DBS Bank integrates DDEx into new global financial markets unit

Remitano Struck by $2.7M Alleged HackHacks have been an unfortunate constant in the crypto and DeFi space with that reality having been compounded by news that Seychelles-based crypto exchange Remitano is believed to have been the victim of a $2.7 million heist.Photo by Growtika on UnsplashSuspicious transactionsIt’s understood that the firm encountered highly suspicious transactions, with the $2.7 million having seemingly vanished from its wallet, all at the hands of a single account. The incident unfolded on Thursday and has left blockchain analysts speculating about a potential security breach.The Remitano hot wallet initiated transfers to an address devoid of any prior transaction history. These transfers amounted to approximately $1.4 million in Tether (USDT), $208,000 in USD Coin (USDC), and 104,000 ANKR tokens (valued at $2,000 at the time). Those transfers raised concerns about the security of the platform.Israeli blockchain analytics platform Cyvers promptly sounded the alarm, notifying the crypto community about these suspicious transactions that had drained significant sums from Remitano’s coffers. This sudden event raised concern within the crypto space and naturally among Remitano customers.Tether freezes wallet addressAmid the growing apprehension, Tether, the issuer of USD stablecoin USDT, took decisive action by freezing the address associated with the alleged attacker. This swift intervention effectively halted any further movement of $1.4 million worth of drained cryptocurrency. Tether’s proactive response could potentially have prevented additional loss, preserving customers’ assets from further depletion.Remitano had remained notably silent initially in the wake of this incident, declining to issue any formal statement regarding the breach. It has since acted, as on Friday, it published a statement relative to the issue on its website. The absence of communication from the exchange had only fueled greater speculation surrounding the incident. However, the statement outlined:”On September 14, 2023, our Security Management team discovered a data breach from a third-party source that had compromised some of our sensitive information. As a result, a small amount of funds from the exchange’s hot wallets were transferred to suspicious wallet addresses through unauthorized withdrawal transactions.”Remitano, recognized as a peer-to-peer cryptocurrency exchange and payment processor, primarily caters to users in emerging markets across several countries, including Pakistan, Ghana, Venezuela, Cambodia, Kenya, Malaysia, India, South Africa, Vietnam, and Nigeria.The firm sought to reassure its customers:”As of now, Remitano ensures that users’ assets have NOT been and will NOT be affected by this incident. We are working tirelessly to uphold our commitment to ensuring the security and protection of your crypto assets.”Remitano was established in 2015; it is operated by Babylon Solutions Limited, which is headquartered in the Seychelles.Unfortunately, this episode adds to the troubling trend of cryptocurrency exchange hacks witnessed in 2023. Authorities in the United States have attributed these attacks to the Lazarus Group, a notorious cyber-crime organization allegedly linked to the North Korean government which has wreaked havoc globally although disproportionately so within the Asian region.

Thailand has taken steps to tighten controls on digital asset mule accounts and overseas crypto peer-to-peer (P2P) platforms in an effort to combat cybercrime.Photo by Growtika on UnsplashLegislative amendmentsOn April 8, the Securities and Exchange Commission (SEC), a local regulator, published a statement explaining that the Thai cabinet has passed a resolution approving a number of amendments to the Southeast Asian nation’s digital asset business law and its cybercrime law. The regulator asserted that the amendments are designed to “strengthen measures against cybercrime and mule accounts, enhancing the security of public financial transactions and improving the effectiveness of combating online scams.” The amendments won’t become effective until such time as they are published in the Government Gazette of Thailand, an official public journal that acts as a primary source for Thai law. Mule accountsOne aspect that has been addressed is the enhancement of measures taken in an effort to block digital asset mule accounts. Criminals utilize mule accounts in an effort to launder the proceeds of crime.  While this happens with conventional bank accounts, it is also now happening with digital asset exchange accounts and digital asset wallets. Accounts may have been established for legitimate purposes but later fall under the influence of criminals who utilize them for money laundering. According to a report by the Bangkok Post last month, the Thai SEC had been collaborating with the Thai Digital Asset Operators Trade Association (TDO) and digital asset businesses in order to formulate these new measures.  The standard was also established following consultation with the Bank of Thailand, the Cyber Crime Investigation Bureau, Central Investigation Bureau, the Anti-Money Laundering Office and the Thai Bankers' Association. It is hoped that these enhanced mechanisms will lead to earlier detection of unusual customer behavior, enabling the authorities to intervene at an earlier stage to block mule accounts.Going forward, the regulator will collaborate with the TDO in monitoring and evaluating implementation of the new measures. Individuals who allow their digital asset accounts to be used by criminals will face up to three years' imprisonment and a fine of up to 300,000 Thai baht ($8,765). Blocking P2P platformsAnother change is being implemented in respect of offshore crypto P2P platforms. The objective of that particular measure is to deter and prevent the use of such platforms by investors within Thailand.  It’s envisaged that the Ministry of Digital Economy and Society will now be enabled to move more swiftly in blocking website and application access to these foreign P2P platforms. Such offshore platforms will be deemed to be attempting to solicit local investors if they offer payment options in Thai baht, provide online services or applications using the Thai language or if they accept payments through Thai bank accounts. Earlier this month, Thai law enforcement raided five unlicensed crypto firms. The raid led to the arrest of 11 individuals, charged with illegally operating e-money services related to enterprises responsible for a combined $29 million turnover. 

