India’s RBI Cites Stablecoin Risks With Call for Global Regulation

Atomic Wallet Hacker Uses Lazarus Crypto MixerThe stolen cryptocurrency from the recent $35 million hack of Atomic Wallet is already being moved to a crypto mixer favored by North Korea’s notorious cyber-hacking group.Photo by Micha Brändli on UnsplashSinbad.ioAccording to UK-based crypto compliance analysis firm Elliptic, the funds have made their way to a crypto mixer used by Lazarus Group, a notorious hacker group that focuses on crypto heists which is believed to have direct ties with the North Korean government.On June 5, Elliptic’s Investigations Team revealed that it had traced the funds from the Atomic Wallet hack to the crypto mixer Sinbad.io. Lazarus had previously used the mixer to launder over $100 million in stolen crypto assets.While the exact amount sent to the mixer was not specified, Elliptic noted that the stolen funds were being exchanged for Bitcoin before undergoing obfuscation through the mixer. Additionally, Elliptic reported that Sinbad.io is likely a rebranded version of Blender.io, another mixer extensively used to launder funds by the Lazarus Group. Blender.io has been sanctioned by the US Treasury.Atomic Wallet hackThe hack of several user accounts on Atomic Wallet occurred on June 3, resulting in losses of up to $35 million. News of the issue broke with the following tweet from the project team (which has subsequently been deleted): “We have received reports of wallets being compromised. We are doing all we can to investigate and analyze the situation. As we have more information, we will share it accordingly.”In a follow-up tweet the next day, the team confirmed that it was investigating the matter with the assistance of a number of “leading security companies.”However, Atomic Wallet later downplayed the incident, stating that less than 1% of its monthly active users were affected. The project team was castigated by users for trying to present the hack as a minor incident. One user took to Twitter to call out the Atomic Wallet team for “having the nerve to come to the networks and say that only 1% of wallets were affected.”The Atomic Wallet project is based out of Tallinn, Estonia, having been founded in 2017. It claims to provide a non-custodial decentralized multi-currency crypto wallet. The product supports over fifty coins and two hundred tokens. It also offers atomic swaps between digital assets, while also supporting integrations with instant exchanges such as Changelly, ShapeShift, and others.Roland Säde, the Chief Marketing Officer of Atomic Wallet, assured users that the team is working tirelessly to recover the stolen funds. He emphasized the need to complete the investigation to develop a concrete plan.Despite the ongoing efforts, Säde urged victims to track the illicit transfers and report them to popular crypto exchanges. By doing so, it was thought that may hinder the scammers from exchanging the funds.Crypto hacking menaceLazarus Group hackers have been the bane of the crypto space in recent years. Elliptic released a report last month that identified Japan as having been the country most adversely affected by the North Korean hackers. It’s understood that the estimated $721 million in stolen crypto from Japan-based entities amounts to nearly nine times the value of North Korea’s exports based on 2021 data.While Atomic Wallet is directly reporting the incidents, Säde believes that having more individuals monitoring the hackers’ activities will make it more challenging for them to move the funds undetected. Unfortunately, Elliptic’s recent findings suggest that for many victims, it may already be too late to prevent further misuse of their stolen cryptocurrency.

