First Digital to Introduce USD-Backed USD Stablecoin

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Binance, in collaboration with Gulf Innova, a subsidiary of Gulf Energy Development, has officially opened its joint venture crypto exchange, Binance Thailand, for public trading. Challenging the market incumbentThis move had been eight months in the making, signaling Binance's entry into the Thai crypto exchange market, following an announcement in 2023 that it intended to extend its offering to Thailand. While Binance is the largest global crypto exchange platform, in Thailand it will be challenging the dominance of an incumbent exchange. Bitkub is based in Bangkok, currently holding around 77% of the market share, with a daily volume of approximately $30 million, primarily trading the Thai baht and Tether USDT pair.Photo by Sara Dubler on UnsplashRegulatory approvalThe launch comes after Binance received regulatory approval from the local Securities and Exchange Commission (SEC) in 2023. Initially introduced on an "invitation-only" basis, the exchange is now accessible to all eligible users, with Binance having followed through on its plans to expand its presence in the region. In a statement released on Tuesday, Binance TH announced the implementation of a dedicated order book tailored for Thai baht trading pairs. Users can seamlessly deposit and withdraw local currency through integration with domestic banking systems. Binance has managed to push its service offering forward in Thailand despite regulatory concerns. In the aftermath of the company’s $4.3 billion settlement in relation to securities law violations with the authorities in the United States in November, concerns had been expressed that the charges brought against the firm in the U.S. would challenge the feasibility of the Binance TH venture. At present, the platform focuses solely on spot trading, with a Binance spokesperson revealing ambitious long-term plans for additional services pending regulatory approvals. Nirun Fuwattananukul, CEO of Gulf Binance, expressed gratitude, stating:"We are deeply humbled to finally announce the launch of our local platform to the general public in Thailand. Over the past year, we have been working closely with Thai regulators, putting substantial effort into detailed planning." Binance TH facilitates digital asset exchange services, collaborating with local banks in Thailand in enabling its service offering. The exchange has also partnered with Binance Kazakhstan for brokerage services, operating under the supervision of Thailand’s SEC. Richard Teng, CEO of Binance, emphasized the strategic significance of the venture, stating:“This is a strategic step forward, setting the stage for Thailand’s impending role as a key player in the global digital finance landscape.” No access for foreignersOne limitation of the service pertains to foreign nationals. There is a restriction on access for foreigners residing in Thailand, as Binance TH requires a Thai National Digital ID to complete Know Your Customer procedures. Despite regulatory challenges and tax implications on overseas income from stock and crypto traders announced by the government in September 2023, Binance remains optimistic about the future of crypto trading in Thailand. The exchange released its themes for 2024 report on Jan. 15, outlining key growth areas such as the Bitcoin ecosystem, ownership economy applications, artificial intelligence, real-world assets, on-chain liquidity and institutional adoption.

Japanese crypto exchange DMM Bitcoin announced on Friday that over $300 million worth of Bitcoin was stolen from its primary wallet, marking one of the digital asset industry's largest hacks in recent years.Photo by Kanchanara on UnsplashHack confirmed without further detail"At approximately 1:26 p.m. on Friday, May 31, 2024, we detected an unauthorized leak of bitcoin from our wallet," the company stated, based on an English translation of its original statement in Japanese, which had been posted on the firm’s website. DMM Bitcoin is a subsidiary of DMM Group, which incorporates businesses covering a broad spectrum of activities including solar energy, gaming, 3D printers, FX, e-books and software. The company has, as yet, not provided any further detail relative to the manner in which the hack occurred. Notwithstanding that, DMM Bitcoin did confirm that measures have been taken to prevent any repeat of the hack. Furthermore, the company outlined that a full investigation into the hack is ongoing right now. Buy orders and leverage trades suspendedThe company has moved to reassure platform users that their digital assets are fully guaranteed. It stated: "Please rest assured that all of your bitcoin deposits will be fully guaranteed, as we will procure the equivalent amount of BTC that was leaked with support from our group companies."  The exchange has taken the decision to temporarily suspend a number of activities, including spot trading buy orders and the opening of leveraged trading positions. A temporary halt has been imposed on crypto withdrawals while Japanese yen withdrawals are permitted, albeit that the exchange suggests that service users may experience delays. Blockchain security sector responseIn light of the hack, a number of well-known blockchain security firms have been giving the matter their attention. Beosin, a blockchain security specialist, outlined that it is continuing to monitor the wallet addresses implicated in the hack, with a view towards tracing any further movement of the funds. Meanwhile, blockchain analysis firm Arkham Intelligence has offered a 1,000 ARKM token bounty to anyone who may provide information leading to the identification of the perpetrators of the hack. Blockchain analysis firm Chainalysis described the hack as “the 7th largest crypto hack ever.” The company has labeled the stolen funds within its products. Broader industry implications and historical contextThis hack is a significant blow to the industry, given that a hack on this scale has not occurred thus far in 2024 or at any point during 2023. The crypto industry has faced numerous significant breaches in the past. In 2022, a series of large-scale exploits targeted layer-1 blockchains, crypto exchanges and DeFi protocols. The largest hack amongst them implicated the BNB Chain (formerly Binance Smart Chain), which resulted in the loss of $566 million worth of BNB. The latest hack is second only (within Japan) in size relative to the 2018 hack of Coincheck, one of the country’s largest exchanges, when over $550 million worth of XEM was stolen. Japan was also host to the most infamous Bitcoin hack, that of the Mt. Gox exchange, whose bankruptcy administrators moved $9 billion worth of its remaining Bitcoin holdings on the blockchain in recent days for the first time in many years.