Top

CoinGecko security breach latest threat within crypto space

Web3 & Enterprise·January 12, 2024, 1:51 AM

The crypto space continues to suffer a disproportionate share of hacks and scams that were further exacerbated on Wednesday, with Malaysian crypto data aggregator the latest to succumb to a security breach.

 

Serving as yet another stark reminder of the persistent threats plaguing the sector, a phishing scam targeted CoinGecko's X account, leading to a brief compromise that raised concerns about the safety of user information.

https://asset.coinness.com/en/news/665e08d0b2b6f1b715f8ec42a31003c6.webp
Photo by GuerrillaBuzz on Unsplash

Phishing scam

During this incident, hackers posted a phishing link on CoinGecko's X account, falsely advertising a token airdrop for a cryptocurrency named GCKO. The deceptive post claimed that GCKO could be used for API services, including the cryptocurrency ANKR. Swift action by CoinGecko involved the removal of the fraudulent post and a public warning urging users to avoid interacting with any suspicious links or content.

 

In an X post, CoinGecko wrote:

”Our Twitter accounts @CoinGecko and @GeckoTerminal have been compromised. We're taking immediate steps to investigate the situation and secure our accounts. Please DO NOT click on any links or engage with suspicious content. Your security is our top priority.”

 

Employee error

The firm followed up with an update on Thursday, attributing the breach to a team member inadvertently clicking on a fraudulent Calendly link, granting unauthorized access to the hacker.

 

Despite having two-factor authentication (2FA) enabled and employing robust security measures, CoinGecko emphasized that the inadvertent click allowed unauthorized access. The compromised accounts were then exploited to disseminate misleading information and potentially engage in malicious activities.

 

CoinGecko expressed sincere apologies for any confusion or inconvenience caused by the incident. The company reiterated its commitment to platform security and continuous improvement of internal controls, assuring users that corrective measures were promptly implemented.

 

SEC incompetence

CoinGecko's security incident occurred within 24 hours of a similar occurrence involving the U.S. Securities and Exchange Commission (SEC). The SEC's X account was compromised, with scammers posting a false message from Chair Gary Gensler about the approval of spot bitcoin exchange-traded funds (ETFs).

 

While CoinGecko identified a vulnerability in its security regimen, the SEC later confirmed that the breach in its case was far more basic. It was not due to infrastructure attacks but rather the lack of 2-factor authentication (2FA) tied to the SEC's account, the most basic form of operations security.

 

Gensler and the SEC have come in for major criticism from the crypto community in the U.S. due to a policy of regulation by enforcement that has been pursued. With that, the Commission came in for swift and harsh criticism in the immediate aftermath of its X account hack.

 

Many pointed out the irony of Gensler advising consumers to secure their accounts back in October when the SEC itself had failed to do so. Others queried who would be responsible for what some interpreted as an episode of market manipulation, something that the SEC has perennially associated the crypto markets with. During the time that the account was compromised, millions of dollars of value were liquidated in short and long trading positions.

 

CoinGecko's quick response serves as a valuable lesson in the importance of vigilance and proactive security measures amid the growing threats facing the cryptocurrency community.

More to Read
View All
Markets·

May 23, 2024

Japan’s largest bank collaborates with KlimaDAO on carbon credit marketplace

Japan’s largest bank, MUFG, has teamed up with KlimaDAO Japan, the provider of a digital reserve currency backed by carbon credits, to explore the use of the JPYC stablecoin for settling tokenized carbon credit transactions on the Progmat blockchain platform. Settlement on ProgmatProgmat provides the infrastructure to enable the issuance of various stablecoins. Last September, MUFG announced a collaboration with Binance geared towards stablecoin issuance. The JPYC stablecoin, operational since 2021, functions as a prepaid money instrument, similar to a prepaid card, due to its existence before Japan’s stablecoin legislation. Under new regulations, JPYC can either obtain a money transmitter license or issue a trust-style stablecoin with a bank like MUFG acting as the trustee for the stablecoin's reserves. Last year, JPYC formed a partnership with MUFG implicating the use of the Progmat platform.  This partnership, along with the involvement of Kansai Electric subsidiary Optage as the integration partner, sets the stage for the KlimaDAO stablecoin experiments. Optage will provide the corporate infrastructure required to manage the carbon credits added to the blockchain and provide a means for funds settlement to be achieved via bank transfer. Through the use of various local stablecoins for the purpose of settlement, it’s hoped that improved liquidity on a global basis may be achieved.Photo by Dan Meyers on UnsplashInitially recognized for making tokenized carbon credits accessible on public blockchains, KlimaDAO's functionality extends beyond this. The organization also offers the capability to retire credits. Last year, KlimaDAO expanded its reach by launching Carbonmark, an enterprise-focused marketplace.  This platform, which utilizes blockchain technology, namely Polygon, and smart contracts, offers a user-friendly experience by integrating traditional payment methods like bank transfers and SAP integration.  J-CreditsJapan operates a national scheme known as J-credits, and the Tokyo Stock Exchange has introduced a secondary market for these credits. J-credits are designed to certify the amount by which greenhouse gas emissions have been reduced through the use of carbon sinks in Japan. However, the volume of J-credit transactions remains low, reflecting the broader state of Japan's voluntary carbon market.  KlimaDAO aims to address this by launching the KlimaDAO Japan Market, simplifying the process for domestic companies to purchase and utilize carbon credits. This initiative will involve tokenizing J-credits, referred to as D-Carbons.  Andrew Bonneau, KlimaDAO co-founder, outlined on X that “@KlimaDAO is in a unique position to facilitate an efficient J-Credit market on chain, while serving as the base infrastructure for integrating these assets with 3rd party services.” While the initial phase will use traditional bank payments, the ultimate goal is to transition to using stablecoins, particularly the JPYC stablecoin. Norbert Gehrke, an observer of developments within the Japanese fintech scene, outlined on Medium that the Japanese carbon credit market is likely to reach three trillion yen ($19.15 billion) by 2030. Meanwhile, the global carbon credit market has a current value of 39 trillion yen ($249 billion). KlimaDAO Japan has mentioned the use of a permissionless blockchain for this initiative but has fallen short of confirming that the Polygon network will be relied upon. Japan has several homegrown blockchains, which might be considered for this project.  At the time of writing, the KLIMA token had risen 31% over the course of the previous 24 hours, with a unit price of $3.53 according to CoinGecko. 