Zipmex, the Asian digital asset exchange, faces another setback as the Securities and Exchange Commission Board of Thailand (SEC Board) moves to recommend the revocation of its digital asset business license. This decision, announced last week, marks the latest in a series of challenges for the exchange, which has struggled to navigate the complexities of the crypto market's downturn.Photo by Oleksandr P on PexelsCapital requirements failureThe SEC's recommendation stems from Zipmex's failure to meet the increased net capital requirement and address deficiencies in its personnel and management structure. These shortcomings were deemed unacceptable by the regulatory body, prompting a 15-day ultimatum issued on Feb. 1. Earlier this month, the Commission ordered a halt to Zipmex operations, enforcing a temporary suspension until such time as the company had improved its financial position and applied needed changes to its management structure.Despite this window for compliance, Zipmex fell short of meeting the specified conditions, leading to the current proposal for license revocation and the imposition of stringent regulatory measures on Thailand's digital asset exchanges. Business suspension extensionDuring a meeting on Feb. 21, the SEC further resolved to extend Zipmex's business suspension, initiated on Feb. 1, and allowed clients to request asset returns on the exchange until March 11. Any unclaimed assets after this date will be required to be placed in a "trusted and secured system," with Zipmex obligated to report this to the SEC. Notably, even after the potential revocation of its license, Zipmex will retain its status as a limited company, subject to associated rights, responsibilities and liabilities, including the possibility of legal action. Zipmex's woes trace back to 2022 when it faced significant challenges due to exposure to failed crypto lender Babel Finance. In July of that year, the exchange suspended withdrawals for weeks due to concerns over its ties to crypto lenders Babel and Celsius, both facing financial distress. Although access to Trade Wallets was restored after three days, Z Wallets remained inaccessible into the following year. Failed Coinbase and V Ventures dealsIn the midst of its troubles, Zipmex attracted interest from Coinbase, albeit without success. While Coinbase made a strategic investment in Zipmex, the acquisition attempt did not materialize as initially intended. Furthermore, Zipmex's financial struggles led it to file for debt relief in Singapore in July 2022, further complicating its position in the market. The exchange's regulatory challenges continued as it faced scrutiny from the SEC regarding compliance with the Digital Assets Act. Despite attempts to secure acquisition deals, such as the proposed acquisition by Thai investor V Ventures, Zipmex has been unable to alleviate regulatory concerns or stabilize its operations effectively. Since obtaining its license from the SEC in January 2020, Zipmex has operated in Thailand, Indonesia, Singapore and Australia. However, its inability to address regulatory requirements and financial challenges has cast doubt on its future viability in these markets.  In November of last year, the company itself announced a temporary cessation of trading in Thailand while it worked towards becoming compliant within that jurisdiction. Earlier this month, Thailand’s SEC took legal action against Akarlap Yimwilai, the former CEO of Zipmex Thailand.

In a recent blog post, Christopher Hui, Hong Kong's Secretary for Financial Services and the Treasury Bureau (FSTB), announced a stringent deadline for unlicensed virtual asset service providers (VASPs) to submit licensing applications, as well as outlining the intention to develop a regulatory framework for over-the-counter (OTC) venues.Photo by Manson Yim on UnsplashUnlicensed VASP deadlineThe Hong Kong government's financial services department has set Feb. 29 as the cutoff date for applications from VASPs that are currently unregistered and unregulated. Those not approved must cease operations by May 31. The move comes as the Securities and Futures Commission (SFC) established a licensing system for VASPs, acknowledging a transitional period for those operating before its implementation. Midway through last year, the SFC issued a stern warning to unlicensed crypto trading platforms engaging in what it termed as “improper practices.” Hui emphasized that VASPs wishing to continue operations in Hong Kong must submit their license applications by the end of this month. Failure to meet the relevant requirements outlined by the SFC could result in the issuance of a "no-deeming notice" for existing service providers. This notice mandates that they must halt operations either by May 31 or three months after receiving the notice. Service providers failing to submit their applications by the February deadline are also expected to cease operations by the end of May. As the deadline approaches, Hui highlighted that the SFC is actively preparing for enforcement work, including issuing notices to disapproved service providers and intensifying publicity efforts. Proposed regulatory framework for OTCsHighlighting the specific role OTC venues played in some fraud cases involving unlicensed VASPs in 2023, Hui announced that the SFC plans to launch a consultation on a proposed regulatory framework for OTC crypto venues. The consultation will encompass virtual-asset outlets, including shops and online platforms. Hui emphasized the necessity of regulating OTC venues to prevent investor deception and protect against fraudulent activities. This move aligns with Hong Kong's ongoing efforts to create a vibrant sector and ecosystem for virtual assets. The city implemented a licensing regime for crypto companies in June of the previous year, with companies requiring approval before June of the current year to continue operations. Cautioning investorsHui also took the opportunity to caution investors about the volatility and value of virtual assets. He stressed that many digital assets lack intrinsic value and exhibit price volatility, urging investors to thoroughly understand details and assess associated risks before engaging in related investments. Furthermore, Hui emphasized that only platforms officially licensed by the SFC should be used for virtual asset transactions. Additionally, Hong Kong is exploring a regulatory regime for stablecoin issuers, proposing that fiat-backed stablecoin issuers obtain a license from the Hong Kong Monetary Authority. As Hong Kong strengthens its regulatory framework, it aims to create a secure and compliant environment for the evolving landscape of virtual assets.