Hong Kong regulator increases scrutiny of unlicensed VASPs and OTC venues

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

Several players across Asia and the Middle East have announced expansions into the stablecoin sector, aiming to capitalize on a market projected to double in size within the next two years. A notable example came from Hong Kong-listed OSL Group, which unveiled plans last week to introduce a new U.S. dollar-pegged stablecoin, USDGO. The token is scheduled to launch in the first quarter of next year with San Francisco-based Anchorage Digital serving as the issuer. According to OSL, the product is designed to comply with the recently passed U.S. GENIUS Act, a legislative framework establishing federal guidelines for stablecoins. The company stated that USDGO will be backed one-to-one by high-quality liquid assets, including U.S. Treasuries, and will undergo third-party audits to meet anti-money laundering (AML) and know-your-customer (KYC) standards. Anchorage Digital, notably the only digital asset company holding a U.S. national trust bank charter, will handle issuance, while OSL Group will manage branding and distribution. In Hong Kong, distribution is restricted exclusively to OSL Digital Securities Limited. The token will deploy first on the Solana blockchain, with expansion to other networks planned for the future.Photo by engin akyurt on UnsplashInfrastructure expansion in TaiwanTaiwan has also seen movement in the stablecoin space, with blockchain infrastructure firm OwlTing announcing its integration into the Circle Payments Network (CPN). The move allows the firm’s digital wallet, OwlPay Wallet Pro, to utilize stablecoin routing for cross-border transactions. OwlTing is currently targeting markets with high demand for cross-border payments, including Brazil, Nigeria, and the European Union. The company aims to secure a foothold in a global payments market that FXC Intelligence estimates is currently worth $194 trillion and could reach $320 trillion by 2032. As part of its regulatory footprint, OwlTing disclosed it holds Money Transmitter Licenses in 39 U.S. states, a Virtual Asset Service Provider (VASP) license in Europe, and a Bank API license in Japan. The firm is pursuing further regulatory approval in Hong Kong, Singapore, and Latin America. Adoption in the UAEIn the Middle East, state-owned telecommunications giant e& UAE signed a strategic memorandum of understanding (MoU) with Al Maryah Community Bank, according to Khaleej Times. The agreement focuses on enabling payments via AE Coin, the UAE’s first central bank-licensed, dirham-backed payment token. Ramez Rafeek, General Manager of AED Stablecoin LLC, stated that the initiative aims to create a "regulated, transparent, and instant stablecoin framework" for daily transactions. The collaboration supports the UAE’s broader Digital Economy Strategy, designed to transition the nation toward a cashless society. Stablecoins projected to reach $750BThese regional developments come as the global stablecoin market continues to expand. According to data from RWA.xyz, total stablecoin market capitalization, including major tokens such as USDT and USDC, stands at roughly $300 billion, reflecting a 1.17% increase over the past 30 days.Analysts anticipate continued expansion. In a September research note, Teresa Ho, Head of U.S. Short Duration Strategy at J.P. Morgan, projected the market could reach between $500 billion and $750 billion within the next two years. Other market reports offer more aggressive forecasts, suggesting valuations could top $2 trillion by the end of 2028.

Disagreement has emerged within the Bitcoin blockchain community, revolving around the BRC-20 token standard. Domo, the pseudonymous developer behind the creation of the token standard, has publicly expressed his opposition to an upcoming upgrade proposed by the Hong Kong headquartered project, UniSat Wallet.Photo by Kanchanara on UnsplashDue diligence concernsOn Tuesday Domo took to the X social media platform (previously Twitter) to articulate his concerns. He voiced apprehensions about hastily implementing updates in BRC-20, asserting that such a rush could potentially harm the broader BRC-20 user community. Domo's resistance is rooted in his belief that UniSat Wallet's proposed updates lack due diligence and are being introduced precipitously without considering potential repercussions. He wrote:”Recognizing the serious implications and valuations involved, I believe rushing these updates in BRC20 is reckless, disregards their peer indexers, and could potentially harm the broader community of BRC20 users.” ‘Split’ rather than ‘fork’Conversely, UniSat Wallet has declared its intention to “follow the Ordinals Jubilee upgrade, to confirm that BRC-20 is still on Ordinals without splitting into an isolated protocol." Described as a "split" rather than a "fork," UniSat Wallet's approach adapts to the Ordinals Jubilee upgrade, a transformative change in how the Bitcoin blockchain manages tokenized assets. In mapping the way forward its proposing to take, UniSat outlined that it would publish a whitepaper on Jan. 31, describing it as “the most significant present we are able to deliver” for BRC-20, Ordinals and Bitcoin. The crux of the matter lies in the method and pace of implementing these changes. Domo's concerns reflect a broader sentiment within the crypto community, where the rapid pace of advancements often collides with the need for stability and thorough vetting. UniSat Wallet's proposed changes, though innovative, may be viewed as potentially destabilizing by certain community members, especially those deeply entrenched in the current BRC-20 standard. Striking a balanceThis development is pivotal, highlighting the dynamic and occasionally contentious nature of blockchain technology and cryptocurrency standards. Web3 project incubator and investor TrustlessLabs summed up the matter in a social media post on Wednesday, drawing the following conclusions:”This situation encapsulates a critical challenge in blockchain protocol development: finding the right balance between preserving stability and embracing technological advancements.” As technology evolves, divergent opinions on the trajectory of these advancements are inevitable. The ongoing debate between Domo and UniSat Wallet serves as a microcosm of the larger conversations transpiring in the crypto space about how to strike the right balance between progress and stability. The BRC-20 token standard, an experimental fungible token standard on Bitcoin, draws inspiration from Ethereum's ERC-20 standard. It allows the creation of fungible tokens using Bitcoin’s Ordinals protocol, constituting a significant breakthrough in cryptocurrency by enabling novel forms of tokenization on the Bitcoin blockchain. This disagreement not only spotlights a critical debate in the crypto realm but also emphasizes the delicate equilibrium between innovation and stability.