Bithumb and NH Bank renew their real-name account contract for just six months

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

Singapore-regulated Telcoin, a developer of financial applications for mobile users, has successfully restored user balances following an exploit that saw approximately $1.2 million worth of funds transferred from affected accounts.Photo by Martin Sanchez on UnsplashUnauthorized withdrawal of assetsThe incident, which occurred in late December, was attributed to an error in the interaction between Telcoin's digital wallet and a proxy contract on Polygon. In a blog post which was published on Wednesday, the company shared a full post-mortem analysis report which it commissioned Hong Kong-based blockchain security firm BlockSec to carry out, relative to the exploit. The fault in the proxy contract's implementation caused a technical conflict that allowed for the unauthorized withdrawal of assets. Fortunately, no admin keys were compromised, ensuring that the broader Telcoin ecosystem remained unaffected. In response to the security breach, Telcoin took action by immediately freezing the use of its application as a precautionary measure. The team initiated an investigation and committed to releasing updates promptly to address the issue and restore normalcy. The identified address associated with the exploit was 0x35d2775e5f95596509951b140d68fc5b9185ff98. TEL token freefallDespite the initial market turbulence, with the price of the Telcoin (TEL) token plummeting, the cryptocurrency has demonstrated resilience. On Dec. 25, TEL fell from a peak price of $0.00235146 to $0.00122535, representing a 48% decrease. At the time of writing, the price has slightly rebounded, trading at $0.001335. Nevertheless, it's still down 40% over the course of the past month's trading. In a social media direct message to CoinDesk recently, Telcoin's founder and CEO, Paul Neuner, expressed pride in how his team responded to the issue, stating: “Making the decision to preemptively restore affected user wallets from our company treasury was a no-brainer, and I’m proud of the team for making that happen in record time.” Regulatory standingTelcoin's regulatory standing played a crucial role in instilling confidence during this challenging time. Although headquartered in Tokyo, the company is regulated in Singapore as a Major Payment Institution (MPI) by the Monetary Authority of Singapore (MAS). The firm is also registered and regulated in other global markets, including Canada and Australia. Telcoin maintains offices in Singapore, Tokyo, Dubai and Los Angeles. The company had been active in trying to shape regulation in the United States in 2023, with company executives having made repeated visits to Washington D.C. to meet with Financial Services Committee members and staffers on Capitol Hill. In April of last year, the company extended its service offering to the European market, starting out initially in Lithuania.It appears that the restoration of Telcoin's application services led to a significant boost in user confidence. The company reported a 400% increase in deposits compared to the previous month. Users responded favorably to Telcoin's swift resolution of the security breach, with a ratio of $3.60 being deposited for every $1 withdrawn in the first day since the service restoration. Telcoin's measures, collaboration with security experts and the surge in user deposits appear to have resulted in a resilient recovery. The saga highlights the importance of prompt and transparent responses in maintaining trust in the face of crypto security issues.  

Ribbon Finance Enables Altcoin Options TradingSingapore’s Ribbon Finance, a project that offers a suite of DeFi protocols that help users access crypto-structured products, has enabled altcoin options trading via its Aevo decentralized exchange (DEX).The Ethereum-based platform has begun offering options relative to cryptocurrencies beyond the top two of Ethereum and Bitcoin. Examples of coins that users of Ribbon Finance’s Aevo DEX can access as options include Lido’s LDO, Sui’s SUI token, APT, the token of high throughput proof of stake-based blockchain Aptos, the ARB token of layer two Ethereum scaling network, Arbitrum and Litecoin (LTC).Trading options on-chainThe Aevo DEX project took to Twitter on Monday to announce the development. The project has named the options product “Aevo OTC,” terming it as “the best place to trade altcoin options on-chain.” The firm claims that it’s the first platform to allow users “to trade altcoin options on-chain, in size, with institutional grade liquidity providers.”To kick things off, users will be enabled in trading these altcoin options across weekly, bi-weekly and monthly maturities relative to thirteen crypto tokens. The project plans to rotate the list of coins available for options trading every month depending upon what it deems to be the most popular coins on the market at a given time.Early service adoptersAs Aevo is a DEX, it will utilize on-chain margin systems. When a user buys an option the counterparty is required to post margin of approximately 30% of the notional trade size in the form of US dollar stablecoin, USDC. That procedure is all on-chain and transparent, enabled via smart contracts.Although officially launching the product today, Aevo OTC has been used in production for a number of weeks already. Both digital assets firm Galaxy Digital and crypto-native investment firm CoinFund have already been using the product to trade options.Other early adopters of the product include DeFi R&D and liquid crypto investment strategies firm Re7 Capital and crypto options and structured derivatives firm, OrBit Markets. In fact, Galaxy and OrBit Markets, alongside GSR, are acting as market makers for the product, enabling users to get instant quotes.Developing the crypto options marketThe development means that market participants can now strategize and take advantage of trading altcoins relative to specific events that may be fundamental to a project, such as Litecoin’s halving, for instance. At a later stage, the project intends to enable users in writing options contracts to include customized margins and a specified counterparty.The crypto options market is still at a very early stage of development. Deribit has been the dominant crypto options platform. Ribbon Finance’s service rollout broadens that market, extending options trading beyond the current limited offering of bitcoin, ethereum and solana.The product is more capital efficient for market participants as its portfolio margin system calculates real-time margin requirements, in that way offsetting money-making and losing positions relative to a particular portfolio.Photo by Shubham Dhage on Unsplash