JPMorgan Adopts Blockchain for 24/7 Interbank Transactions in India

Taiwan Proposes New Crypto Business CategoryWith regulation having trailed the crypto innovation, more recently it seems like every day brings further developments, with the latest installment seeing Taiwan take a significant step forward. Officials in Taipei are proposing the classification of crypto regulations within their own novel business category.Photo by Jack Brind on UnsplashFostering self-regulationThe move aims to potentially allow cryptocurrency-related companies to establish industry associations, ultimately fostering the creation of self-regulatory guidelines. The Ministry of Economic Affairs, in a recent announcement, unveiled its draft amendment to the Standards of Classification of Commercial Group regulations. This proposed amendment centers on the inclusion of a distinct category for digital asset services.An official from the economic ministry informed The Block that the freshly introduced business category outlines the scope of operations within the cryptocurrency sector. This encompasses various activities, such as cryptocurrency to fiat or digital token exchanges, facilitating cryptocurrency transfers, offering services for crypto storage and management, and providing assistance related to cryptocurrency issuance or sales.The official further elaborated that cryptocurrency firms will be permitted to form industry associations once the proposed business category is successfully incorporated into the relevant regulations. Seeking public input, the ministry anticipates finalizing the amendment in collaboration with the Ministry of the Interior in either mid- or late-October.Encouraging trade associationsBy allowing the establishment of industry associations, cryptocurrency companies can proactively devise self-supervisory rules that address industry-specific challenges and concerns. This move is anticipated to bolster transparency, security, and responsible conduct within the cryptocurrency ecosystem.Taiwan’s approach to virtual asset services providers (VASPs) has mandated compliance with anti-money laundering laws since the implementation of anti-money laundering regulations by the Financial Supervisory Commission in July 2021. However, the overall industry remains relatively unregulated within the country.Binance, the world’s largest cryptocurrency exchange, has recently embarked on the process of obtaining registration for anti-money laundering compliance under the FSC.Regulatory guidelines being draftedAs the regulatory landscape evolves, Taiwan’s FSC, which assumed its role as the principal regulator overseeing the crypto industry in March, is actively formulating comprehensive guidelines. These guidelines will cover trading and payment aspects associated with cryptocurrencies for VASPs.An FSC official revealed that the agency plans to unveil the VASP guidelines by the end of September. It’s understood that the guidelines will comprise thirteen regulatory principles. It’s believed that the issuance of crypto assets will be permitted but that stablecoin issuance will be prohibited. One prerequisite for the issuance of digital assets will be a requirement to accompany that issuance with a comprehensive whitepaper, detailing fundamental and necessary information that investors can review, relative to the token offering.Taiwan’s proposition of a novel business category signifies a pivotal move towards enhanced self-regulation and industry cohesion within the cryptocurrency sector. As the regulatory framework takes shape, the introduction of self-regulatory guidelines is poised to contribute to the responsible growth of the cryptocurrency industry in Taiwan.

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

KICA partners with PiLab and CODE for Web3 authentication servicesThe Korea Information Certificate Authority (KICA) has signed a memorandum of understanding (MOU) with two new business partners — dApp provider PiLab and CODE, a Travel Rule solutions provider and joint venture co-founded by Korean cryptocurrency exchanges Bithumb, Coinone and Korbit — according to local news outlet Kyunghyang Games. The three companies’ CEOs attended the signing ceremony and vowed to establish a credible authentication system to contribute to a healthy Web3 environment.Photo by GuerrillaBuzz on UnsplashEstablishing secure and compliant solutionsThrough this collaboration, the companies plan to leverage their respective capabilities to develop and distribute Web3 authentication services that comply with virtual asset service providers’ (VASPs) Know Your Customer (KYC) verification procedures as well as international standards such as the crypto Travel Rule. “We aim to create a secure and efficient environment for both providers and users of various Web3 services in line with global regulatory trends,” explained Park Do-hyun, CEO of PiLab.Setting new standardsKim Sang-jun, CEO of the KICA, anticipates that the KICA’s expertise and capabilities in identity verification and security authentication in Web2 would help the collaboration become a new benchmark in the Web3 authentication industry. “Eventually, we will expand our services to include SoulBound tokens (SBTs), enhancing identity verification, license certification and attribute certification, solidifying our position as a leading company in the Web3 industry,” he said.Furthermore, CODE CEO Lee Sung-mi emphasized the importance of complying with international standards like the crypto Travel Rule for a healthy Web3 service environment. She also pledged to ensure that CODE would use its capabilities to establish a solid connection between VASPs and the Web3 service market.This collaboration represents a strategic move towards shaping the future landscape of Web3 authentication and security services, combining the strengths of these companies to meet the evolving needs of the industry.