Korean and U.S. regulators to discuss recognizing NFTs as virtual assets in May

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

Korea’s Premier Law Firm to Jointly Hold Seminar on Preventing Crypto ExploitsKim & Chang, a leading law firm in South Korea, has announced its collaboration with crypto exchange operator Dunamu to host a seminar on anti-money laundering (AML) and the prevention of crypto exploits. The event will take place at Korea University on Thursday, as reported by Moneytoday.Photo by David McBee on PexelsInauguration of a digital asset forumThe seminar is being organized by the Digital Assets Policy Forum, an organization dedicated to developing the digital asset market and safeguarding investors. The inauguration ceremony of the forum will also be held at the event.Talks by distinguished figuresThe seminar will commence with a keynote speech by Aaron Bice, Senior Subject Matter Expert at Chainalysis, a blockchain data analysis firm based in New York.Following Bice’s address, several distinguished individuals from South Korea will deliver presentations. Ahn Chang-kook, a high-level official from the Financial Intelligence Unit at the Korean Financial Services Commission, will elucidate the challenges and solutions associated with crypto exploits. Oh Jeong-eun, a prosecutor from the Incheon District Prosecutors’ Office, will provide insight into the investigations of unlawful foreign exchanges in banks and their implications. Advisor Ko Cheol-soo of Kim & Chang will shed light on the evolving global landscape of AML regulations in the crypto sector. In addition, Kim Kwang-hoon, a manager at Dunamu, will explore the topic of crypto AML systems.Panel discussionsA representative from Kim & Chang said that the event will gather a diverse group of experts in digital asset regulation, policy, and law from various sectors, including government, academia, and industries. These experts will not only deliver informative presentations but also actively engage in panel discussions during the event.

Leading cryptocurrency exchange platform Bybit has joined a growing list of competing platforms by applying for a Virtual Asset Trading Platform Operator (VATP) license with the Hong Kong Securities and Exchange Commission (SFC). The application, submitted through the Bybit affiliate business entity Spark Fintech Limited on Jan. 31, is currently under review along with 13 similar VATP applications.Photo by Simon Zhu on UnsplashStrategic licensing playIn the dynamic landscape of cryptocurrency regulations, obtaining a VATP license in Hong Kong is a strategic move. Currently, only two crypto exchanges, OSL and HashKey Exchange, are licensed by the SFC in Hong Kong. OSL secured its license on Dec. 15, 2020, while HashKey Exchange was licensed on Nov. 9, 2022. Under a partnership agreement with OSL, Interactive Brokers has been enabled in its ability to commence trading in Hong Kong. Exchanges who have followed through on the license application process include OKX, Gate.io, and KuCoin, among others. It’s not something that is being taken on without these platforms weighing up the long term potential due to the cost implications. It emerged last year that companies were spending up to $25 million in their efforts to obtain licensing in Hong Kong. VATP vs. VASP licensingThe VATP license holds significance as it allows Hong Kong-based firms to cater to retail customers in contrast to the Virtual Asset Service Provider (VASP) license, which restricts companies to serving professional investors. In Hong Kong, investors must have portfolios valued at a minimum of eight million Hong Kong dollars ($1.03 million) to qualify for professional investor status. Hong Kong has positioned itself as a leading destination for crypto companies, particularly in 2023, owing to its favorable regulatory approach compared to mainland China's stringent crackdown on digital assets. The SFC has introduced crypto-oriented regulations, opening doors for both institutional and retail investors to participate in the crypto market. This regulatory environment has contributed to the city-state's emergence as a hub for crypto activities. Dubai-headquartered Bybit's move to seek a VATP license aligns with the growing trend of crypto companies finding a home in Hong Kong. In a statement, Ben Zhou, the founder and CEO of Bybit, emphasized the city's strategic location and established financial infrastructure as ideal for their operations and serving institutional clients across the Asia Pacific region. Institutional offeringAs part of its strategy to grow its institutional customer base, the company revamped its institutional market offering last October. With that institutional business in mind, it has also formed strategic partnerships, including collaborating with Talos, an institutional digital asset trading technology provider, and joining forces with Copper to offer custodial and settlement services for institutional clients through Copper's ClearLoop service. Bybit, launched in 2018 by Zhou, boasts a substantial user base, serving over 22 million registered users in 160 countries globally. Claiming a daily trading volume of $16.53 billion, Bybit holds the fifth-highest score among spot exchanges worldwide and is the second-ranked derivatives exchange, trailing only behind Binance, according to CoinMarketCap data. The exchange has consistently ranked in the top positions for futures and perpetuals trading throughout the last calendar year.