Korea’s FSC Embarks on Developing Regulatory Framework for VASPs

OKX shores up App security following bug discoveryCryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.User data and asset vulnerabilityThe flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.Taking to the X social media platform on Tuesday, CertiK wrote:”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”Photo by FLY:D on UnsplashPrompt responseRecognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”Ongoing exploitsThis security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.Industry collaborationThe collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

Recent developments relative to governance of the CRO token, a native token belonging to the Cronos blockchain, have proven controversial, with many in the community unhappy with the actions of Singapore-headquartered Crypto.com.Photo by Markus Winkler on UnsplashProposal controversyThe controversy surrounds a proposal put forward by Crypto.com, which originally developed the Cronos blockchain in 2021, to mint 70 billion CRO tokens. The move would effectively roll back a CRO token burn that took place in 2021. The governance process applicable to the proposal meant that CRO token holders could vote on the proposal between March 2 and March 16. For the majority of that voting period, the outcome appeared to be uncertain. The “yes” vote had a narrow lead, but it would have been insufficient to reach the required 33.4% quorum of eligible votes. Exceeding the quorumHowever, at 14:00 UTC on Sunday, a last-minute influx of 3.35 billion tokens tipped the balance firmly in favor of the proposal while well exceeding the minimum turnout as 70.18% of eligible votes were cast. 61.18% voted in favor, with 17.61% against. Many CRO token holders who opposed the proposal are aggrieved at the manner in which this late voting surge came about. It’s understood that these last-minute votes came from blockchain validators controlled by Crypto.com. Crypto.com is understood to hold in the region of 80% of the voting power. In exercising that voting clout, many CRO holders feel that it has undermined the will of the community. Some commentators believe that increasing the token supply will result in a loss of trust in the project, damaging investor confidence going forward. Earlier this month, Crypto.com CEO Kris Marszalek responded to community pushback against the proposal. Marszalek suggested that the proposal ties in with an overall strategy for the success of the Cronos blockchain and its CRO token in the long term.  He pointed to four items that are relevant in achieving success for an altcoin like CRO. These included finding product-market fit, the need to redeploy free cashflows, successfully launching exchange-traded funds (ETFs) and participating in reserve-building initiatives.  ‘Free to vote and free to sell’The strategy relies upon building demand in order to achieve longer-term success. On X, Marszalek wrote: “People who do not agree that this is the right approach are free to vote & free to sell. We will stay laser focused on building towards new ATHs [all-time-highs].” In another X post on March 19, the Crypto.com CEO outlined that the company generated $1.5 billion in revenue in 2024 while servicing the needs of 140 million users on the platform. The company spent $700 million on branding, user acquisition and user incentives in 2024. Its operations turned a net profit of $300 million.  Crypto.com has also made further headway on the compliance front over the course of the past week. The company received licensing approval in Dubai to offer derivatives from the Virtual Assets Regulatory Authority (VARA). On March 17 the company announced that it had successfully achieved Virtual Asset Service Provider (VASP) registration with the Argentine regulator.

SC Ventures Exits Digital Asset Custody Infrastructure InvestmentSC Ventures, the Singapore-headquartered corporate venture capital arm of Standard Chartered Bank, has announced its decision to divest its stake in Metaco, a Swiss-based digital asset custody firm. As one of Metaco’s early adopters, SC Ventures played a crucial role in supporting the company’s growth and development.Photo by Pixabay on PexelsDissolving a partnershipHaving been the largest institutional investor in the digital custody infrastructure firm, SC Ventures contributed significantly to the enhancement of Metaco’s award-winning custody product. The partnership between the two entities facilitated valuable contributions in various areas, including corporate governance, business strategy, institutional use cases, and access to SC Ventures’ extensive ecosystem. Through their collaboration, SC Ventures aimed to provide institutions with a secure and compliant ecosystem for operating digital assets.Ripple acquisitionIn a recent development, enterprise blockchain company Ripple acquired Metaco for $250 million. Ripple’s acquisition of Metaco signifies its diversification into custody solutions, expanding its business opportunities within the blockchain sector. With this move, Ripple aims to offer its customers technology that enables custody, issuance, and settlement of various types of tokenized assets. Further evidence of Ripple’s interest in this area emerged last week with the news that the company is collaborating with authorities in Hong Kong to showcase real world asset tokenization.Despite the acquisition, Metaco will continue to operate as an independent brand and business unit, under the leadership of its founder and CEO, Adrien Treccani. This decision ensures continuity and stability for Metaco’s existing clients and partners while benefiting from the resources and support provided by Ripple.Ongoing linkWhile the divestment of a division of an international banking behemoth like Standard Chartered from a digital asset infrastructure firm may seem like a bad news story, it’s likely not that straightforward. It’s worth noting that Zodia Custody, itself a digital assets custody venture incubated by SC Ventures, continues to maintain a strategic partnership with Metaco.The ongoing collaboration between Zodia Custody and Metaco focuses on matters related to compliance and risk management. This partnership ensures that both companies can leverage their respective expertise to address the increasing demand for safe and compliant access to cryptocurrencies and digital assets from institutional investors.Despite this divestment, it appears that SC Ventures still recognizes the importance of supporting emerging technologies on the cusp of adoption through its continued involvement with Zodia Custody, continuing advancements in the digital asset space.SC Ventures’ exit from its stake in Metaco marks a significant milestone in the ongoing evolution of both companies. While SC Ventures has played a vital role in Metaco’s growth, the acquisition by Ripple opens up new opportunities for Metaco to expand its offerings and cater to a broader customer base. Meanwhile, the collaboration between Zodia Custody, Metaco, and SC Ventures ensures that institutional investors have access to secure and compliant solutions as the demand for digital asset services continues to rise.