North Korean Hackers Take Off With $100M Atomic Wallet Honeypot

SBI Zodia Custody is discontinuing operations two years after its launch, Bloomberg reported. The joint venture was formed by Tokyo-based SBI Holdings and Zodia Custody, an institutional digital-asset platform backed by Standard Chartered, with ownership split 51% and 49% respectively.Photo by Haotian Zheng on UnsplashStrategic realignment behind exitAccording to people at the companies involved, the decision reflected shifting priorities at both partners. Zodia Custody chief executive Julian Sawyer described the move as a mutual alignment of strategy and said the company had prepared materials to seek local registration with Japan’s Financial Services Agency but had not filed an application before opting to exit. An SBI Holdings spokesperson said the dissolution did not signal a withdrawal from crypto custody or the company’s broader Asia strategy, describing the step instead as an effort to generate greater collective impact across SBI’s digital ecosystem. Security breaches shape regulatory climateThe retreat comes as overseas crypto businesses continue to face a cautious regulatory environment in Japan, a market shaped by several high-profile security breaches. Industry analyses have repeatedly noted that three of the largest crypto hacks targeted Japanese exchanges: Mt. Gox in 2014, Coincheck in 2018, and DMM Bitcoin in 2024. Mt. Gox lost about 850,000 BTC, now worth roughly $98 billion, and began making creditor repayments in July 2024 after years of legal proceedings. The repayment deadline was later extended to Oct. 31, 2025, and initial distributions totaled about 59,000 BTC, or just over 41% of the roughly 141,686 BTC earmarked for repayment, to an estimated 127,000 creditors. Coincheck’s 2018 breach involved what was then about $534 million in NEM tokens. Despite that episode, the company secured approval from the U.S. Securities and Exchange Commission (SEC) in November 2024 for a Nasdaq debut through a merger with Thunder Bridge. The transaction generated roughly $31.6 million in gross proceeds for the combined company. Moving forward, Coincheck is entering Europe through the acquisition of Aplo, a French-licensed digital asset brokerage. The most recent breach involved DMM Bitcoin, which had suspended operations after a May 2024 theft of more than 4,502.9 BTC. Its accounts and assets were transferred in March 2025 to SBI VC Trade, a cryptocurrency exchange owned by SBI Holdings, which said it would support 14 tokens previously listed on DMM that were not available on its own platform. Policy uncertainty as leadership shiftsAt the policy level, uncertainty is growing over Japan’s stance on crypto and blockchain following Prime Minister Shigeru Ishiba’s Sept. 7 announcement that he will step down. Ishiba, who took office in October 2024, has advocated for digital assets, with his latest remarks delivered at the WebX2025 event. There, he pledged greater state support for Web3 initiatives, describing the sector as a driver of innovation that could help address demographic decline and support broader economic change. Last month, Finance Minister Katsunobu Katō, seen as a potential contender to succeed Ishiba, said cryptocurrency could play a role in a diversified investment portfolio, noting its growing user base in Japan. While recent surveys show Sanae Takaichi and Shinjiro Koizumi as the leading preferences for the next Liberal Democratic Party leader, Katō has emphasized the need to foster a stable trading environment for digital asset stakeholders, balancing investor protection with industry innovation. Within this policy climate, SBI Zodia Custody’s shutdown underscores the operational and licensing challenges facing foreign-linked crypto ventures in Japan. 

