NEOPIN, Futureverse and Catalyze Research team up to bolster global blockchain ecosystem

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.Photo by FlyD on UnsplashHot-wallet breach hits 24 tokensThe exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP). According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance. This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1. Authorities focus on Lazarus’ involvementFinancial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported. Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case. Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea. Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline. Dunamu, Naver set $6.8B growth planThe security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users. The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 2.54 to 1. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

British multinational banking conglomerate Standard Chartered has partnered with global crypto exchange OKX in Dubai on a collateral mirroring pilot program.Photo by appshunter.io on UnsplashOff-chain collateralIn a press release published on April 10, the companies set out details of the collaboration. The initiative will facilitate institutional clients to utilize digital assets and tokenized money market funds for trading as off-chain collateral. Trading activity requires the ongoing movement of funds and assets between custodians and exchange platforms. The activity is expensive and slow. Back in 2023, OKX had collaborated with crypto custodian Komainu and asset manager CoinShares to enable collateral mirroring to overcome this operational inefficiency. In that instance, CoinShares was enabled to trade on OKX using a collateral mirroring facility provided by OKX with Komainu acting as asset custodian. This latest initiative has also seen OKX work with alternative investment management firm Brevan Howard, global investment management company Franklin Templeton and local regulator in Dubai, the Virtual Assets Regulatory Authority (VARA).  Developed within regulatory frameworkThe collateral mirroring facility has been established on a pilot program basis to start with, having been developed within the regulatory framework established in Dubai by VARA. Standard Chartered will act as the digital asset custodian as part of the arrangement.  The press release points out that Standard Chartered is a Globally Systemically Important Bank (G-SIB), asserting that this will afford clients a higher level of security. By not having to manually move the digital assets, there is an additional security-related process improvement, given the ongoing risks associated with digital assets held on exchanges due to incidents of hacking. Hong Fang, OKX president, provided some insight into why the company has partnered with Standard Chartered, stating:”By leveraging Standard Chartered's position as a top custodian globally, as well as OKX's market leadership in cryptocurrency trading, the partnership sets an industry standard for current and potential institutional clients to deploy trading capital at scale in a trusted environment." OKX CEO Star Xu outlined on X that the service offering is geared towards tokenized money market funds with the aim of improving capital efficiency and counterparty risk protection. Standard Chartered launched its crypto custody services in Dubai last September. The service was established in partnership with Brevan Howard Digital, having been licensed by the Dubai Financial Services Authority (DFSA), the independent regulator for financial service providers located within the Dubai International Financial Centre (DIFC), an economic free zone. In October 2024, OKX selected Standard Chartered as its digital asset custodian for the crypto exchange platform’s institutional clients. First clientsBrevan Howard Digital and Franklin Templeton will participate as the first clients to trial the new service offering. Furthermore, as part of the collaboration, OKX platform users will gain access to tokenized on-chain assets developed and offered by Franklin Templeton. Franklin Templeton’s head of digital assets, Roger Bayston, commented on the firm’s on-chain product offering, stating: “By ensuring assets are minted on-chain, we enable true ownership, allowing them to move and settle at blockchain speed – eliminating the need for traditional infrastructure.”

Dubai's regulator, the Virtual Asset Regulatory Authority (VARA), has been ahead of the curve by comparison with its peers internationally in getting a crypto regulatory framework in place, and now it's moving to tweak those regulations further. In a press release published via ZAWYA on Sept. 26, VARA announced an update to its crypto regulations which specifically deals with marketing. Its addition of “Marketing Regulations for Virtual Assets and Related Activities 2024” applies to virtual asset service providers (VASPs) operating within the Emirate of Dubai. In tandem with the updated regulations, VARA has published a marketing guidance document to assist VASPs in abiding by the regulations, providing detailed instructions and outlining best practices in terms of the application of appropriate marketing activities. Photo by ZQ Lee on UnsplashMandatory disclaimerOne of the new requirements demanded by the regulator is that marketing content related to digital assets should incorporate a disclaimer outlining to investors that there are financial risks associated with digital assets. To that end, from October 1 onwards, VASPs are required to add the following disclaimer, prominently displayed, within product marketing material: “Virtual assets may lose their value in full or in part and are subject to extreme volatility.” In its guidance documentation, VARA has stipulated that any content which contains contradictory messaging or information provided to users in “small print” is not deemed to be acceptable. The rules apply to both licensed entities and any unlicensed entities that attempt to offer a service within the Emirate of Dubai.  Consumer protectionThe motivation behind the regulatory update is the protection of consumers through the prevention of the dissemination of misleading information. The regulator wants consumers to be well-informed about crypto products, such that they’re aware of both the risks and opportunities associated with digital assets. VARA has set out a schedule of fines, broken down by category, with fines of up to 10 million United Arab Emirates (UAE) dirhams (AED), around $2.7 million, applying for those who do not comply. Commenting on the updated regulations, VARA CEO Matthew White stated: “Our updated marketing regulations and the newly issued guidance document reflect our commitment to maintaining Dubai’s position as a global leader in digital finance. We believe that by providing clear and actionable guidance, we can help VASPs deliver their services responsibly, while fostering greater trust and transparency in the market." The Dubai regulator isn’t the only one to home in on the marketing approach taken by crypto service providers. Since October 2023, the UK Financial Conduct Authority (FCA) has implemented new rules which specifically deal with the marketing of crypto products and services. Many crypto platforms found the new requirements too arduous to follow. Some withdrew from the market while others did so on a temporary basis while working towards becoming compliant. Within the European Union, the Markets in Crypto Assets (MiCA) regulation came into force in June 2023. Those regulations demand that crypto service providers provide information and conduct marketing activities in a clear, fair and non-misleading manner.