Korea’s FSC Embarks on Developing Regulatory Framework for VASPs

Poly Network Exploit Results in Billions of Nonexistent TokensPoly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.Photo by Shubham Dhage on UnsplashNetwork suspensionThe Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.Bridge vulnerabilitiesBridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.Illiquid Metis tokensMetis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

While cryptocurrencies may be banned in China, crypto trading activity continues in some corners, nonetheless, sometimes through accessing overseas exchanges. With that, authorities recently uncovered a massive underground banking operation that exploited crypto trading platforms to evade local forex regulations.Photo by Manuel Joseph on Pexels$2.2 billion laundering operationOn Sunday, an account on popular Chinese social media platform WeChat run by China’s State Administration of Foreign Exchange (SAFE) published details of the $2.2 billion laundering operation bust. Xu Xiao, the Inspector at the Qingdao Branch of the State Administration of Foreign Exchange, revealed that the scheme involved underground banks who purchased virtual currencies and then sold the virtual currencies through overseas trading platforms to obtain the foreign currency they needed. This process, he explained, completes the conversion of yuan and foreign currencies, constituting the illegal act of buying and selling foreign exchange. Stringent capital controlsChina enforces stringent rules on money transfers outside the country. Citizens are limited to exchanging up to $50,000 in foreign currency and require a permit for transactions beyond that limit. Any transaction exceeding the limit without a permit is considered money laundering. During a recent investigation, authorities seized cryptocurrencies valued at approximately $28,000 in Tether, Litecoin and other digital currencies. However, the operation is estimated to have facilitated the movement of over $2.2 billion, involving more than a thousand bank accounts across 17 provinces and municipalities. Monetary control loopholesChina, once the largest cryptocurrency market, imposed a comprehensive ban on crypto exchanges in September 2017 and subsequently expanded its restrictions to include crypto mining and trading. Despite these measures, reports have surfaced about underground crypto exchange operations. Earlier this year, an investigative report by the Wall Street Journal found that global exchange Binance continues to do thriving business with Chinese customers. Global crypto exchanges are reportedly still onboarding Chinese clients indirectly. The South China Morning Post (SCMP) recently accused Binance of facilitating Chinese crypto trading accounts by falsely claiming they are from Taiwan. While mainland China adopts a hostile stance towards cryptocurrencies, the special administrative region of Hong Kong remains progressive in the sector. Hong Kong’s regulatory authorities have introduced specific rules for cryptocurrencies and are licensing crypto exchanges operating within the jurisdiction. Arthur Hayes, the co-founder of the BitMEX crypto derivatives platform, recently described Hong Kong as the gateway for mainland China to global capital markets. Hayes asserted that wealthy Chinese individuals all bank in Hong Kong and with that, they all have access to crypto exchanges and brokers. In Cambodia, it is understood that illicit Chinese-linked activities oftentimes implicate the use of U.S. dollar stablecoin Tether (USDT) to move funds in and out of China even though Tether is banned in Cambodia. The latest crackdown in China underscores the ongoing challenges faced by authorities in controlling crypto-related activities, highlighting the dynamic nature of such activity within and adjacent to mainland China. As regulatory scrutiny intensifies, the contrast between mainland China’s approach and Hong Kong’s more open stance toward cryptocurrencies becomes increasingly evident. 

Report Reveals Global Trends and Online Discourse on Crypto Travel RuleCODE, the only Travel Rule solution provider in South Korea, together with blockchain consulting firm Catalyze Research, published a report that sheds light on global trends in Travel Rule legislation and popular online keywords associated with the Travel Rule. The Travel Rule is a set of guidelines that virtual asset service providers (VASPs) and financial institutions are obligated to observe in order to counteract money laundering and terrorist financing. These guidelines require these entities to share information about both the sender and the recipient of cryptocurrency or financial transactions.The authors of this report gathered online comments related to the Travel Rule from January 1, 2019 to July 31, 2023. They conducted this analysis across news outlets, media platforms, online forums, and various social media channels, encompassing over 200 countries and 150 languages.Photo by Volodymyr Hryshchenko on UnsplashKey events driving discussionsAccording to the report, online discussions concerning the Travel Rule intensified around the time of several key events. These events include the enforcement of the Travel Rule in South Korea in March 2022, the approval of the Markets in Crypto-Assets Regulation (MiCA) and Transfer of Funds Regulation (TFR) by the European Union in April 2023, endorsements of the Travel Rule by G7 countries in Japan in May 2023, and the subsequent implementation of the Travel Rule in Hong Kong and Japan in June 2023.Notably, South Korea, Japan, and France experienced the most substantial surges in Travel Rule-related discussions during the first half of 2023. In South Korea, comments were prompted by a lawmaker’s scandal related to cryptocurrency trading. Meanwhile, Japan and France observed a rise in comments linked to the enforcement of their respective local Travel Rule regulations in the second quarter.Negative market responsesIn addition, markets responded more negatively than positively to the tightening of Travel Rule regulations. The concerns about the market contraction were stronger than the positive outlook on the advantages of preventing money laundering.Lee Sung-mi, CEO of CODE, highlighted the growing significance of Travel Rule solution providers in ensuring the compliance of virtual asset service providers (VASPs) with the regulatory demands of various jurisdictions. Particularly, with the Financial Action Task Force (FATF), G7 nations, and the EU at the forefront, countries have been making noteworthy strides in Travel Rule implementations since 2023, she further noted. Lee emphasized CODE’s commitment to aiding its member VASPs in adhering to Travel Rule regulations by delivering secure and convenient services that align with the evolving global regulatory landscape.