NEOPLY Receives Support from Abu Dhabi for Blockchain Expansion in UAE

OKX shores up App security following bug discoveryCryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.User data and asset vulnerabilityThe flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.Taking to the X social media platform on Tuesday, CertiK wrote:”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”Photo by FLY:D on UnsplashPrompt responseRecognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”Ongoing exploitsThis security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.Industry collaborationThe collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

HashKey Capital, a Singapore-based crypto fund manager, and FTSE Russell, a subsidiary of the London Stock Exchange Group (LSEG), have collaboratively launched a series of indices designed to track cryptocurrencies. Three indicesRevealed on the FTSE Russell website on Wednesday, these three indices provide traders with the ability to monitor diversified baskets of digital assets aligned with various investment strategies. They cater to nuanced preferences across different crypto segments and market capitalizations. The flagship index in this suite is the FTSE Custom Digital Asset Top 20 Index, tracking the top 20 crypto assets based on market capitalization. This index is positioned to accurately reflect more than 90% of the overall performance of the digital asset market, offering investors insights into the dynamics of the most significant players in the crypto space.Photo by Markus Winkler on UnsplashFocus on infrastructure and application layerBeyond tracking market capitalization leaders, the suite includes indices with a specific focus on the crypto ecosystem's infrastructure layer (FTSE Custom Digital Asset Infrastructure Index) and application functionalities (FTSE Custom Digital Asset Application Index). One of them, the infrastructure index, zeroes in on digital assets forming the infrastructure layer, including smart contract platforms, protocol interoperability and distributed computation and storage. Meanwhile, the FTSE Custom Digital Asset Application Index concentrates on digital assets associated with application functionalities, such as those linked to staking instruments and decentralized finance. From Wednesday, these indices have been made accessible on the FTSE Russell website, with plans for future availability through major data providers like Bloomberg, Factset, LSEG Data & Analytics, Morningstar and S&P Capital IQ. U.S. ETF approvalThe introduction of these indices follows the recent milestone approval by the Securities and Exchange Commission (SEC) of spot bitcoin ETFs in the United States. It’s likely that the milestone ETF approval in the largest capital market is having a knock-on effect, proving to be a catalyst for other such offerings implicating the intertwining of crypto and traditional finance on an international basis. These products offer investors a more accessible entry point into the crypto market's largest asset, currently boasting a market capitalization of approximately $780 billion. Industry watchers anticipate the potential approval of a U.S. spot ether ETF later in 2024, with the SEC expected to make rulings on proposed funds by May. Deng Chao, managing director of HashKey Capital, noted a significant surge in demand from investors seeking to diversify their portfolios beyond established cryptocurrencies. This move aligns with broader market trends, as investors increasingly explore opportunities in diverse crypto assets. Notably, these index launches follow FTSE Russell's partnership with Grayscale Investments in October, aimed at enhancing crypto diversification. The earlier collaboration focused on various crypto sectors, including currencies, smart contract platforms, financials, consumer and culture and utilities and services. This development comes on the heels of HashKey Group, the Hong Kong-headquartered parent company of HashKey Capital, securing $100 million in a Series A funding round at a $1.2 billion valuation. OKX Ventures participated in the funding round, signaling strong support for HashKey Group's plans to accelerate product diversification in its Hong Kong business and drive compliant and innovative development globally.   

Kronos Research experiences significant cybersecurity breachKronos Research, a Taipei-based crypto trading, market making and venture capital firm, has found itself in the crosshairs of a cyber attack.Photo by FLY:D on Unsplash$25.6 million lossHackers gained unauthorized access to the company’s API keys, resulting in losses exceeding $25.6 million spread across various cryptocurrencies, prompting a concern within the crypto community.The breach was detailed by the company in a social media post on the X platform on Saturday. That post read:“In the interest of transparency Around 4 hours ago, we experienced unauthorized access of some of our API keys. We paused all trading while we conduct an investigation. Potential losses are not a significant portion of our equity and we aim to resume trading as soon as possible.”On-chain sleuthingInvestigations by crypto community members have followed, led by blockchain researcher ZachXBT. ZachXBT is a well-known anonymous persona in the crypto space, having earned a reputation for uncovering hacks, scams and unethical practices within the crypto sector.In this instance, ZachXBT uncovered a trail of transactions originating from a Kronos Research account. The meticulous execution of the cyber attack was evident in six transactions involving 2,780 ETH, 2,540 ETH (repeated twice), 2,636 ETH, 4.93 ETH and 2,507.52 ETH, all directed to addresses controlled by the hacker.Kronos Research has followed up with a tweet thread on X, acknowledging the gravity of the situation and confirming losses of approximately $25.65 million in crypto assets. Despite the alarming figures, the company sought to reassure stakeholders by emphasizing that the losses represent a relatively small fraction of its total equity. In a commendable display of accountability, Kronos Research pledged to absorb all losses internally, shielding its partners from the financial ramifications of the breach.The Taiwanese firm posted:“Our team has been working round the clock to minimize the impact and resume trading operations, following a hacking incident that involved unauthorized access to our API Keys.”Implications for Woo XThe operational repercussions were swift and impactful, with Kronos Research opting for a temporary suspension of all trading operations. This decision rippled through to Woo X, the affiliated Taipei-based exchange and liquidity provider created by Kronos, which temporarily blocked specific asset combinations due to liquidity concerns. Importantly, Woo X assured users of the security of their funds and later announced the resumption of spot and perpetual trading.Looking forward, Kronos Research outlined its intention to resume trading operations in the coming days, contingent on favorable conditions.The cyber attack on Kronos Research occurred against the backdrop of heightened cybersecurity concerns within the crypto space. According to blockchain security firm Certik, approximately $173 million was lost to crypto attacks in November alone. The Kronos Research breach follows on the heels of Poloniex’s $131 million hack, highlighting the persistent challenges faced by crypto platforms in securing user assets.