news
Policy & Regulation·

Sep 25, 2023

The Need for Crypto Regulation Improvements in South Korea

The Need for Crypto Regulation Improvements in South KoreaAlthough the cryptocurrency market entered a bearish phase last year, there are prospects for growth as regulatory inclusion and market transparency begin to improve. However, the domestic market is currently hindered by deepening monopolies and inadequate support policies, limiting the development of the industry, said Kim Jin-won, Executive Director of Korean crypto exchange COREDAX, during a conference last Friday in Seoul.The conference, hosted by the Federation of Korean Industries, invited experts to discuss the oncoming era of convergence and the current status and challenges of virtual asset legislation in South Korea, as well as the necessary steps for improving regulations on virtual assets.Photo by Kanchanara on UnsplashGlobal decentralization trendsOverseas, various decentralized projects, such as the integration of blockchain technology into traditional financial markets, have led to the growth of related markets such as Bitcoin futures, decentralized finance (DeFi), over-the-counter (OTC) trading, custodial services, the metaverse, and Web3. However, in Korea, the lack of clear guidance or policy management for crypto businesses and services prevents the market from thriving.Countries like the US and Japan as well as the European Union (EU) are overhauling regulations in order to dominate the global industry and market through blockchain technology and virtual assets. Kim emphasized that Korea also needs to incorporate such flexible regulatory improvements considering the likely possibility that various industries are going to thrive on crypto-related businesses.Challenging existing regulations and calls for clarityHe started off by stating that the implicit regulation known as the “One Exchange, One Bank” principle was created for administrative convenience and is acting as a barrier to entry into the crypto industry. He argued that it is a discriminatory regulation, especially considering the fact that securities firms choose to operate stock trading accounts through multiple banks.Regarding the standards for issuing bank accounts under real names, which will be determined by the Financial Intelligence Unit (FIU), he argued that they are difficult to comply with, even for banks that already have contracts with crypto exchanges. He called for the FIU to express a clear stance on the retroactive application of these standards to avoid potential consequences such as barriers to market entry for late-movers.“The crypto market — including DeFi, non-fungible tokens (NFTs), artificial intelligence (AI), the metaverse, and Web3 — is growing at an annual average rate of 12.8%, and is expected to reach a scale of $4.9 billion by 2030,” he said. “When combined with Web3 innovation, the metaverse will evolve into a 3D platform business that incorporates the use of payment methods, NFTs, and virtual assets.”Promoting innovation in the crypto industryTo foster such industry growth, it is necessary to actively explore new types of services as well as potential challenges. Innovative financial services should also be designated or promoted through regulatory sandboxes. The regulatory sandbox is a system run by the Korean government that exempts or suspends existing regulations for a designated amount of time for companies releasing new products and services and regulates them post-mortem if there is a problem.Kim went on to propose specific measures such as negative regulations — regulations that outline what is prohibited by law while allowing everything else — to promote new industries. He also suggested that banks should be allowed to engage in custodial services for virtual assets.Furthermore, he highlighted the need for cooperation between payment companies and crypto firms. “Payment service providers like Visa and Mastercard are already collaborating with global crypto exchanges to incorporate virtual assets into their businesses,” he said. “With companies like Tesla, eBay, and more adopting or considering adopting cryptocurrency as a payment method, we must consider allowing collaborations between domestic credit card companies, payment gateway companies, and crypto firms.”He also urged for the early approval of initial exchange offerings (IEOs) to stimulate the crypto market and advocated for support policies for virtual asset service providers (VASPs). He cited examples such as brokering transactions for security tokens, allowing OTC trading, requesting security token issuance assessments through system integration with account management agencies, and permitting outsourcing for issuance operations.

news
Web3 & Enterprise·

Jan 05, 2024

OKX Wallet now supports WEMIX3.0 mainnet

Seychelles-based crypto exchange OKX’s Web3 wallet service, OKX Wallet, has begun supporting Wemade’s blockchain network WEMIX3.0, according to an announcement on Friday (KST). This development will allow OKX Wallet holders to directly manage the crypto assets that they hold from the WEMIX3.0 ecosystem. Photo by GuerrillaBuzz on UnsplashSeamless access and versatile Web3 servicesOKX Wallet notably supports over 70 networks and 3,000 cryptocurrencies and provides other wide-ranging Web3 services like NFT trading, crypto swaps and a decentralized finance (DeFi) platform. In particular, it also has a hassle-free recovery process for account access that employs Multi-Party Computation (MPC) technology, effectively eliminating the need for traditional recovery methods like seed phrases.  OKX Wallet and WEMIX3.0 also vowed to work on more integrations and joint campaigns in the future to round up a larger global user base and lead the era of Web3.  A rising force in cryptoIn other news, WEMIX3.0’s governance token, WEMIX, has been making a significant impact in the crypto industry. The asset ranked ninth in CoinMarketCap’s list of largest blockchains in crypto ranked by total value locked (TVL) last month, and it possessed the largest constituent weight in terms of market capitalization in the gaming sector in the latest Crypto Sector Indices released by Sygnum, a global digital asset banking group headquartered in Switzerland and Singapore. 

news
Loading