TRES secures $11M funding to expand multi-chain tax reporting

Korbit and SK Planet Team Up to Promote NFT Membership ProgramKorbit, one of South Korea’s prominent cryptocurrency exchanges, has teamed up with SK Planet, a technology affiliate of the major conglomerate SK Group, in an effort to attract new users to Road to Rich, a non-fungible token (NFT) membership program.Photo by Mo on UnsplashWin up to 0.1 BTCUnder this collaboration, Korbit users will have the opportunity to win up to 0.1 BTC by completing assigned tasks. From those participating, 511 fortunate individuals will be selected as winners. The breakdown of prizes is as follows: 500 participants will earn 0.001 BTC each as third place winners; 10 second place winners will receive 0.01 BTC each; and the single top winner will be awarded the grand prize of 0.1 BTC.Quests, rewards, and rabbit NFTsRoad to Rich was introduced earlier this month by OK Cashbag, a popular customer rewards system offered by SK Planet. Road to Rich offers users daily quests involving rabbit character NFTs. Successful completion of these tasks allows users to gain various benefits, such as OK Cashbag points, which can be used at hypermarkets, restaurant chains, and other partner businesses. To participate in Road to Rich, users need to install the UPTN Station, a decentralized wallet developed by SK Planet, which allows storage, retrieval, and transfer of NFTs.According to a report by local news outlet Newspim, Oh Se-jin, CEO of Korbit, expressed the crypto exchange’s excitement about participating in the expansion of SK Planet’s Web3 ecosystem. Oh said that Korbit is committed to collaborating with SK Planet to deliver more convenient and valuable services to customers in the Web3 space.

BitKeep Changes Name to Bitget Wallet Following AcquisitionContinuing the trend set by industry giants like Binance, KuCoin, and OKX, cross-chain wallet provider BitKeep has undergone a transformation, rebranding itself as Bitget Wallet. This strategic shift comes on the heels of the wallet’s acquisition by the prominent Seychelles-headquartered crypto exchange, which acquired a controlling stake for $30 million in March.Photo by Jon Tyson on UnsplashBitget Swap unveiledThe rebranding announcement, made on August 10, coincides with the unveiling of Bitget Swap, a novel cross-chain swap mechanism integrated into the wallet. This innovative feature draws liquidity from a network of approximately 100 decentralized exchanges spanning across 20 chains. The move positions Bitget Wallet as a versatile platform catering to traders seeking fluidity and efficiency across diverse cryptocurrencies.Bitget Wallet users are set to benefit from an enticing proposition as the exchange merges its offerings. A collective Bitget User Protection Fund, boasting a substantial $360 million pool, has been established.The fund is anchored by 6,500 Bitcoin, ensuring robust safeguards against security incidents. This initiative finds its origins in the wake of the FTX exchange collapse last November, with the fund’s value boosted by a subsequent $60 million capital appreciation due to the rally in Bitcoin prices.The synergy between the two businesses has already borne fruit for Bitget. Last month, it clarified that it had surpassed 20 million users, with the wallet integration believed to be responsible for a large part of that user growth.Growing painsBitKeep’s past wasn’t without its challenges. A security breach occurred in December when the wallet’s Android Package Kit (APK) was compromised by malware, causing losses of around $8 million among users who had installed the compromised package. In a commendable move, the company fully compensated the affected users on March 29, signaling its commitment to rectifying such setbacks.Moka Han, Chief Operating Officer of Bitget Wallet, underscored the wallet’s security-focused approach. Han revealed that cross-chain bridges are subject to stringent third-party security audits by notable entities like SlowMist and CertiK before deployment. Rigorous post-deployment monitoring further guarantees a resilient security environment.Payment channel integrationIn its recent evolution, Bitget Wallet has integrated five stable payment channels, including Banxa, Simplex, Alchemy Pay, MoonPay, and FaTPay. These integrations empower users to conveniently purchase cryptocurrencies within the wallet using methods such as credit cards, Google Pay, and Apple Pay. Additionally, the wallet has introduced a peer-to-peer marketplace, characterized by comprehensive security measures that protect both buyers and sellers.Bitget Wallet’s appeal extends far and wide across the Asia Pacific (APAC) region, boasting an impressive user base exceeding 10 million individuals. This figure constitutes nearly half of MetaMask’s user count, signifying the wallet’s considerable popularity.The company didn’t allow the rebrand milestone to pass without taking the opportunity to further promote its offering. On Thursday, it commenced a “Mystery Box Airdrop” event, offering new Bitget Wallet users the opportunity to claim individual rewards of up to 1,000 USDT.Biget’s wallet integration is in line with the changing landscape of crypto exchanges generally, with other prominent players such as OKX, KuCoin, and Binance having also ventured into the realm of self-custody wallets, enhancing their service offerings beyond traditional exchange operations.

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.