$100M funding sees HashKey unlock unicorn status

Hacking Attempts on Upbit Reach 160,000 in First Half of the YearThere have been approximately 160,000 hacking attempts on Upbit, Korea’s largest cryptocurrency exchange, in the first half of this year alone, according to a report submitted by Upbit’s operator Dunamu to lawmaker Park Sung-joong of the National Assembly’s Science, ICT, Broadcasting, and Communications Committee.“Cryptocurrency hacking incidents are increasing both domestically and internationally, and hacking attacks on exchanges such as Upbit, which have daily trading volumes exceeding KRW 2 trillion, are a serious issue,” Park said.Photo by Clint Patterson on UnsplashAn uptick in hacking attemptsThe data revealed that the number of cyber breach attempts in the first half of the year totaled 159,061–2.17 times higher than the number of attempts in the first half of last year, which stood at 73,249.Hacking attempts on Upbit have been steadily increasing in recent years, from 8,356 in the second half of 2020 to 34,687 and 63,912 in the first and second half of 2021, respectively. In the first half of last year, there were 73,249, and 87,242 in the second half. Notably, the exchange suffered losses of approximately KRW 58 billion (approximately $43 million) from a hacking attack in 2019.Ramping up securitySubsequently, Dunamu has taken action to enhance security by managing over 70% of its assets in cold wallets and operating hot wallets in a distributed structure instead of a singular one. Hot wallets refer to online crypto wallets, whereas cold wallets are crypto wallets that are offline and disconnected from the internet. Hot wallets offer the advantage of direct deposits and withdrawals, but they have weaker security levels — most known exchange hacks have thus occurred through this medium. On the other hand, cold wallets store private keys on offline sources like external hard drives and portable storage devices, making real-time trading difficult but providing better security and stability.“We have taken various preventive measures since the hacking incident in 2019, such as operating hot wallets in a distributed manner. There have not been any successful cyber breaches to date,” Upbit said.Regarding the role of the Ministry of Science and ICT in managing and overseeing crypto hacking incidents, Park pointed out that this still remains ambiguous. “The Ministry should conduct large-scale white-hat hacking tests and security assessments for crypto exchanges that are frequently faced with hacking attempts, as well as for hospitals and subway systems that manage large amounts of personal information,” he said.

Hong Kong Reiterates Web3 Credentials and CommitmentHong Kong is committed to growing the Web3 industry under appropriate regulations, according to government officials.©Pexels/Andrea PiacquadioAt the four-day Web3 Festival, which is the largest Web3 event that the city has hosted since declaring its intention last year to become a digital asset hub, Financial Secretary Paul Chan stated that the stability of the financial system and investor protection should not be damaged, and that appropriate regulations are a must to create a sustainable development environment and a more ideal space for development.DeFi licensing requirementSome attendees were surprised to learn that the Securities and Futures Commission (SFC) believes that decentralized finance (DeFi) platforms for virtual assets need a license under existing rules. Keith Choy, interim head of the intermediaries division at the SFC, stated that people operating or performing DeFi activities should be subject to Hong Kong’s licensing requirements.This means that if Hong Kong really intends to regulate DeFi, it will have a stricter environment than Singapore. The Web3 industry has been closely watching the development of a new regulatory framework for virtual assets in Hong Kong since the city revealed at the end of October its intention to become a cryptocurrency hub. Under new regulations that go into effect in June, cryptocurrency exchanges serving customers in Hong Kong must be licensed by the SFC.10,000 Web3 Festival attendeesThe event attracted more than 10,000 people ahead of the conference, with several big-name speakers and exhibitors looking for new opportunities in the city. OKX and Filecoin were some of the large cryptocurrency firms in attendance, as were traditional tech firms like Tencent Cloud, which had a booth touting its blockchain-related services for corporate clients. Alibaba Cloud was also a co-organiser, along with Amazon Web Services and Hong Kong’s Cyberport.Binance co-founder and CEO Zhao Changpeng (CZ) also dialed in via video for a fireside chat. Last month, the US Commodity Futures Trading Commission (CFTC) sued CZ and Binance over what it alleged was “sham” compliance with domestic regulations. The company has been scrutinized over connections to its local firm Binance.US, which legally is meant to operate as a separate entity. Zhao was not asked and did not address his legal troubles at the conference. However, he did note that Binance is in talks with regulators in many markets.“We are actively engaged with regulators all around the world,” Zhao said. “Many of them are very receptive, some of them are still skeptical, and that’s fine, but we need to engage. We need to have dialogue, we need conversations, and we also need patience.”Singapore comparisonsHong Kong has frequently been compared with Singapore, which had been considered a friendlier market for related activity until Hong Kong’s policy shift. Some attendees had hoped that Hong Kong’s shift would provide some competition for Singapore in the region. “We did see a very obvious trend of people flying to Singapore to make sure their business was part of this space,” said Luke Liu, chief core ecosystem contributor at cross-chain protocol developer Poly Network. “Hong Kong and Singapore can coexist in some sense, but there is definitely a very positive change going on recently because of the Hong Kong policy announcement.”Hong Kong has reaffirmed its commitment to growing the Web3 industry under “appropriate” regulations, with the stability of the financial system and investor protection as a top priority. This has been reiterated during the largest Web3 event in the city since declaring its intention to become a digital asset hub.

