Polymesh’s APAC Digital Asset Regulation Report Highlights Challenges

Korbit and SK Planet Team Up to Promote NFT Membership ProgramKorbit, one of South Korea’s prominent cryptocurrency exchanges, has teamed up with SK Planet, a technology affiliate of the major conglomerate SK Group, in an effort to attract new users to Road to Rich, a non-fungible token (NFT) membership program.Photo by Mo on UnsplashWin up to 0.1 BTCUnder this collaboration, Korbit users will have the opportunity to win up to 0.1 BTC by completing assigned tasks. From those participating, 511 fortunate individuals will be selected as winners. The breakdown of prizes is as follows: 500 participants will earn 0.001 BTC each as third place winners; 10 second place winners will receive 0.01 BTC each; and the single top winner will be awarded the grand prize of 0.1 BTC.Quests, rewards, and rabbit NFTsRoad to Rich was introduced earlier this month by OK Cashbag, a popular customer rewards system offered by SK Planet. Road to Rich offers users daily quests involving rabbit character NFTs. Successful completion of these tasks allows users to gain various benefits, such as OK Cashbag points, which can be used at hypermarkets, restaurant chains, and other partner businesses. To participate in Road to Rich, users need to install the UPTN Station, a decentralized wallet developed by SK Planet, which allows storage, retrieval, and transfer of NFTs.According to a report by local news outlet Newspim, Oh Se-jin, CEO of Korbit, expressed the crypto exchange’s excitement about participating in the expansion of SK Planet’s Web3 ecosystem. Oh said that Korbit is committed to collaborating with SK Planet to deliver more convenient and valuable services to customers in the Web3 space.

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

Korean Financial Watchdog to Penalize Bankers Involved in Illegal Foreign RemittancesThe Korean Financial Supervisory Service (FSS) recently completed an investigation into illegal foreign remittances of approximately 16 trillion KRW (~$12,137,718,400) that involved numerous bankers.©Unsplash/Paul FiedlerExploiting the kimchi premiumThe investigation, launched by the Korean financial watchdog last June, found that these lawbreakers sent funds to China, Hong Kong, and other overseas destinations through Korean crypto exchanges, trading firms, and bank branches with an aim of making money through arbitrage by taking the advantage of the kimchi premium, a term used to describe that the higher prices of crypto assets in Korean exchanges compared to their foreign counterparts.Bankers neglecting the KYC ruleSome of these bankers participated in the crime by raising the remittance cap and applying favorable exchange rates to trading companies that had no previous transaction records with banks. By law, bankers in Korea are obligated to follow the “know your customer” rule. It was found that 12 domestic banks and one futures firm were involved in this incident.The FSS has decided to impose strict penalties on these financial institutions, considering they were exploited for money laundering purposes. These entities are likely to have some of their services suspended, with the employees involved being fired.Accountability of top bankersOne key point to watch out for is whether the FSS would be able to hold executives accountable. Some say penalizing top bankers is not easy, given that it has to be proven that the employees’ criminal activities were due to a lack of executives’ internal control.The financial regulator recently announced plans to revise the law governing banks’ governance, but it is expected that such a bill would take some time to pass through the National Assembly.Through a revision of the law, the financial authority aims to hold top executives at financial institutions more responsible for serious financial accidents. It looks forward to bestowing top bankers with the obligation of comprehensive internal control management and making them accountable as an overall manager only in case of critical financial accidents. The term “top executives” in the bill will encompass not only bank presidents but also chairpersons of financial holding companies. More specific revision plans are expected to be revealed by the end of this month.