Hong Kong's Mox Bank launches crypto ETF trading

Duncan Chiu, a member of Hong Kong's Legislative Council, has expressed concerns over the stringent regulations imposed on cryptocurrency exchanges by the Securities and Futures Commission (SFC). In an opinion piece for the Hong Kong Economic Journal, Chiu argued that these rigorous standards have deterred major global exchanges from entering the Hong Kong market, undermining confidence in the region's commitment to developing Web3 technologies. He highlighted the recent withdrawal of license applications by prominent exchanges such as OKX, Gate.io and HTX as indicative of the flaws in the current regulatory framework.Photo by Chapman Chow on UnsplashLicensing system and industry developmentChiu criticized the fragmented approach to policy development for Hong Kong’s virtual asset market, noting that various aspects like VATP (Virtual Asset Trading Platforms), stablecoin issuance and virtual asset over-the-counter trading are managed by different departments without strategic industry consideration. He also mentioned feedback from license applicants who feel that the authorities lack a forward-thinking vision for fintech and are applying traditional financial principles too rigidly to the dynamic and innovative sector of Web3. Furthermore, Chiu pointed out the disconnect between the industry and regulators, particularly in the experience required of management in licensed crypto operations versus the practical experience of regulators in Web3, complicating effective communication and progress. 

OKX shores up App security following bug discoveryCryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.User data and asset vulnerabilityThe flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.Taking to the X social media platform on Tuesday, CertiK wrote:”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”Photo by FLY:D on UnsplashPrompt responseRecognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”Ongoing exploitsThis security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.Industry collaborationThe collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

Terraform Labs fails to halt class action lawsuitThe High Court in Singapore has dismissed an appeal filed by Terraform Labs and its co-founders, marking a significant step forward for the plaintiffs behind a class action initiated against the company.That’s according to a report published by Singaporean publication, the Business Times, on Thursday. The legal development follows the collapse of TerraUSD (UST) tokens in May of 2022, resulting in the loss of billions of dollars in market value. The collapse, in turn, has led to several lawsuits against Terraform, its founders and affiliated entities, with those court actions playing out in courtrooms in Singapore, South Korea, Montenegro and the United States.Photo by Wesley Tingey on UnsplashFraudulent misrepresentation allegedThe class-action suit, initiated in September 2022 by Julian Moreno Beltran and Douglas Gan on behalf of 375 others, alleges fraudulent misrepresentation by Terraform, Co-Founders Do Kwon and Nikolaos Alexandros Platias and the Luna Foundation Guard (LFG). The claimants argue that these misrepresentations induced them to purchase UST, stake the tokens and retain them as their value plummeted.UST had been designed to be pegged to the U.S. dollar with a 1:1 ratio. However, flaws in the tokenomics behind that digital asset meant that it faced a loss of confidence in May 2022, trading at around $0.05 when the court’s decision was released. The claimants collectively suffered losses of nearly $57 million.Terms of use cited in attempt to dismissTerraform attempted to have the lawsuit dismissed by invoking an arbitration clause in its website’s terms of use, asserting that users had waived their rights to a jury trial or participation in a class action. However, the Assistant Registrar (AR) rejected this application, stating that the defendants failed to establish an arbitration agreement.The AR highlighted that the terms of use were inconspicuous on the website, and there was insufficient effort to draw users’ attention to those clauses. Terraform, Kwon and associated entities appealed this decision, which was heard by Justice Hri Kumar Nair on Sept. 25.Despite establishing a prima facie case for an arbitration agreement, the court ruled that Terraform’s participation in the legal proceedings, including filing a defense and counterclaim, meant it could no longer seek a stay in favor of arbitration.Multiple actionsIt’s a busy time for all stakeholders relative to the Terraform collapse. Playing out within the same timeframe is a lawsuit in the United States taken by the Securities and Exchange Commission (SEC) against Terraform and Do Kwon, where the SEC claims that crypto asset securities fraud has been carried out.The latest installments in that saga in recent weeks have seen both parties file to seek summary judgment. Last week, a court in New York approved the confidential treatment of specific documentation which had been produced by Jump Crypto, a division of proprietary trading firm Jump Trading.There are also criminal actions underway. In a South Korean court in October, Terraform Labs Co-Founder Daniel Shin denied wrongdoing in the Terra/Luna collapse. Meanwhile, a court in Montenegro has approved the extradition of Do Kwon, with a final decision to be made shortly as regards whether he should be extradited to the United States or South Korea.