Top

Telcoin makes users whole in exploit recovery

Web3 & Enterprise·January 13, 2024, 10:31 AM

Singapore-regulated Telcoin, a developer of financial applications for mobile users, has successfully restored user balances following an exploit that saw approximately $1.2 million worth of funds transferred from affected accounts.

https://asset.coinness.com/en/news/3c1766686bc03dc8348603085a3f1f51.webp
Photo by Martin Sanchez on Unsplash

Unauthorized withdrawal of assets

The incident, which occurred in late December, was attributed to an error in the interaction between Telcoin's digital wallet and a proxy contract on Polygon. In a blog post which was published on Wednesday, the company shared a full post-mortem analysis report which it commissioned Hong Kong-based blockchain security firm BlockSec to carry out, relative to the exploit.

 

The fault in the proxy contract's implementation caused a technical conflict that allowed for the unauthorized withdrawal of assets. Fortunately, no admin keys were compromised, ensuring that the broader Telcoin ecosystem remained unaffected.

 

In response to the security breach, Telcoin took action by immediately freezing the use of its application as a precautionary measure. The team initiated an investigation and committed to releasing updates promptly to address the issue and restore normalcy. The identified address associated with the exploit was 0x35d2775e5f95596509951b140d68fc5b9185ff98.

 

TEL token freefall

Despite the initial market turbulence, with the price of the Telcoin (TEL) token plummeting, the cryptocurrency has demonstrated resilience. On Dec. 25, TEL fell from a peak price of $0.00235146 to $0.00122535, representing a 48% decrease. At the time of writing, the price has slightly rebounded, trading at $0.001335. Nevertheless, it's still down 40% over the course of the past month's trading.

 

In a social media direct message to CoinDesk recently, Telcoin's founder and CEO, Paul Neuner, expressed pride in how his team responded to the issue, stating:

 

“Making the decision to preemptively restore affected user wallets from our company treasury was a no-brainer, and I’m proud of the team for making that happen in record time.”

 

Regulatory standing

Telcoin's regulatory standing played a crucial role in instilling confidence during this challenging time. Although headquartered in Tokyo, the company is regulated in Singapore as a Major Payment Institution (MPI) by the Monetary Authority of Singapore (MAS).

 

The firm is also registered and regulated in other global markets, including Canada and Australia. Telcoin maintains offices in Singapore, Tokyo, Dubai and Los Angeles. The company had been active in trying to shape regulation in the United States in 2023, with company executives having made repeated visits to Washington D.C. to meet with Financial Services Committee members and staffers on Capitol Hill.

 

In April of last year, the company extended its service offering to the European market, starting out initially in Lithuania.

It appears that the restoration of Telcoin's application services led to a significant boost in user confidence. The company reported a 400% increase in deposits compared to the previous month. Users responded favorably to Telcoin's swift resolution of the security breach, with a ratio of $3.60 being deposited for every $1 withdrawn in the first day since the service restoration.

 

Telcoin's measures, collaboration with security experts and the surge in user deposits appear to have resulted in a resilient recovery. The saga highlights the importance of prompt and transparent responses in maintaining trust in the face of crypto security issues.

 

 