In an effort to safeguard crypto investors from falling prey to misleading advertisements, the Securities and Exchange Commission (SEC) of Thailand has intensified its scrutiny of promotional campaigns within the crypto sphere. Photo by Dave Kim on UnsplashBroker agent eventsOn April 29, the Bangkok Post reported that the SEC has raised concerns regarding the potential violation of local regulations through introducing broker agent (IBA) events. These events, the SEC clarified, may breach regulations as IBAs are only permitted to promote digital token services to deter speculation on cryptocurrencies, categorized as high-risk assets. IBAs, acting as local conduits for partner digital asset exchanges, typically earn commissions by onboarding clients within a specific market. Such practices are common for exchanges or brokers that don't directly operate in certain markets. Deputy Secretary-General Anek Yooyuen conveyed the commission's unease over crypto exchanges offering preferential treatment to onboard users. Yooyuen stated: "When operators organise sales promotions by offering rewards to entice people to use the service, this could encourage use of the service without considering the investment risks. This is especially the case for cryptocurrencies.” Warning of consequencesHe cautioned that failure to adhere to these guidelines would result in “punishment according to the law.” While cryptocurrency exchanges are legal in Thailand, they must secure local approval. Notably, last month, Thailand even greenlit asset management firms to launch private funds, offering Bitcoin exchange-traded funds (ETFs) exclusively to institutional and ultra-high-net-worth investors. Nonetheless, the country recently prohibited the sale of cryptocurrency lending products and mandated that exchanges prominently display risk warning messages. International regulatory trendThis move by the Thai SEC mirrors actions taken by regulators in other major crypto markets. For instance, the United Kingdom's Financial Conduct Authority (FCA) issued 450 alerts for illegal crypto ads in 2023 alone. Similarly, Spain’s principal securities market regulator, the National Stock Market Commission, denounced fraudulent crypto asset promotions in November 2023, emphasizing companies’ obligations to adhere to local laws. Thai advertising guidelines mandate businesses and advertisers to substantiate the “facts” presented in their campaigns, failing which could lead to legal repercussions. A recent incident provides a case in point. Hackers hijacked advertisements on Etherscan, redirecting users to phishing sites aimed at draining crypto wallets. Scam Sniffer, a blockchain investigation firm, attributed the widespread phishing campaign to the inadequate oversight by advertisement aggregators. The company made the following statement on the matter: “Etherscan aggregates ads from platforms like Coinzilla and Persona, where insufficient filtering could lead to exposure to phishing attempts.” The wallet drainer scam involves enticing users to counterfeit websites and coercing them to link their crypto wallets, enabling scammers to siphon funds into their own wallets without user authentication or consent. This is not the first time that the authorities in Thailand have homed in on crypto-related advertising. In August 2023, the Southeast Asian country’s Ministry of Digital Economy and Society (MDES) outlined that it had engaged with social media firm Meta, owner of Facebook, informing it that its response to the proliferation of fraudulent platform ads relative to crypto had been inadequate.