South Korea considers permanent crypto investigative unit

Gala Games announces worldwide release of 4X RPG Eternal ParadoxGala Games officially launched South Korean game developer Ndream’s newest game, Eternal Paradox, worldwide on Tuesday (PT), according to an official blog post. Eternal Paradox is a 4X mobile role-playing game (RPG) where players can engage in war simulations or turn-based battles by playing with tiered characters, or “Mercenaries”. In particular, it employs Web3 ownership mechanisms, including a native token Eternal Time (ETIME), which is built on Gala Games’ layer 1 blockchain GalaChain.Photo by Jack B on UnsplashRewards-based gaming universeThe token powers the Eternal Paradox ecosystem and distributes rewards to players, such as in-game assets, upgrades and special Mercenaries that are minted as non-fungible tokens (NFTs).“We are pleased to bring a new game from South Korean game developer Ndream to the Gala Games platform. We will continue to work with Ndream to ensure that global users can enjoy the game for a long time to come, as it is a piece of Korean content recognized by many around the world,” Gala Games said.Global RPG experienceThe RPG is playable in 11 languages and allows simultaneous chatting with automatic translation, facilitating communication between global users. It also implements a seasonal system, resetting every 49 days to create an immersive and unique gameplay experience. Players around the world can interact with each other by participating in guild wars each season, where national guilds can battle for control of territory and earn rewards.“Eternal Paradox is a superb combination of turn-based RPG and war simulation,” said Kwon Won-seok, CEO of Ntroi, a subsidiary of Ndream and the executive producer of Eternal Paradox. “I’m very curious to see which country will be the winning guild in the first season. We hope you enjoy the game.”Eternal Paradox is now available for mobile download on the Google Play Store, Apple App Store and Gala Games platform. Support for PC play will be available in the future. Gala Games also noted that the game is not available in some countries, including South Korea.

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Dunamu’s Legal Team Recognized by Korean Police for Cyber Security ContributionsDunamu, the blockchain and fintech company behind South Korea’s largest cryptocurrency exchange Upbit, recently announced a noteworthy security achievement. At the 16th Cyber Security Awards organized by the Korean National Police Agency (KNPA), the leader of Dunamu’s Legal Team 3 was recognized with the KNPA Commissioner General’s Certificate of Appreciation. This accolade was in acknowledgment of the legal officer’s pivotal role in fostering collaboration between the private sector and police to combat the rising tide of cryptocurrency-linked crimes.Photo by Franck on UnsplashSupport guides and educational resourcesDunamu stands out as the only Korean virtual asset service provider (VASP) to have an employee distinguished in this manner this year. It’s worth noting that Dunamu’s legal teams have been proactively cooperating with law enforcement, providing them with investigation support guides and educational resources.A representative from Dunamu’s legal teams expressed gratitude to all team members for their collaborative efforts in combating virtual asset-related crimes and appreciated the recognition for their achievement. The official further emphasized Dunamu’s ongoing dedication to maintaining close cooperation with police and investigative bodies, aiming to cultivate a healthy virtual asset ecosystem.Awards since 2008The Cyber Security Awards were established in 2008 to recognize and honor those making significant contributions to cyberspace security. The awards not only motivate cyber police officers but also aim to bolster collaboration between the police and the private sector.This year, 27 distinguished individuals — including police officers, civil servants, and ordinary citizens — were recognized at the ceremony held on October 19 in Songdo Convensia, Incheon. They received commendations and certificates of appreciation for their contributions in areas ranging from cybercrime investigation and prevention to digital forensics.