Korean Conference Captures Interest of NFT and Blockchain Game Enthusiasts

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

UAE Issues New Guidance on Crypto AML MeasuresUnder new guidance issued by the Central Bank of the United Arab Emirates (UAE), crypto businesses will be subject to strengthened anti-money laundering (AML) and countering the financing of terrorism (CFT) measures.Photo by Joshua Miranda on PexelsTightening AML regulationThe guidance, first compiled in February but released on Wednesday, which takes into account the recommendations of the Financial Action Task Force (FATF), has been introduced to enhance the supervisory and regulatory frameworks and combat financial crimes. The rules are set to come into effect within a month.The Central Bank’s guidance specifically targets Licensed Financial Institutions (LFIs) in the UAE, encompassing banks, finance companies, exchange houses, payment service providers, registered hawala providers, insurance companies, agents, and brokers. These entities will now be required to comply with the new regulations to prevent money laundering and terrorism financing activities.Firm foundationsIn a written statement, His Excellency Khaled Mohamed Balama, Governor of the UAEs Central Bank, expressed the importance of the new guidance in strengthening efforts to combat financial crimes. He emphasized the commitment to protecting the financial and monetary system’s soundness and stability, aligning with the FATF standards.The issuance of the guidance comes as the UAE aims to attract crypto businesses to the region by offering a welcoming but effective regulatory framework. In March, Dubai unveiled a dedicated agency responsible for virtual asset regulation, signaling its commitment to fostering a favorable environment for crypto-related activities. Its Virtual Assets Regulatory Authority (VARA) has also taken action against what it deems to be unregulated activity in the crypto space recently.That action together with the approaches taken by Abu Dhabi and at a national level the UAE itself with respect to digital asset licensing is indicative of a territory that is setting out the right foundation upon which to develop the innovative sector. The approach taken by regulators in the UAE has garnered praise from major crypto firms, including Coinbase, who have applauded the region’s proactive stance on regulation.The strengthened regulatory framework is expected to contribute significantly to the UAE’s ongoing efforts to prevent money laundering and the financing of terrorism. By implementing these measures, the UAE aims to safeguard the integrity and stability of its financial and monetary systems while fostering a secure environment for crypto businesses to thrive.Global regulatory effortsThe UAE’s AML guidance comes amid ongoing efforts globally to come to terms with virtual assets. Tomorrow Japan will implement its adherence to the FATF travel rule regulation relative to digital assets. Crypto businesses like bitFlyer are already adjusting to that eventuality, while also implementing a similar standard in international markets.As the UAE continues to position itself as a leading hub for the crypto industry, the introduction of these new AML rules demonstrates its proactive approach to regulation. The collaboration between the Central Bank and other global regulatory bodies, such as the FATF, showcases the UAE’s commitment to international cooperation and the sharing of knowledge and best practices in the ever-evolving crypto landscape.

Korea to Ban Virtual Asset Deposit Services from Next JulyDuring a recent criminal law seminar held at the Supreme Prosecutors’ Office, Park Min-woo, Director of the Capital Markets Bureau at the South Korean Financial Services Commission (FSC), underscored that starting next year, virtual asset service providers (VASPs) will no longer be permitted to offer deposit and management services for virtual assets. That’s according to a report by local crypto news outlet Digital Asset.This is seen as a response to the suspension of virtual asset deposits and withdrawals carried out by virtual asset yield platforms Haru Invest and Delio a few months ago.Photo by Mathew Schwartz on UnsplashLegal backgroundDirector Park referred to Article 7, Paragraph 2 of the Virtual Asset User Protection Act, clarifying that the intention behind this provision is to ensure that VASPs have the ability to fulfill asset withdrawal requests, even in the scenario where all their customers make such requests. This Act is scheduled to go into effect in July of next year, and Article 7 prohibits VASPs from entrusting customer assets to third parties.Deposit service providers receive cryptocurrency deposits and then distribute the resulting yields to their customers. In a bull market, these entities can manage yields on their own. However, in a flat or bear market, these asset managers may face challenges in paying yields unless they can generate profits by handing over customer assets to external custodians.Signs of giving upIn fact, centralized finance (CeFi) company HeyBit made an announcement last month, stating that it will discontinue its virtual asset deposit service starting from October 2. They cited this specific provision as the reason for their decision.Fraud chargesBoth Haru and Delio have been indicted by the Seoul Southern District Prosecutors’ Office on fraud charges.As an unregistered VASP, Haru suspended its deposit and withdrawal services on multiple occasions in June, causing substantial financial losses to numerous investors. This suspension was triggered by significant losses incurred at B&S Holdings, another unregistered entity to which Haru had entrusted virtual assets.Similarly, Delio, although registered, entrusted a considerable amount of virtual assets to Haru and Traum Info Tech but was unable to recover them.