OKX adds Uniswap in bid to eliminate gas fees

Korbit Passes Post-Audit for ISMS-P and ISO CertificationsSouth Korean crypto exchange Korbit announced on Wednesday that it has successfully passed a post-audit to maintain its Personal Information and Information Security Management System (ISMS-P) certification and four different International Organization for Standardization (ISO) certifications — ISO 27001, ISO 27017, ISO 27018, and ISO27701.“By maintaining our ISMS-P and ISO certifications this year, we were able to reaffirm the stability and trustworthiness of Korbit’s personal information protection capabilities and security management system,” said Oh Se-jin, CEO of Korbit.Photo by FLY:D on UnsplashRigorous criteriaThe ISMS-P is a security management system jointly operated by the Ministry of Science and ICT and the Personal Information Protection Commission, representing the highest level of security management in Korea. It combines 80 requirements for Information Security Management System (ISMS) certification and 22 requirements for Personal Information Management System (PIMS) certification, totaling 102 requirements that must be met. Once obtained, certification is valid for three years, and annual post-audits are required to maintain its validity.Korbit first obtained ISMS-P certification in September of 2021 and has once again passed this year’s post-audit that was conducted last Wednesday.Meeting international standardsIn addition, the exchange had previously passed post-audits for four ISO certifications related to information protection and personal information management systems earlier in June. This includes ISO 27001 for information security management systems, ISO 27017 for information security controls on cloud services, ISO 27018 for protection of personally identifiable information (PII) in public clouds, and ISO 27701 for privacy information management systems.This achievement demonstrates Korbit’s commitment to reliability and security when operating and managing exchange services.“As a crypto exchange, we will continually focus on strict security management to ensure the protection of customer information and assets,” said CEO Oh.

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

Dunamu Helps Adolescents Tell the Difference between Blockchain and BitcoinDunamu, the fintech company operating South Korea’s leading crypto exchange Upbit, announced on Thursday that its digital finance education program designed to help foster talent in digital finance amidst the current era of digitization and fintech has come to an end.Photo by Element5 Digital on UnsplashEmpowering digital finance literacy for the future generationDubbed “Duniverse” — a portmanteau of Dunamu and universe — the program was held from May to July for 4,100 middle school students throughout Seoul, Gyeonggi Province, and Incheon. The curriculum proved to enhance their understanding and literacy in digital finance.“Digital finance education for adolescents is essential in addressing various social issues, such as preventing financial accidents and income polarization,” said Lee Sirgoo, CEO of Dunamu.The first Duniverse program was held last year, hosting some 4,800 middle school students in vulnerable areas of Gyeonggi Province. Owing to the positive response, this year’s pool has been expanded to over 7,000 first-year middle school students in Seoul, Gyeonggi Province, and Incheon. In the first half of this year alone, a total of 4,120 students from 17 middle schools participated.The program featured lessons on the technologies of the Fourth Industrial Revolution, such as blockchain, NFTs, and metaverse, as well as basic financial knowledge. A total of eight sessions were led by a team of qualified instructors with years of experience in economic education. Dunamu employees also directly contributed to the review process of educational materials, the company said.Success recognized by students and teachers alikeIn a survey conducted by Dunamu targeting 435 participants, 93.1 percent of them expressed high satisfaction, stating that their understanding of digital finance improved. This portrays a meaningful upgrade from the answers of a previous survey conducted before the start of the program, where six out of ten respondents said that they had little knowledge about digital finance.They also reported that they now understand the difference between digital asset ownership and copyrights as well as blockchain and Bitcoin, and show interest when coming across digital finance-related content in the media.School teachers also praised the program for addressing blind spots in financial education and taking a proactive learning approach. “The students were able to learn about big data, ChatGPT, and more, which is especially valuable since such education for teenagers is still lacking. I believe it will help boost their competitiveness in the future job market,” said a teacher from Goam Middle School in Yangju, Gyeonggi Province.The teachers also approved of other topics that were covered, such as financial fraud prevention, to help teenagers avoid falling victim to financial scams. Suggestions were also made to expand teacher training courses.Upcoming programThis year’s second Duniverse program will be held from August to December for 2,712 middle school students in Seoul, Gyeonggi Province, and Incheon.Dunamu has continually devoted efforts to boosting social welfare and nurturing young talent. This includes “Dunamu Next Steppers,” a hope fund for young people with multiple debts, along with supporting emerging talents and artists with developmental disabilities in their participation in NFT projects.