Circle forges partnership with Japan’s Coincheck

Binance APAC Head Urges the Korean FIU to Approve Gopax’s Exec ChangesIn a recent interview with Yonhap News, Leon Sing Foong, Binance’s head of Asia-Pacific operations, emphasized the importance of the Korean financial regulator approving the change of executives at Gopax, a Korean crypto exchange.©Pexels/freestocks.orgDelayed staked asset returnFoong’s comments came in the face of mounting worries regarding the delayed repayment of assets stored in Gopax’s staking service GOFi. He explained that 25% of the assets staked in GOFi have been repaid, and the remaining assets will be refunded after approval of the Financial Intelligence Unit (FIU) of the Korean Financial Services Commission (FSC) is secured.Foong was appointed as the new CEO of Gopax last February, with Binance becoming the largest shareholder of Gopax’s operator Streami. In March, Gopax submitted an application to the FIU to inform them of the executive changes, as required by Korean law.However, the application review has been delayed amid concerns about the unclear location of Binance’s headquarters and its regulatory challenges in the US.Controlling staking servicesThe Binance executive believes Gopax’s staking service should be controlled by the exchange itself, rather than a third party. The current GOFi issue emerged due to Gopax’s management of its custody assets through crypto lender Genesis, which ceased trading following the FTX bankruptcy. Foong stated that Binance will require Gopax to maintain reserves of over 100% and eventually phase out the third-party-based service.According to Foong, Gopax’s business model will remain unchanged, and the exchange will work alongside Binance to bolster liquidity within the local market while enhancing both infrastructure and security measures. He considers internal risk management as Gopax’s top priority.Risk assessmentFoong also expressed confidence in the upcoming risk assessment of Gopax by Jeonbuk Bank, recently requested by the Korean Financial Supervisory Service (FSS). He said that the exchange is healthy, and that Binance has high-level anti-money-laundering (AML) capabilities.Korean law mandates crypto exchanges supporting Korean won trading have real-name bank accounts, and Gopax receives such accounts from its partner Jeonbuk Bank.Binance’s Asian expansionBinance’s endeavor to enter the Korean market is part of its strategy to expand its presence in Asia. It was previously reported that Binance Japan will start its operations around June this year.

Crypto exchange platform Crypto.com and Triple-A, a company that enables businesses to pay and get paid in digital currencies, both Singapore-headquartered entities, have entered into a partnership to enable direct crypto payments. Simplifying crypto paymentsCrypto.com set out details of the partnership in a press release published to its website on Nov. 21. The firm stated that its partnership with Triple-A will give its global customer base “access to a diverse range of new global merchants.” The duo have set out to simplify crypto payments for both merchants and users alike. Crypto.com users will shortly be enabled in making purchases from a range of e-commerce brands directly, using crypto held in their Crypto.com wallets. Through Triple-A’s input, Crypto.com users will be spared the need to manually convert digital assets to fiat currency before making purchases. Furthermore, users won’t incur a fee for any conversion that takes place behind the scenes.Photo by David McBee on PexelsCashback rewardsOnce launched, with the service initially planned to launch in Singapore before further rollout elsewhere, Crypto.com users will also be in a position to benefit from rewards. Eric Anziani, the company’s president and chief operating officer (COO), spoke to this element of the offering, stating: “Partnering with Triple-A enables us to do this by expanding crypto payments to a range of popular brands, creating a seamless shopping experience and providing an opportunity to earn cashback rewards to make spending crypto even more rewarding.” Volatility protectionAs part of the solution that has been put in place, Triple-A will ensure that merchants aren’t exposed to cryptocurrency volatility in accepting crypto as a payment method. The payments they receive from customers are instantly converted to their local fiat currency, with settlement occurring one day following the transaction. This approach also means that merchants don’t have added difficulties in terms of the tax treatment of cryptocurrencies, their management or related reporting requirements. With that in mind, Eric Barbier, CEO at Triple-A, said that the approach “allows merchants to provide Crypto.com users with an optimized digital currency payment user journey.” Anziani said that Crypto.com is trying to “push boundaries when it comes to integrating crypto payments into real-world scenarios and enhance shopping experiences for [its] users.”  In recent weeks, Crypto.com has been active in pursuing a number of initiatives in order to expand its reach. Earlier this week, the company launched a visa card in Latin America, enabling users within the region to earn rewards on purchases made via the card. On Nov. 14, it emerged that the company had acquired Australia-regulated brokerage firm Fintek Securities. It’s understood the acquisition was made in order to expand the range of financial products that Crypto.com can offer to its customer base. At the end of October, Watchdog Capital, a U.S. Securities and Exchange Commission (SEC)-registered broker-dealer, was acquired by the company.  Like many high profile crypto firms, Crypto.com has had its difficulties with regulators. Following the receipt of a Wells notice from the SEC earlier this year, the company responded by filing a lawsuit against the commission, alleging that the SEC had engaged in regulatory overreach in classifying crypto assets as securities. 

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.