More to Read
View All
Web3 & Enterprise·

Oct 25, 2023

Web3 Security Startup Blockaid Raises $33M in Funding

Web3 Security Startup Blockaid Raises $33M in FundingIsraeli enterprise Blockaid, a Web3 security startup founded by two former Israeli military cyber intelligence personnel, has secured a total of $33 million in funding.The recent Series A round of $27 million was led by Ribbit Capital and Variant and saw participation from Cyberstarts, Sequoia Capital, and Greylock Partners. This funding totals $33 million when consolidated with an initial $6 million seed round.Photo by Shubham’s Web3 on UnsplashSecuring Web3 against threatsBlockaid offers comprehensive Web3 security solutions designed to combat crypto fraud, phishing, and hacks. Its approach involves the examination of both on-chain and off-chain transactions. In this way, the firm is seeking to set itself apart from competitors like CertiK and Cyvers.The company’s decentralized application (dApp) Scanning Engine simulates and validates blockchain transactions before they are executed. This process takes place within Blockaid’s dApp Scanning Sandbox, which also assesses the potential maliciousness of interactions and dApps.Since its inception in September 2022, Blockaid claims to have successfully scanned over 450 million transactions, preventing over 1.3 million attacks and safeguarding more than $7.1 billion in assets. Furthermore, the Israeli startup’s efforts have averted losses of over $500 million in the Web3 ecosystem.Recent success storiesOne notable success story involves the prevention of a phishing attack targeting Ethereum co-founder Vitalik Buterin’s X (formerly Twitter) account. Due to Blockaid’s security measures, users’ wallets remained protected, though unsecured wallets with approximately $700,000 in assets, including valuable NFTs, suffered losses in the attack. Blockaid has been involved in enhancing security for prominent platforms, including MetaMask, OpenSea, Zerion Wallet, and Rainbow Wallet.With the newly acquired funds, Blockaid aims to expand its client base and meet an increasing demand for its security solutions. Ido Ben-Natan, co-founder and CEO of Blockaid, expressed confidence in their ability to support both existing and new customers during these market conditions. Blockaid operates from New York and Tel Aviv and plans to bolster its workforce by hiring additional personnel across various functions.Addressing the Web3 security challengeThe significance of Blockaid’s work becomes even more apparent when considering the current challenges in the Web3 space. In recent years, the Web3 sector has faced a rising tide of fraud, phishing attempts, and hacks. As noted by Ben-Natan, Web3 has experienced staggering losses, with $14 billion stolen in just one year, surpassing losses in all non-crypto cyber-crime combined. Additionally, one in ten decentralized applications (dApps) has been identified as malicious, making even crypto-savvy users susceptible to malicious actors.Furthermore, there is a growing concern about nation-state actors actively targeting and stealing user funds for their economic gain. In this adversarial and uncertain environment, the usability and security of Web3 must be enhanced to unlock its full potential. Blockaid’s innovative security tools aim to provide the necessary protection for Web3 builders and users.There’s no doubt that Web3 has to become more seamless and far more secure if it is to appeal to the mass market. In its blog post announcing the funding round, the project stated:”We believe that users shouldn’t have to know they’re interacting with crypto. We believe that web3 should just work, and work securely.”

news
Policy & Regulation·

May 28, 2025

Pakistan appoints crypto advisor to PM & allocates 2K MW to Bitcoin mining

Recent weeks have seen a positive policy shift in Pakistan with regard to digital assets and blockchain and that initiative has gathered further momentum with the appointment of a special assistant on blockchain and crypto to the Pakistani prime minister and the allocation of 2,000 MW of surplus electricity to Bitcoin mining and AI data centers.Photo by Abuzar Xheikh on UnsplashOn May 26, the Pakistan Observer, an English language daily newspaper, reported that Bilal bin Saqib has been appointed to serve as a special assistant on blockchain and crypto matters to Pakistani Prime Minister Shehbaz Sharif. Forbes ‘30 under 30’ social entrepreneurIn this role, Saqib assumes the status of a minister of state under Rule 4(6) of the Rules of Business, 1973, with the appointment effective immediately. Saqib had been featured by Forbes through its “30 under 30” list of social entrepreneurs in Asia in 2020. He is the founder of Tayaba.org, a non-governmental organization (NGO) focused on the provision of clean drinking water to vulnerable communities in Pakistan. Saqib came to prominence in the crypto sector earlier this year when he was appointed CEO of the newly formed Pakistan Crypto Council (PCC), an agency established to promote blockchain technology and digital assets within the South Asian country. In April he was added by World Liberty Financial, a crypto project connected with the family of U.S. President Donald Trump, as an advisor. Earlier this month, Pakistan’s Ministry of Finance gave the go-ahead for the establishment of the Pakistan Digital Assets Authority (PDAA), a body that will be responsible for the implementation of regulations governing the crypto and blockchain sector.  Utilizing surplus energyAt the time, one area of focus that had been highlighted in the announcement of the establishment of the PDAA was a desire to make better use of Pakistan’s surplus energy. The country runs an annual average surplus of 4,000 megawatts. A report by 24 Digital on May 25 indicated that action has already been taken in this regard. It outlined that Pakistan has allocated 2,000 megawatts of surplus electricity for the exclusive use of operators of AI data centers and Bitcoin mining facilities.  This plan is being rolled out in phases. The first phase makes surplus energy available to these operators. Phase 2 will focus on enabling crypto mining operators to avail of renewable energy to power their facilities, in an effort to develop the sector in Pakistan in an environmentally responsible manner. According to the Ministry of Finance, interest has already been expressed by international operators in the crypto mining and AI data center sectors. A number of international firms are understood to have visited the country in an effort to explore potential collaboration opportunities.  Earlier this month, Saqib claimed on social media that Pakistan “is moving at crypto speed.” He made the case that the country is a breeding ground for crypto innovation, citing the opportunity to exploit surplus electricity via crypto mining and the potential for crypto adoption given a $36 billion remittance market, millions of unbanked citizens and 64% of the population under 30.

