Moomoo adds more cowbell with MAS license approval

A Cambodia-headquartered financial group recently cut off from the U.S. financial system is suspected of having operated in South Korea, raising fresh questions about cross-border crypto and currency flows tied to the group. According to the Dong-A Ilbo, which cited data from the Korea Customs Service (KCS), Huione Group—now sanctioned by the U.S. Treasury Department’s Financial Crimes Enforcement Network (FinCEN)—appears to have run a currency exchange in Seoul from 2018 to July 2024. The outlet reported that a banner on the premises displayed a logo identical to Huione’s, prompting suspicions about its ownership and control.Photo by Aleksandar Pasaric on PexelsTies to North Korean hackersThe exchange reported conducting roughly $20,000 in annual currency conversions during that period, excluding cryptocurrency transactions. The timeline overlaps with a period in which Huione Group reportedly received $150,000 in cryptocurrency from the North Korean hacking group Lazarus.  Connections also extend to Cambodia. Panda Bank—a local lender that shares a building with Huione subsidiaries—supports USDT transactions originating from South Korea. Panda Bank director He Yanming is listed as the owner of Huione Crypto, a virtual asset service provider (VASP), suggesting potential links between operations in Seoul and Phnom Penh. These developments come against the backdrop of a U.S. investigation disclosed in May, in which FinCEN said Huione’s business networks, including payments arm Huione Pay, collectively laundered at least $4 billion in illicit proceeds between August 2021 and January 2025. Crypto used in $2.6B illegal conversionsMeanwhile, recent KCS data also shows a rise in illegal currency conversions involving cryptocurrency by foreign nationals. The Korea Economic Daily reported conversions totaling 432 billion won ($302 million) in 2021, climbing to 836 billion won ($584.5 million) in 2023 and 956 billion won ($668.4 million) last year. Over the past eight years, the total amount involved in such cases reached 3.7 trillion won ($2.59 billion) across 28 instances. By value, Chinese nationals accounted for 84.1% of the total, followed by Australians (11.1%), Vietnamese (3.2%), and Russians (1.6%). The growing prevalence of cryptocurrency in illicit activity parallels a broader surge in crypto investment within the country. Many South Koreans have turned to digital assets, often with home ownership as a long-term goal. Trading on local exchanges, Bloomberg reported, is heavily skewed toward more volatile altcoins, which make up more than 80% of total volume.  That stands in contrast to global markets, where investors largely focus on Bitcoin and Ethereum, which together make up more than half of overall trading. The momentum in local crypto investment intensified after Donald Trump’s U.S. presidential victory, with crypto trading in Korea reaching $27 billion in December 2024, about 80% of turnover on the KOSPI stock index. The investigation underscores the growing challenge for regulators in tracking and containing cross-border financial networks that rely on cryptocurrency and informal money transfers. As crypto adoption deepens in South Korea and scrutiny widens abroad, authorities find themselves navigating an increasingly intricate intersection of financial opportunity, enforcement, and risk. 

Philippines breaks new ground in first-ever tokenized bonds saleThe Philippines is set to offer the country’s first tokenized treasury bonds, a novel way of issuing debt securities using blockchain technology.Photo by Mara Rivera on Unsplash$179 million tokenized bond issuanceAccording to a report by Bloomberg on Thursday, the Bureau of the Treasury announced that it will issue 10 billion pesos ($179 million) of one-year tokenized bonds next Monday after canceling the conventional auction scheduled for the same day. The bonds will be issued by the Development Bank of the Philippines, a state-owned entity, together with the Land Bank of the Philippines.The tokenized bonds will be sold to institutional investors at a minimum denomination of 10 million pesos, with increments of 1 million pesos. The bonds will have a one-year validity, maturing in November 2024. The treasury bond interest rate has yet to be determined and will be confirmed on the date of issuance.Deputy Treasurer Erwin Sta said that the government is exploring the potential of tokenizing real-world assets and bonds and will “continue to study the technology and test how far we can take it.”Tokenization is the process of converting physical or digital assets into digital tokens that can be stored, transferred and traded on a blockchain network. Tokenization can offer several benefits, such as lower costs, faster transactions, greater transparency and enhanced security.Asian surge in tokenizationThe Philippines is not the only Asian country that is experimenting with tokenized bonds. This latest bond tokenization project follows hot on the heels of a similar move in Singapore. Earlier this week, British banking conglomerate Standard Chartered, through its Singapore-based fintech investment subsidiary SC Ventures, unveiled a new platform called Libeara. Libeara is gearing up to offer the first-ever tokenized Singapore-dollar government bond fund.In February, Hong Kong issued $100 million of tokenized green bonds under its Green Bond Programme, using Goldman Sachs’ tokenization protocol. The tokenized green bonds, a first-of-its-kind issuance, have a one-year validity and aim to support environmental projects in the region.Authorities in Singapore have also launched a series of pilots on tokenizing real-world assets in collaboration with JPMorgan, DBS Bank, BNY Mellon and Apollo, an investment firm. The pilots will test the feasibility and efficiency of tokenizing assets such as equities, bonds and funds. The United Arab Emirates (UAE) partnered with HSBC to conduct the tokenization of bonds as well.The tokenization of real-world assets is not limited to Asia. Israel’s Tel Aviv stock exchange completed a proof-of-concept for tokenizing fiat and government bonds, demonstrating the potential of blockchain technology to transform the capital markets.The tokenization of real-world assets using blockchain technology is a growing trend among governments and financial institutions. According to the Boston Consulting Group, tokenized assets could reach a market capitalization of $16 trillion by 2030. By issuing tokenized bonds, the Philippines is joining the ranks of the pioneers in this field, opening up new possibilities and opportunities for the crypto industry and the economy as a whole.

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures.