Top

Hackers utilize social engineering, move funds through Cambodian platform

Policy & Regulation·July 16, 2024, 11:28 PM

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies.

 

Huoine Pay

On July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. 

https://asset.coinness.com/en/news/5dcc9ca840696cba8765b6b77f39bbf6.webp
Photo by allPhoto Bangkok on Unsplash

‘Pig butchering’

It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.” 

 

Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.”

 

The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet.

 

The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform.

 

Compromising crypto businesses

In a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications.

 

A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware. 

 

Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

More to Read
View All
Policy & Regulation·

Nov 30, 2023

Zipmex proposes creditor repayments of 3 cents on the dollar

Zipmex proposes creditor repayments of 3 cents on the dollarBeleaguered Singaporean crypto exchange Zipmex has unveiled a restructuring proposal aimed at repaying creditors. According to a report published by Bloomberg on Wednesday, the initial offer stands at 3.35 cents for every dollar of the creditors’ claims.Photo by Alexander Grey on UnsplashRestructuring challengesThis restructuring proposal unfolds against the backdrop of a challenging period for Zipmex, triggered by the aftermath of last year’s crypto price downturn. The crypto exchange, which operates in Thailand, Indonesia, Australia and Singapore, is currently undergoing a court-supervised restructuring process based in Singapore.In its efforts to restructure the business, Zipmex is grappling with a debt of $97.1 million. That total debt level is contingent upon the eventual recovery of assets. Bloomberg cited sources familiar with the matter, suggesting that depending on the success of these recovery efforts, the repayment figure could potentially surge to 29.35 cents per dollar.Creditor dissatisfactionHowever, not all major creditors are on board with Zipmex’s proposed plan. Expressing reservations, they are pushing for an independent review to scrutinize recent changes in the company’s assets and liabilities, as outlined in an Oct. 4 court document. This external examination is deemed crucial to ensuring transparency and fairness throughout the restructuring process.In response to these developments, Marcus Lim, the Group Chief Executive Officer of Zipmex, refrained from providing detailed comments due to the confidentiality of the ongoing arrangement. While acknowledging inaccuracies in information sourced from external outlets, he chose not to elaborate on them further.Investor deal failureA previous attempt to sell Zipmex to V Ventures, a subsidiary of Thoresen Thai Agencies, fell through. To add to the struggling company’s woes, it emerged earlier this week that Thailand’s securities regulator, the Securities and Exchange Commission (SEC) recently instructed Zipmex to halt operations in the country due to insufficient net capital.The company had been fined 11 million baht ($315,000) by the SEC earlier this year. The SEC cited the co-mingling of corporate and customer funds as one regulatory breach. Furthermore, the Thai regulator claimed that between May and July 2022, Zipmex “did not have in place a system to effectively prevent conflicts of interest in such matters and the business operation does not have an adequate risk control system.”In response to this recent regulatory directive, Zipmex Limited issued a statement to its customers, expressing its commitment to ensuring proper and compliant business operations in line with the criteria set by the Thai SEC. Consequently, the temporary suspension of digital asset trading and deposit of all types was deemed necessary.The intricacies of Zipmex’s financial restructuring will be closely watched by market observers, especially considering the volatility in the crypto market and the regulatory challenges faced by the company in multiple jurisdictions. The success of the proposed repayment plan, contingent upon asset recovery, remains uncertain, leaving creditors and industry stakeholders on edge.As Zipmex grapples with these multifaceted challenges, its future trajectory hinges on navigating both the demands of the bankruptcy process alongside regulatory requirements.

