The Sandbox Adds Singapore Virtual Neighborhood Lion City

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

The Label Foundation is working with global electronics conglomerate LG Electronics to rollout its Web3 music streaming service, Tracks, on LG Smart TVs, according to an article by Bitcoinist on Monday (KST). The platform’s TV app will be available for free on the latest LG Smart TV models that support webOS22 and 23.Photo by Blaz Photo on UnsplashReinvented music streamingTracks is a music streaming service that allows users to enjoy free high-quality music and artistic visuals through their TVs. The platform leverages Web3 technology to offer a variety of rewards based on the amount of time spent listening. In particular, the Label Foundation aims to make Tracks easily accessible to Web2 users around the world to serve as a bridge between Web2 and Web3. “With the upcoming launch, numerous TV owners will be able to enjoy music for free, which resonates deeply with Label’s ethos, championing universal music accessibility without financial boundaries. We are happy that our collaboration with LG Electronics made this a reality,” Label Foundation said. Rapid riseSince its launch in July, Tracks has gained substantial popularity among younger generations, with its mobile app amassing over 150,000 users worldwide and more than 10,000 daily active users. The Label Foundation attributes this success in user acquisition to its user-centered approach, as opposed to the content provider-centered approach of traditional music streaming services.  As part of its monetization efforts, Tracks will also integrate a free advertising supported streaming television (FAST) service in the near future, which will allow users to access content like television programming and films without subscription fees.

Hong Kong Web3 Companies Invest Millions in VASP LicensesWeb3 firms in Hong Kong are making significant financial investments to obtain Virtual Asset Service Provider (VASP) licenses.According to a report by Foresight News on Tuesday, the cost of these licenses is ranging between 20 million and 200 million Hong Kong dollars ($2.55 million and $25.5 million).Industry sources explained to the publication that the high costs are due to the lack of existing infrastructure in traditional financial institutions, requiring significant investments in various aspects such as products and teams. Even experienced cryptocurrency institutions find the cost of obtaining a license to be substantial.Photo by Daniam Chou on UnsplashEarly licenseesAnalysts at Foresight highlighted that several Hong Kong subsidiaries of exchanges, including OKX, BitgetX, HashKey Pro, OSL, and Gate.io, have already commenced operations. OKX, in particular, has witnessed impressive growth in Hong Kong, with 8,800 registered users and a cumulative trading volume of $150 million as of June 27.To regulate the cryptocurrency exchange industry, Hong Kong introduced new VASP licensing requirements on June 1.These requirements mandate firms to disclose user statistics and company financials to the Securities and Futures Commission (SFC) of Hong Kong for regulatory approval. Exchanges that fail to comply with the requirements will be compelled to halt operations in the special administrative region (SAR) by mid-next year.Virtual asset ratingsOn the same day, the Hong Kong Virtual Asset Consortium unveiled its virtual asset index, which encompasses major cryptocurrencies such as Bitcoin, as well as altcoins and privacy tokens. The consortium aims to offer ratings services and indexes to facilitate retail crypto trading in the SAR. Notably, it has received support from prominent players in the industry, including Huobi, KuCoin, Bitget, and others.The introduction of VASP licenses and the subsequent investments made by Web3 companies demonstrate the evolving regulatory landscape in Hong Kong. With the stringent licensing requirements, the industry aims to enhance transparency and accountability, ensuring the protection of investors and fostering a more secure environment for cryptocurrency trading.The involvement of established exchanges and the formation of the Hong Kong Virtual Asset Consortium further underscore the growing interest and support for cryptocurrencies in the region. These initiatives are designed to provide retail investors with reliable information.In that way, they enable them to make informed decisions while participating in the digital assets space. The consortium’s collaboration with industry leaders reflects a collective effort to promote the growth and adoption of cryptocurrencies in Hong Kong.Last week’s news of banking stalwart HSBC offering Hong Kong-based crypto exchange-traded funds (ETFs) to its banking customers has also delivered a shot in the arm to the development of crypto in the Chinese autonomous territory.As the regulatory framework continues to evolve and mature, it is expected that Hong Kong will attract more Web3 companies seeking to operate in a regulated and compliant environment.The investment in VASP licenses signals a commitment to long-term growth in establishing a base in Hong Kong. Ongoing developments in Hong Kong over the course of the past six months point to the recognition of the potential benefits that cryptocurrencies and blockchain technology can bring to the financial landscape of Hong Kong and level of the level of intent locally to progress the technology.