KODA’s crypto assets in custody surpass $6B

An industry advocacy body for crypto and Web3 in India had urged the Indian government to take action against nine offshore exchanges, prompting the government to issue show cause notices and block URLs recently. Native industry pushbackAccording to CoinDesk, the publication has seen a copy of a letter that was sent in mid-December by the Bharat Web3 Association (BWA), addressed to the Indian Finance Ministry’s Department of Revenue Secretary, Sanjay Malhotra. The letter was penned by BWA Chairman Dilip Chenoy. Chenoy has been in the role since March of last year having a number of years of leadership experience within Indian industry bodies under his belt, with time spent previously as Secretary General of the Indian Chambers of Commerce and Industry and as Chairman of the board of Sant Longowal Institute of Engineering and Technology. According to its LinkedIn profile, the BWA seeks to “advocate for the collaboration between the regulatory bodies and the Industry for creating awareness about the new age technology and the emerging [Web3/crypto] asset class.” ‘Show cause’ noticesIt emerged last week that India’s Financial Intelligence Unit (FIU) had issued “compliance show-cause” notices to a number of overseas crypto platforms who have otherwise been active within the Indian market. The FIU is a national body tasked with liaising with and providing information to enforcement agencies where suspected illicit transactions are concerned. The offshore exchanges, including Binance, KuCoin, Huobi, Kraken, Gate.io, Bittrex, Bitstamp, MEXC Global and Bitfinex, have been given a two-week deadline to respond to the show cause notice. This notice questions why regulatory actions should not be taken against them, aiming to ensure compliance with the country's financial regulations. It’s understood that the BWA's letter requested a one-month grace period for offshore exchanges to register with the FIU. It remains unclear whether the government's actions were solely prompted by the BWA's letter or if it would have taken place independently. Notably, the BWA's letter aligns with the government's earlier mandate in March, requiring crypto businesses to register with the FIU and adhere to anti-money laundering processes under the Prevention of Money Laundering Act (PMLA). Since then, 31 domestic entities have registered with the FIU. Photo by Peter Glaser on UnsplashEnsuring a fair gameThe BWA's letter also proposes that offshore exchanges establish an Indian subsidiary, deposit the applicable tax deducted at source (TDS) from July 1, 2022 and face restrictions, including potential access blocks on mobile app stores and IP addresses, for non-compliance. While it's unclear if all these requests feature in the show cause notices, the BWA emphasizes the need for fair competition. Rajagopal Menon, Vice President of leading Indian crypto exchange WazirX, stressed that “all we are asking for is a level playing field." The BWA's letter also urges the government to grant Indian retailers a 30-day window to withdraw assets before implementing any restrictions. The fledgling BWA industry body recently celebrated its first anniversary with its founding member, CoinSwitch founder Ashish Singhal, stating that he got involved with the BWA “to help build an effective regulatory framework for Web3 and digital assets in India.” Singhal added that the BWA’s mission is “to help India realize its vision to be the leading digital economy.” 

Japan’s Financial Services Agency (FSA) is moving to close gaps in crypto regulation and support a new bank-led stablecoin pilot, as markets watch for a potential Bank of Japan rate hike. Tougher oversight of crypto lending and IEOsAccording to a CoinPost report, at the fifth meeting of its Digital Asset Working Group held last week, the FSA discussed introducing new requirements to bring crypto lending clearly within the regulatory framework. While firms managing or staking crypto must register as exchanges, some operators have avoided registration by structuring services as borrowing schemes, which are not legally treated as asset management.Photo by Possessed Photography on UnsplashThe FSA flagged that users face both credit and volatility risks, yet operators are not required to segregate customer assets or use cold wallets. Some services offer returns around 10% or tie up funds for several years, with weak risk management and exposure to re-lending defaults and staking slashing. Under the new policy direction, operators will need stronger risk management for re-lending and staking, tighter custody controls, and clearer risk disclosures and advertising. Institutional-only borrowing not offered to the public will remain exempt. Some members questioned whether the new requirements would be practical to implement for off-chain operators, noting that staking is fundamentally on-chain. The group also examined initial exchange offerings (IEOs) lacking financial audits, particularly those aimed at retail investors. Members discussed limits similar to equity crowdfunding: investments over 500,000 yen ($3,000) capped at 5% of annual income or net assets, up to 2 million yen ($13,000). Most past domestic IEOs were under 500,000 yen ($3,200). Some warned such caps could be bypassed through secondary trading, where tokens are immediately tradable. Major banks pilot stablecoinAlongside stricter rules, the FSA will support a stablecoin pilot led by MUFG Bank, Sumitomo Mitsui Banking Corporation, and Mizuho Bank. CoinDesk Japan noted the project, the first under the Payment Innovation Project, will include three additional participants. Mitsubishi Corporation will oversee operations, while Progmat and Mitsubishi UFJ Trust and Banking will handle issuance and custody. The pilot, launching this month with implementation targeted within the year, will test whether a joint stablecoin by major banks can navigate regulatory and operational challenges. Rate hike speculation mountsJapan’s calibrated digital asset push comes as speculation grows over a possible Bank of Japan (BOJ) rate hike next month. Minutes from the BOJ’s October meeting, cited by South Korean outlet Edaily, show one board member saying most conditions for a hike have been met and that financial conditions would stay easy even after an increase. The BOJ kept its rate at 0.5% at that meeting. A rate hike was described as likely if firms are seen committing to wage increases ahead of next spring’s labor talks and if no major global shocks emerge. Markets, however, remain cautious, citing uncertainty over U.S. tariff effects and whether newly elected Prime Minister Sanae Takaichi will endorse such a hawkish stance. 

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.