territory of Singapore.Loo Siew Yee, the Assistant Managing Director of Policy, Payments, and Financial Crime at MAS, emphasized the seriousness of the violations in a statement released by the central bank on Thursday. Yee stated:“MAS takes a serious view of Mr. Zhu’s and Mr. Davies’ flagrant disregard of MAS’ regulatory requirements and dereliction of their directors’ duties.” She further asserted that MAS would take action against senior managers who engage in such misconduct.Securities law violationsMAS’s decision to impose these sanctions on the 3AC co-founders was based on its findings of further securities law violations during investigations into 3AC and its founders. The regulatory authority accused Davies and Zhu of failing to inform MAS when 3AC hired a new business representative, providing false information to the regulator, and neglecting to establish an appropriate risk management framework.3AC’s troubles stemmed from the crypto market crash that occurred last year, triggered by the Terra ecosystem’s collapse. The hedge fund’s leveraged crypto positions exposed it to billions in loan defaults, resulting in significant financial losses. Its lack of risk management had a cascading effect in crypto. Lenders like Celsius and BlockFi had exposure to 3AC, leading to further collapses later in 2022 as a consequence.3AC’s creditors claim that the firm owes as much as $3.5 billion, and liquidators are now seeking to recover approximately $1.3 billion from Zhu and Davies, who allegedly incurred the debt when the firm was already insolvent.Regulatory reprimandsThis action by MAS follows last June’s reprimand of 3AC, which occurred just before the hedge fund filed for bankruptcy amid widely reported insolvency issues. At that time, MAS had criticized 3AC for providing false information, failing to report directorship changes involving Zhu and Davies, and exceeding the legal assets under management threshold.It’s just the latest reprimand the duo have received from a regulator this year, though. Zhu and Davies have been busy in trying to get another start-up off the ground. Earlier this year, they launched OPNX, a crypto bankruptcy claims trading platform. The venture is based out of Dubai, and the firm reported in April that it had gotten significant VC backing.Many of those that the company claimed were backing the venture disassociated themselves from those claims. The following month, the Dubai regulator, the Virtual Assets Regulatory Authority (VARA), reprimanded the OPNX founders, having issued an investor alert relative to the firm a few weeks prior to that. VARA's complaint was that the business had been operating without having acquired the appropriate licensing.

Hong Kong Pressing Banks to Facilitate Crypto ClientsHong Kong’s banking regulator is urging banks, including HSBC and Standard Chartered, to onboard crypto exchanges as clients, despite increasing regulatory scrutiny of the industry in the United States.That’s according to a report published by the Financial Times (FT) on Wednesday. The FT cited three people who it claims are familiar with the matter, together with a letter seen by the publication as the basis for the assertion.Photo by Ansel Lee on PexelsChallenging crypto banking reticenceAt a recent meeting, the Hong Kong Monetary Authority (HKMA) questioned these UK-based lenders, together with the Bank of China, about their reluctance to accept crypto exchanges as customers, according to sources familiar with the matter. The HKMA emphasized that due diligence on potential clients should not create unnecessary burdens, particularly for those seeking opportunities in Hong Kong. While banks do not have a ban on crypto clients, concerns over potential money laundering and illegal activities have made them cautious.The pressure faced by banks highlights the challenges Hong Kong is facing in establishing itself as a global hub for the crypto industry, especially in light of previous high-profile collapses, such as the implosion of FTX. However, the HKMA is encouraging banks to overcome their reservations, as the regulator believes there is resistance from senior executives who adhere to traditional banking mindsets.The enthusiasm of some Hong Kong officials for the sector is evident as pro-Beijing lawmaker Johnny Ng invited Coinbase and other crypto exchanges to set up operations in the city following the recent SEC lawsuit against Binance and Coinbase.Caught between opposing forcesBanks in Hong Kong find themselves walking a fine line between supporting the crypto industry as encouraged by the government and being cautious due to the US regulatory environment. They want to ensure the industry’s development aligns with government policies, but they are also concerned about potential anti-money laundering and know-your-customer issues.The HKMA and the Securities and Futures Commission (SFC) have been vocal about their expectations, setting them apart from regulators in other jurisdictions that may be more skeptical of cryptocurrencies. Last month it emerged that crypto startups are having difficulties in establishing banking facilities in the autonomous Chinese territory. At the time, the HKMA did convene a meeting to bring parties together in order to forge a path forward.While Hong Kong has a history as a crypto center, its position weakened after Beijing’s crackdown on the industry in 2017. However, the Hong Kong government aims to reestablish the city as a hub for digital assets, having expressed its desire to provide a supportive environment for crypto-related businesses. The introduction of a new licensing regime for crypto platforms in Hong Kong is part of the government’s efforts to attract more crypto groups to the city.HSBC, Standard Chartered, and the Bank of China hold influential positions in Hong Kong as issuers of the city’s currency and have key roles in the Hong Kong Association of Banks lobby group. Standard Chartered claims that it maintains regular dialogue with regulators on various subjects, while HSBC has claimed that it is actively engaging in policies and developments within the nascent industry.

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.