Top

Telcoin makes users whole in exploit recovery

Web3 & Enterprise·January 13, 2024, 10:31 AM

Singapore-regulated Telcoin, a developer of financial applications for mobile users, has successfully restored user balances following an exploit that saw approximately $1.2 million worth of funds transferred from affected accounts.

https://asset.coinness.com/en/news/3c1766686bc03dc8348603085a3f1f51.webp
Photo by Martin Sanchez on Unsplash

Unauthorized withdrawal of assets

The incident, which occurred in late December, was attributed to an error in the interaction between Telcoin's digital wallet and a proxy contract on Polygon. In a blog post which was published on Wednesday, the company shared a full post-mortem analysis report which it commissioned Hong Kong-based blockchain security firm BlockSec to carry out, relative to the exploit.

 

The fault in the proxy contract's implementation caused a technical conflict that allowed for the unauthorized withdrawal of assets. Fortunately, no admin keys were compromised, ensuring that the broader Telcoin ecosystem remained unaffected.

 

In response to the security breach, Telcoin took action by immediately freezing the use of its application as a precautionary measure. The team initiated an investigation and committed to releasing updates promptly to address the issue and restore normalcy. The identified address associated with the exploit was 0x35d2775e5f95596509951b140d68fc5b9185ff98.

 

TEL token freefall

Despite the initial market turbulence, with the price of the Telcoin (TEL) token plummeting, the cryptocurrency has demonstrated resilience. On Dec. 25, TEL fell from a peak price of $0.00235146 to $0.00122535, representing a 48% decrease. At the time of writing, the price has slightly rebounded, trading at $0.001335. Nevertheless, it's still down 40% over the course of the past month's trading.

 

In a social media direct message to CoinDesk recently, Telcoin's founder and CEO, Paul Neuner, expressed pride in how his team responded to the issue, stating:

 

“Making the decision to preemptively restore affected user wallets from our company treasury was a no-brainer, and I’m proud of the team for making that happen in record time.”

 

Regulatory standing

Telcoin's regulatory standing played a crucial role in instilling confidence during this challenging time. Although headquartered in Tokyo, the company is regulated in Singapore as a Major Payment Institution (MPI) by the Monetary Authority of Singapore (MAS).

 

The firm is also registered and regulated in other global markets, including Canada and Australia. Telcoin maintains offices in Singapore, Tokyo, Dubai and Los Angeles. The company had been active in trying to shape regulation in the United States in 2023, with company executives having made repeated visits to Washington D.C. to meet with Financial Services Committee members and staffers on Capitol Hill.

 

In April of last year, the company extended its service offering to the European market, starting out initially in Lithuania.

It appears that the restoration of Telcoin's application services led to a significant boost in user confidence. The company reported a 400% increase in deposits compared to the previous month. Users responded favorably to Telcoin's swift resolution of the security breach, with a ratio of $3.60 being deposited for every $1 withdrawn in the first day since the service restoration.

 

Telcoin's measures, collaboration with security experts and the surge in user deposits appear to have resulted in a resilient recovery. The saga highlights the importance of prompt and transparent responses in maintaining trust in the face of crypto security issues.

 

 

More to Read
View All
Policy & Regulation·

Jan 03, 2025

INDODAX snags full licensing in Indonesia

INDODAX, Indonesia’s largest virtual asset trading platform by trading volume, has acquired full licensing in Indonesia from the local regulator. That’s according to a report published by local media outlet VOI. The license, a Physical Crypto Asset Trader (PFAK) license, has been awarded to the company by Indonesia’s Commodity Futures Trading Supervisory Agency, better known as BAPPEBTI.  The license will place INDODAX in a complaint position within the Indonesian market, relative to local regulations. The business has been issued certificate number 10/BAPPEBTI/PFAK/12/2024 by the regulator, its approval certificate as a Physical Crypto Asset Trader.Photo by Mark König on UnsplashMandatory registration requirementIn December 2023 the authorities in Indonesia set out a mandatory requirement for crypto trading entities to register with the Commodity Future Exchange (CFX). CFX is Indonesia’s national crypto bourse, while INDODAX is a member. As of April 2024, 35 crypto exchanges had been registered with the regulator. CFX has been given the mandate to monitor crypto exchange operations, to safeguard investors by ensuring exchanges abide by local regulations. Fendy Tan, chief financial officer (CFO) at INDODAX commented on the firm’s recent licensing milestone, stating: "We are grateful to BAPPEBTI and CFX for the trust given through this full license. The long process that must be passed reflects our commitment to providing the best protection for users. The license number 10 also has a special meaning, which symbolizes perfection, and symbolizes the 10-year journey of INDODAX in leading the crypto industry in Indonesia."  Liquidity and SOP requirementsIn order to acquire this license INDODAX had to comply with BAPPEBTI Regulation Number 8 of 2021 and Number 13 of 2022. It has also had to ensure a minimum paid-up capital of 100 billion Indonesian Rupiahs ($6,158,000), and a minimum equity of IDR 50 billion ($3,079,000). Furthermore, the company has had to implement a set of standard operating procedures (SOPs), together with achieving ISO certification in accordance with global security standards, with specific emphasis on complying with regulations to safeguard customer funds according to the balances held on account of fiat currency and digital assets by INDODAX customers. INDODAX is understood to have 7.1 million customers while a transaction volume of 109 trillion Indonesian rupiahs was reached for the period January to November 2024. BAPPEBTI had extended a deadline for the crypto licensing of exchanges late last year, a move welcomed at the time by INDODAX CEO Oscar Darmawan. Darmawan said that the move would strengthen the industry by ensuring that market participants were compliant with recently introduced regulations. While this licensing milestone is a positive for INDODAX, the firm had faced challenges in 2024. In September it emerged that the platform had been compromised with the loss of around $18 million in digital assets. Meanwhile, the authorities in Indonesia had planned to switch crypto market oversight from BAPPEBTI to the Financial Services Authority (OJK) by Jan. 12. However, a recent report published by the Jakarta Globe suggests that the Indonesian government has yet to finalize this regulatory transfer.