news
Policy & Regulation·

Sep 26, 2023

Japan’s Cryptoasset Group Proposes Self-Regulatory Reforms for IEO System

Japan’s Cryptoasset Group Proposes Self-Regulatory Reforms for IEO SystemThe Japan Cryptoasset Business Association (JCBA) has revealed a preliminary draft advocating for reforms in self-regulation to bolster the soundness of the initial exchange offering (IEO) system. This draft has been submitted to the Japan Virtual and Crypto Assets Exchange Association (JVCEA).IEOs serve as a mechanism enabling various enterprises to accrue funds and broaden their user base by orchestrating token sales on cryptocurrency exchanges for Web3 projects. This fundraising method holds the potential to enhance trust as crypto exchanges, supervised by the Japanese Financial Services Agency, undertake evaluations of project feasibility and maintain ongoing oversight.Photo by Takashi Miyazaki on UnsplashPositive regulatory developmentsThe ameliorating regulatory landscape is also a positive development, highlighted by this year’s tax law amendment, which grants exemptions to enterprises’ self-issued tokens from year-end corporate taxation. In Japan, four IEOs have been conducted so far, with the inaugural IEO amassing over 900 million yen (approximately $6 million). The cumulative amount from the four IEOs has surpassed 4.4 billion yen. However, given that the IEO is a relatively nascent fundraising method, improvements in token price stability and operational modalities are required to ensure that businesses and users can engage with it confidently.Enhanced user protectionAgainst this backdrop, JCBA, an organization comprised of various enterprises involving virtual assets and Web3, has been discussing the direction of the IEO system from a corporate viewpoint since May of this year. Establishing price stabilization measures and selling restrictions within the Japanese IEO system will contribute to user protection by allowing investors to manage their assets under domestic regulations. JCBA stated that users will find domestic exchanges more secure in comparison to foreign ones.As this proposal represents an initial draft, deliberated and formulated only within the JCBA, the group intends to consult and assess the feasibility of the self-regulatory rules with each pertinent organization as necessary.Four key pointsThe document submitted by JCBA to JVCEA presented four key points concerning the IEO. Pertaining to pricing, it suggested the diversification of calculation methods customized to each project and the specification of price-related disclaimers. On liquidity, it posited that liquidity objectives should be established at the time of listing, and an environment conducive to securing liquidity should be developed. JCBA also pointed out the necessity of establishing rules for price stabilization measures at the time of listing. Finally, regarding selling restrictions, it was noted that both token issuers and exchanges should adhere to a minimum three-month lock-up period for tokens.

news
Web3 & Enterprise·

Nov 15, 2024

Coincheck to become first Japanese crypto exchange to list on Nasdaq

Coincheck, a subsidiary of Monex Group, a Tokyo-based global financial services firm, has gained U.S. Securities and Exchange Commission (SEC) approval to become the first Japanese crypto exchange to list on the Nasdaq, an American stock exchange.Photo by Denys Nevozhai on UnsplashSPAC mergerThe approval by the U.S. regulator was filed on Nov. 13. The listing has been enabled due to the company’s decision to enter into a merger with a special purpose acquisition company (SPAC), namely Thunder Bridge Capital Partners (TBCP).  A SPAC raises money through an initial public offering (IPO) to either acquire or merge with an existing company. Opting for a SPAC means that Coincheck can forego a lot of the time and expense that would be necessary if it attempted to effect an IPO on its own. Parent company Monex Group published a statement outlining that Coincheck CEO Yuko Seimei had “been diligently preparing for listing its common stock on the Nasdaq Global Market (“Nasdaq”) through a previously announced business combination with Thunder Bridge Capital Partners.” Possible Nasdaq listing on Dec. 10 In a press release issued by TBCP, the company claimed that the proposed merger is anticipated to close on or about Dec. 10, 2024. That eventuality is subject to stockholder approval, Nasdaq approval and specific closing conditions. Consequently, Coincheck’s Nasdaq listing could potentially happen as early as Dec. 10. TBCP is holding a shareholder vote on the merger on Dec. 5. If all conditions are satisfied to pave the way for listing, the company’s stock will be listed using CNCK as the Nasdaq stock ticker. Once the merger and Nasdaq listing have been accomplished, Coincheck will still remain a subsidiary of Monex Group. The merged business will gain access to $237 million, held in trust by TBCP, with Monex retaining an 82% stake in the company. Furthermore, Thunder Bridge CEO Gary Simanson will lead the new company. The $1.25 billion merger had been in the works since 2022, having faced multiple delays on the path towards merger completion and Nasdaq listing. Coincheck finally filed with the SEC to merge back in May. Parent company Monex has other interests in the digital asset sector beyond its involvement with Coincheck. Last December the company acquired a majority stake in 3iQ Digital Holdings, a Canadian crypto asset management company.Monex has just launched a new brand, Monex Web3, comprising of Monex’s Web3 business portfolio. It also offers a Web3 consulting business, using its local know-how to guide Web3 startups in entering the Japanese market. Coincheck has also engaged in partnerships to assist other firms in gaining access to the Japanese market. Earlier this year the leading Japanese crypto exchange partnered with USD Coin (USDC) stablecoin issuer Circle, in an effort to expand USDC access within the local market. In January 2018 the exchange suffered what was at the time the world’s largest ever digital asset theft, losing $534 million in virtual assets in a hack of the platform.

news
Loading