Hong Kong Takes Steps to Enhance Crypto Platform OversightIn the wake of the ongoing JPEX scandal, the Securities and Futures Commission (SFC) of Hong Kong has pledged to intensify its efforts to combat unregulated cryptocurrency trading platforms operating within the Chinese autonomous territory.Photo by Ruslan Bardash on UnsplashPublic registry plannedAs of Monday, the SFC has announced a comprehensive plan to address these concerns. One key initiative includes the publication of a publicly accessible list encompassing all licensed, deemed licensed, closing down, and application-pending virtual asset trading platforms (VATPs). The purpose of this list is to empower the public with the information needed to identify potentially unregulated VATPs conducting business in Hong Kong.Ongoing JPEX falloutThese new measures arrive in the aftermath of the ongoing JPEX crypto exchange scandal, which local media outlets have characterized as one of the most significant financial fraud cases to ever impact the region. JPEX, a Dubai-headquartered platform, stands accused of offering its services to Hong Kong residents without having applied for a license in the country.The SFC pointed directly to the issues at JPEX in its most recent announcement, stating: “The JPEX incident highlights the risks of dealing with unregulated VATPs and the need for proper regulation to maintain market confidence. It also shows that dissemination of information to the investing public through the Alert List, warnings and investor education can be further enhanced to help members of the investing public better understand the potential risks entailed by suspicious websites or VATPs.”Christopher “Kit” Wilson, the Director of Enforcement at the SFC, discussed these developments at a press briefing held on Monday, alongside addressing the JPEX scandal. Wilson revealed that, due to evasive behavior from stakeholders and unsatisfactory responses to information requests, JPEX was placed on the regulator’s alert list in July 2022.It emerged last week that Hong Kong police had taken social media influencer Joseph Lam into custody related to the scandal. More arrests followed later in the week while authorities indicated that they were looking to tighten up regulation in light of the unfolding JPEX saga. By Friday, access to the web and mobile platforms of JPEX had been blocked with JPEX encouraging users to use VPN to circumvent the measure.Wilson further elaborated that a complex investigation, involving multiple parties across various jurisdictions, was initiated by the SFC, which escalated following the receipt of the organization’s first official investor complaint in April 2023. This coincided with the full implementation of the Anti-Money Laundering Ordinance (AMLO) in June 2023, prompting the commencement of a formal fraud investigation.Wilson stated: “As a result of that investigation, we issued a formal warning on Sept. 13 and referred the matter to the police.”As it stands right now, the financial ramifications of the JPEX scandal are estimated to have reached approximately $178 million. Local law enforcement agencies have received over 2,200 complaints from affected exchange users.

Report Cites Escalating Crypto Use by Pro-ISIS GroupsA recently published report suggests that pro-ISIS terrorist groups in central and southeast Asia and the Middle East are increasing their use of cryptocurrency.According to the report which was published on Friday by blockchain analytics firm TRM Labs, cryptocurrency has become a favored tool for terrorist organizations, with ISIS affiliates showing an increasing preference for the Tron network’s USDT stablecoin. The report highlights that terrorist groups worldwide, including those linked to ISIS, are actively utilizing cryptocurrencies for fundraising purposes, allowing them to attract supporters and bolster their operations.Photo by David McBee on PexelsOn-chain evidenceTRM Labs has been closely monitoring these activities over the past year and has uncovered a growing amount of on-chain evidence. Pro-ISIS networks in countries such as Tajikistan, Indonesia, Pakistan, and Afghanistan have been observed using crypto assets to facilitate their illicit activities, with Tether (USDT) stablecoin on the Tron network (TRX) being their preferred choice for transactions.The disturbing revelations show how recruited fighters were enticed to join ISIS’ Afghanistan affiliate (ISKP) through the use of cryptocurrency fundraising campaigns. One such campaign operated for over a year and managed an address that received approximately $2 million in USDT on Tron in 2022. TRM Labs played a role in getting the operation dismantled, leading to the arrest of Shamil Hukumatov, a senior ISIS fundraiser allegedly responsible for the scheme.Indonesia & PakistanIn Indonesia, individuals used a crypto platform to transfer over $517,000 in 2022 to addresses linked to pro-ISIS fundraising campaigns in Syria, all using USDT on Tron. This connection demonstrates the global reach and sophistication of the terrorist groups’ crypto operations.Additionally, a media unit associated with ISPP, the Pakistan affiliate of ISIS, ramped up its fundraising efforts in the latter half of 2022. The entity sought to capitalize on natural disasters, such as earthquakes in Turkey and Syria, to raise funds by publicizing various cryptocurrency addresses flagged by TRM Labs as associated with the terrorist organization.SyriaTRM Labs’ investigation ultimately points to pro-ISIS fundraising campaigns in Syria as a central hub for cryptocurrency usage by the terrorist group and its supporters. A significant portion of the donations ends up supporting ISIS families in camps like al-Hol and Roj, as well as funding local cryptocurrency exchanges that facilitate the group’s activities.For TRM Labs, the identification and tracking of these campaigns and their donors are crucial steps in mapping out and potentially disrupting pro-ISIS networks worldwide. Their efforts aim to mitigate the risks posed by the misuse of cryptocurrencies in financing terrorism and illegal activities.The rising adoption of cryptocurrencies by terrorist organizations poses significant challenges to law enforcement agencies and regulatory authorities worldwide. It’s a worrying development for legitimate users of digital assets as it may result in far more heavy-handed regulation as a direct consequence.Under these circumstances, it is crucial for the crypto community, governments, and regulatory bodies to collaborate in implementing effective safeguards against the abuse of digital currencies for nefarious purposes. Only through collective action can this threat be neutralized.