news
Web3 & Enterprise·

Sep 02, 2023

OKX Entering Indian Market With a Focus on Web3

OKX Entering Indian Market With a Focus on Web3Cryptocurrency exchange OKX is gearing up to make its presence felt in the Indian market.Local recruitmentThat’s according to a discussion between a company executive and CoinDesk, as explained by the publication in a report published on Friday. The firm plans on recruiting local employees in its endeavor to conquer the market within the world’s most populous nation.OKX intends to rely on local employees who will spearhead its initiatives in the country. Haider Rafique, Chief Marketing Officer at OKX explained:“We’re trying to identify who’s who in the zoo and what is their contribution. There’s a large developer community. How do we help them? Build a relationship with them.”He believes that adopting a community-centric approach will pave the way for a successful entry into the local market. Rafique emphasized:“We’re going to learn about the community. We’re going to work with local folks — figure out where we can add value.”Photo by Naveed Ahmed on UnsplashFocusing on Web3 applicationsThe company also intends to take on the challenge by placing emphasis on the use of Web3 applications. Rafique revealed the company’s ambitious plans to scale up its wallet services “exponentially” by engaging with India’s developer community. Currently, there are approximately 200,000 OKX Wallet users in India, accounting for just 5% of the country’s Web3 user base.In a recent collaboration, OKX partnered with the blockchain platform Neo for an APAC Hackathon held in Bengaluru, a city in southern India. Rafique described this move as a strategic test to validate assumptions, understand the local culture, and support the burgeoning Web3 ecosystem.The global exchange already has a physical presence in world centers such as Hong Kong, Singapore, Dubai, and the Bahamas.Indian crypto environmentTrading cryptocurrencies is currently legal in India, albeit with no established regulatory framework by a central authority. Ironically India has been very active in working towards the establishment of global regulatory standards relative to crypto while coming in for criticism from its Supreme Court recently for the government’s failure to provide regulatory clarity at home.Cryptocurrencies are used and traded at the investor’s risk in India and do not hold legal tender status for banking purposes. Additionally, a 30% tax is imposed on cryptocurrency transactions in the country.Rafique believes that Indian regulators are gradually distinguishing Web3 from centralized finance (CeFi). He remarked: “They’re more concerned about venues that have fiat on-ramps, which we do but don’t offer it in India.” He expressed a readiness for the company to become a front-runner once India establishes a regulatory framework for cryptocurrencies.It’s interesting to note that while OKX embarks on expanding its footprint within the Indian market, Indian crypto market incumbents have been looking to downsize. Indian cryptocurrency exchanges like CoinSwitch and CoinDCX have faced layoffs amid the current market downturn.Notwithstanding current market conditions, it’s likely that OKX is taking a long-term view and positioning itself for future success in what should be a very important crypto asset marketplace in the future.Ryan Selkis, CEO and Founder of crypto market intelligence firm Messari expressed this view, stating: “I love to see companies like OKX expanding in India. The largest democracy in the world should be a haven for crypto innovation in the years to come.”

news
Policy & Regulation·

Feb 13, 2024

South Korea intensifies scrutiny on cryptocurrency exchanges

South Korea is ramping up its scrutiny on cryptocurrency exchanges, with the Financial Intelligence Unit (FIU) of the Financial Services Commission (FSC) announcing its intention yesterday to remove platforms that lack the necessary qualifications, according to the Korea Economic Daily.Unqualified exchangesIn its announcement yesterday, the FIU revealed its aim to block unqualified virtual asset service providers (VASPs) from facilitating trades in Korean won, the currency of the country. Those currently providing Korean won trading services will be eliminated from the market unless they can demonstrate they meet the required standards. With many exchanges set to renew their registrations in the latter half of this year, the FIU is gearing up for thorough evaluations through June to identify and remove unqualified VASPs. The FIU's assessments will focus on determining whether VASPs have adequate measures in place for user protection and are safeguarded against risks of money laundering. To bolster its efforts in preventing money laundering risks, the FIU intends to establish a framework where lawyers and accountants participate in crypto oversight activities.Photo by Andrea Piacquadio on PexelsExamining majority shareholder of VASPThe financial watchdog is also looking to propose amendments to the Financial Transaction Reports Act, aiming to raise the standards for VASP registration by introducing more stringent requirements. Beyond the current assessments of a VASP operator and its executives, the new regulations will involve close examination of its majority shareholder. This additional layer of scrutiny will evaluate the credibility of the major parties related to the VASP, taking into account factors such as their history of loan defaults. The FIU is set to create a system for analyzing cryptocurrency transactions and will strengthen its communication channels, not just with financial institutions but also with prosecutors and police forces. Furthermore, the agency is reviewing the Financial Action Task Force's (FATF) recommendation for freezing transactions in cases of suspicious activities. Once implemented, this will enable the FIU to temporarily halt suspicious transactions before bringing the issue to prosecutors.

news
Loading