news
Policy & Regulation·

Jan 25, 2024

ACE Exchange in turmoil as Taiwanese prosecutors broaden investigation

Taiwanese prosecutors have expanded their inquiry into ACE Exchange, urging the detention of Chenhuan Wang, the platform's president and partner at Chien Yeh Law Offices. The Taipei District Prosecutors Office disclosed to The Block that Wang, alongside four other suspects, was summoned after police raids in Northern Taiwan earlier this month. Subsequent to the interrogation, prosecutors sought Wang's detention and restrictions on visitation rights, alleging his involvement in money laundering and fraud linked to the activities orchestrated by the detained founder, David Pan. Chien Yeh Law Offices has moved to distance itself from its partner’s activities, stating that the matter is a personal investment of Wang’s. It stated:”Ace Digital Innovation Co., Ltd. is the personal external investment affairs of lawyer Wang Chenhuan and has nothing to do with the firm.”Photo by Thomas Tucker on UnsplashMisleading advertisingPan, along with colleague Lin Nan, is accused of a three-year collaboration, utilizing misleading social media advertisements to deceive investors into acquiring worthless cryptocurrencies, including MOCT. The inclusion of Wang in the investigation now requires a court determination on potential detention. ACE Exchange responded to Pan's arrest earlier, asserting that Pan had ceased daily operations in 2022, with Wang assuming the presidency in September 2023. Wang claimed to have initiated efforts to delist controversial coins, with ACE assuring cooperation with investigations as a witness. The exchange affirmed the normalcy of trading and operational conditions, emphasizing the security of user assets and smooth cryptocurrency and New Taiwan dollar deposit and withdrawal services. Established in 2018, ACE Exchange ranks among Taiwan's prominent crypto exchanges, alongside BitoGroup and MaiCoin. In spite of alleged wrongdoing relative to key actors within the business, the platform has outlined its commitment to legal principles, stating zero tolerance for any misconduct within its management team. Regulatory focus on offshore exchangesIn the broader context of Taiwan's crypto landscape, the Financial Supervisory Commission (FSC) plans to impose restrictions on offshore cryptocurrency exchanges operating within its jurisdiction, unless they secure required registration. In September last year, the FSC drafted guiding principles for virtual asset service providers (VASPs). These guidelines aim to fortify information disclosure, set review standards for virtual asset listing and delisting and ensure the secure separation of companies' and customers' assets. The FSC intends to strictly prohibit illegal business solicitation by foreign crypto firms, mandating registration and compliance declarations with anti-money laundering regulations. Failure to comply will result in the prohibition of business solicitation within Taiwan or from domestic residents by foreign VASPs. As Taiwanese prosecutors intensify their efforts, the ACE Exchange case unfolds as a critical episode in the evolving regulatory landscape, prompting both legal scrutiny and a reevaluation of the country's approach to crypto oversight.  

news
Loading