Wemade to unveil upgraded DAO platform Wepublic in February

SEBA Bank Receives Conditional Approval for Crypto Services in Hong KongSwiss-based crypto-centric SEBA Bank has secured conditional approval from Hong Kong’s Securities and Futures Commission (SFC) to offer crypto services within the autonomous Chinese territory.While there are stipulations yet to be met before the license is fully granted, the development marks a significant progression when it comes to SEBA’s global business ambitions.Photo by Ruslan Bardash on UnsplashExpanding in AsiaThe “approval-in-principle” comes as part of SEBA’s strategic efforts to expand its foothold in the Asian crypto market. Once the conditions are fulfilled and the license is formalized, SEBA will be well positioned to provide Hong Kong with a range of comprehensive crypto services.This includes securities dealing encompassing crypto-related structured products, as well as consultation and management of both digital assets and traditional securities. SEBA sees potential in the offering of derivative products as it has identified demand for derivatives and structured products within the Asian crypto market.This step forward for SEBA follows earlier reports that the bank was actively growing its workforce in pursuit of digital asset licenses for both Hong Kong and Singapore. The company has grown its headcount from seven to 20 across these locations, as it looks to establish a strong presence in the Asian market.The move aligns with Hong Kong’s evolving stance on cryptocurrency and digital finance. Introduced in June, the virtual asset service provider (VASP) license was intended to regulate virtual asset services within Hong Kong’s legal framework. Currently, only two crypto exchanges have secured these licenses.Cryptocurrency exchange HashKey, alongside digital assets platform OSL, became one of the first licensed crypto exchanges in Hong Kong recently. Since then, it has expanded its offerings to retail users, allowing them to purchase Bitcoin and Ethereum using US dollars. Leading up to that licensing approval, it had also launched a wealth management service for high-net-worth individuals and institutional investors. The majority of publicly accessible VASPs remain unregulated, according to a recent statement by the SFC.Regulatory balanceThe Hong Kong Monetary Authority (HKMA) has also shown interest in fostering relationships between established financial institutions and crypto exchanges, further signaling the region’s growing engagement with the crypto space. It’s also pointing towards getting the balance right between enabling digital asset innovation and having sufficient regulation in place to protect investors. In May, its CEO, Eddie Yue, stated that Hong Kong wouldn’t be a place for light touch regulation.The licensing process in Hong Kong hasn’t been without its difficulties. The interest in obtaining crypto trading licenses caught the SFC flat footed as it found itself understaffed to work through the licensing applications that arrived at its door. The backlog prompted commentary from SEBA’s CEO for the Asia Pacific (APAC) region, Amy Yu, back in May, with Yu highlighting that the backlog had increased significantly over the course of nine months.While SEBA has broken into the market in the APAC region via its efforts in Hong Kong, it’s understood that the bank has plans to develop its business in Singapore further over the course of the coming months.

Singapore-based Marketnode has successfully completed its Series A investment round, receiving backing from global banking leader HSBC and its existing shareholder, Temasek. While the precise funding amount remains undisclosed, the firm plans to utilize the capital to expand its financial market infrastructure. Marketnode aims to develop neutral infrastructure for digital fixed-income and structured products, initially focusing on the Asia-Pacific region. This initiative is part of a broader strategy to create a comprehensive multi-asset ecosystem.Photo by Markus Winkler on UnsplashStrategic collaborations and future projectsRehan Ahmed, President of Marketnode, highlighted the strategic alliance with HSBC as a pivotal move towards establishing the next generation of trusted and neutral market infrastructure. The investment will also accelerate the launch of Fundnode, a new investment fund infrastructure powered by distributed ledger technology. Additionally, the collaboration will support future offerings of tokenized assets. Marketnode has been engaging with HSBC since 2020, including participation in Singapore's Project Guardian and various digital bond initiatives led by the Monetary Authority of Singapore. Regulatory landscape in SingaporeSimultaneously, Singapore continues to tighten regulations within its crypto sector. Following its stringent licensing framework, the Singaporean authorities recently announced an expansion in the scope of companies regulated under its payment services rules. This measure aims to enhance supervision of digital asset firms, focusing on anti-money laundering efforts and user protection. 

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.