BIONES partners with Bithumb Burrito Wallet for integrated service development

HTX Hacker Returns FundsThe hacker responsible for the nearly 5,000 ETH exploit on the Seychelles-headquartered cryptocurrency exchange HTX (formerly known as Huobi) last month has decided to return the stolen funds.Towards the end of last month, the exchange fell victim to a hack, resulting in a loss estimated at around $8 million. According to on-chain data, the hacker has repatriated the pilfered cryptocurrency, marking a significant development in the aftermath of the cyberattack.Photo by Shubham Dhage on UnsplashHacker rewardedThe returned funds were sent back in two separate transactions, one consisting of approximately 4,000 ETH and the other totaling around 1,000 ETH. HTX advisor and Tron Founder, Justin Sun, took to X (formerly Twitter) to officially confirm the recovery. In his statement, Sun revealed that HTX had not only received all the stolen funds as promised by the hacker but had also extended a gesture of goodwill. HTX rewarded the responsible party with a “white hat bonus” amounting to 250 ETH, equivalent to a substantial $400,000.Sun expressed his satisfaction with the hacker’s decision, stating:“We have confirmed that the hacker has fully returned all funds, as promised, and we have also paid the hacker a white hat bonus of 250 ETH. The hacker made the right choice. We would like to express our gratitude to everyone in the industry for their help.”Hacker advisory messageDuring the return of the funds, the hacker conveyed a message on-chain, shedding light on the reason behind this act of restitution. The message read:“Received your message. White hat bonus to0x1Fc8674A51D6b97C968BE384337519CE7003152B. Your system hot wallet private key leak, you should change system hot wallet address and reduce the system hot wallet rate.”HTX, in response to the hacker’s decision to return the funds and in accordance with its commitment, promptly sent the white hat bonus to the specified address. The exchange also requested the hacker to provide a detailed security vulnerability analysis report to the email address htxsafe@htx-inc.com.This request aims to prevent similar incidents in the future, with assurances that the hacker’s privacy will be safeguarded.Justin Sun had confirmed the original hack in September, at the time reassuring the community that HTX had covered all losses arising from the attack and resolved associated issues satisfactorily.While acknowledging the severity of the hack, Sun pointed out that the stolen amount represented a relatively small fraction of the $3 billion in assets held by HTX’s users. To incentivize the return of the funds, HTX had even offered a reward of 5%, which equated to $400,000.However, Sun also emphasized that if the funds had not been returned within a seven-day window, the company would have been compelled to involve law enforcement authorities.Thankfully, it did not come to that, and the cryptocurrency exchange can now move forward with the confidence that its users’ assets are secure. This incident highlights the importance of cooperation and ethical choices within the crypto community, as well as the potential for resolution even in the face of cyberattacks.

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies. Huoine PayOn July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. Photo by allPhoto Bangkok on Unsplash‘Pig butchering’It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.”  Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.” The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet. The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform. Compromising crypto businessesIn a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications. A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware.  Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

Binance Japan now fully operationalGlobal cryptocurrency exchange Binance has officially commenced full operations in Japan through its locally incorporated Japanese entity, Binance Japan.Photo by Sora Sagano on UnsplashSetting off on a compliant footingFollowing a period of collaboration with regulatory authorities, Binance Japan is positioning itself firmly under the purview of clear regulatory frameworks set by the Japanese authorities.The Japanese government has instituted stringent regulations for cryptocurrency exchanges, aiming to bolster consumer protection, thwart money laundering and create a more secure trading environment. Binance Japan’s decision to align itself with these regulations comes in a year in which the leading crypto platform has encountered regulatory pushback in a whole host of jurisdictions around the world.Under the established regulatory framework, cryptocurrency exchanges in Japan are mandated to secure a license from the Financial Services Agency (FSA), the nation’s financial regulatory body. This licensing process ensures that exchanges adhere to rigorous security measures, maintain robust internal controls and implement protocols for the protection of customers.Phased market entryIt emerged back in May that the company planned to establish a separate Japanese entity. In August Binance Japan started to offer a limited service, enabling access to 34 token listings. In November the firm added 13 further digital assets, with the suggestion that it would eventually offer 100 tradable digital assets.Taking to the X social media platform on Sunday, Sota Watanabe, the founder of Polkadot-centric multichain dApp hub Astar Network and the CEO of Singapore-based Startale Labs, confirmed that Binance Japan is now in full operation. Watanabe wrote:”Binance Japan started its full operation yesterday under clear regulations set by the government, and they have listed Astar from day 1 as one of the first cryptos. I hope more and more Japanese people enter our ecosystem.”Focus on stablecoinsIn a virtual business discussion at the end of August, Head of Binance Japan, Takeshi Chino, set out the company’s vision going forward. Part of the business plans includes potential collaborations on the development of stablecoins. Further news on that pursuit became known the following month when Mitsubishi UFJ Trust and Banking Corporation (MUTB), the trust arm of Japan’s largest bank, announced a collaboration with Binance Japan that will investigate the issuance of public blockchain stablecoins denominated in the local currency, the Japanese yen, as well as other fiat currencies.The full launch of Binance Japan signifies the increasing recognition of cryptocurrencies as a legitimate financial asset class. With a major global exchange like Binance willingly adhering to local regulations, it sets a positive precedent for other exchanges and entities in the region to follow suit.Furthermore, given Japan’s historical significance in the global cryptocurrency market, Binance’s operations in the country could contribute significantly to the broader acceptance and integration of cryptocurrencies into the financial ecosystem. This move aligns with the global trend of heightened institutional interest in digital assets.Binance Japan’s initiation of full operations within a clear regulatory framework marks a further stride forward for both the exchange and the Asian crypto market.