In an effort to fortify the cryptocurrency market and safeguard investors' funds, the Hong Kong Securities and Futures Commission (SFC) has introduced a minimum insurance requirement of 50% for licensed cryptocurrency exchanges handling customers' assets.Photo by Simon Zhu on UnsplashGuarding against insolvency riskThe move came to light through a statement published recently by OSL, one of Hong Kong’s licensed virtual asset trading platforms. It’s aimed at enhancing security measures, protecting users from potential security breaches or insolvency. As part of that disclosure, OSL announced a two-year partnership with Canopius, an underwriter syndicate associated with Lloyd's of London. Under this collaboration, OSL will provide insurance coverage for an impressive 95% of its users' assets, surpassing the mandated 50%. OSL emphasized its commitment to safeguarding regulated assets under custody, irrespective of the regulatory guidelines permitting virtual asset service providers (VASPs) to reduce insurance coverage to 50%. Response to recent failuresThis decision is grounded in the acknowledgment of the volatile market conditions and the series of cryptocurrency firm collapses witnessed in recent years. 2022 saw a number of high-profile crypto platform collapses, such as the demise of FTX. HashKey Exchange, another licensed crypto exchange in Hong Kong, has also proactively secured its users' assets by entering into a crypto insurance agreement with Hong Kong headquartered fintech firm OneDegree back in September. The insurer entered the digital assets space last July, expanding into the Middle East last month. OneDegree’s arrangement with HashKey offers coverage ranging from $50 million to $400 million, extending beyond standard security breaches and insolvency to include server downtime, data back-up and load management incidents, ensuring comprehensive protection. Broader regulatory effortsThe minimum insurance requirement is part of the SFC's larger strategy to regulate the cryptocurrency industry in Hong Kong. While the Chinese autonomous territory enabled cryptocurrency trading for retail investors in August, only OSL and HashKey have obtained virtual asset trading licenses. Thirteen other entities are currently in the application process, undergoing rigorous due diligence checks, including comprehensive financial audits exceeding the scope beyond proof-of-reserve systems. This insurance mandate represents a significant step toward enhancing investor confidence in the cryptocurrency market. As digital assets gain popularity, ensuring the security of customers' funds has become paramount. The SFC's proactive approach seeks to strike a balance between fostering innovation and safeguarding investors. Products are also emerging that crypto users themselves can access. UK-based CryptoShield offers insurance protection directly to users that covers potential loss of funds on crypto platforms. The cryptocurrency landscape in Hong Kong is evolving rapidly, with the SFC playing a pivotal role in shaping the regulatory environment. Regulators aim to establish a robust framework addressing potential risks and protecting market participants while embracing digital innovation. As the regulatory landscape matures, more licensed crypto exchanges in Hong Kong may be required to meet the 50% minimum insurance requirement, further strengthening security measures and making the market a safer place for investors.