Japan eyes 20% crypto tax rate by 2025 in major regulatory shift

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

Singapore High Court Recognizes Cryptocurrency as Personal PropertyIn a significant ruling on July 25, Judge Philip Jeyaretnam of the High Court of Singapore declared that cryptocurrency is capable of being held in trust and should be recognized as property.The judge’s decision came in response to a case brought by Dubai-headquartered crypto exchange Bybit against its former employee, Ho Kai Xin, who was accused of transferring approximately 4.2 million Tether (USDT) from the crypto exchange to her private accounts without authorization.Photo by Tingey Injury Law Firm on UnsplashNo fundamental differenceIn his ruling, Judge Jeyaretnam emphasized that there is no fundamental difference between cryptocurrencies, fiat money, or even physical objects like shells when it comes to their status as property. He argued that as long as these objects hold value and are based on mutual faith, they can be considered property. The judge’s verdict is seen as a crucial step in establishing the legal status of digital assets within the Singaporean jurisdiction.Addressing the argument that cryptocurrencies lack physical presence and therefore cannot be considered property, Judge Jeyaretnam drew an analogy, stating: “We identify what is going on as a particular digital token, somewhat like how we give a name to a river even though the water contained within its banks is constantly changing.” By equating cryptocurrencies to named entities, the judge made it clear that physical tangibility is not a prerequisite for something to be classified as property.Cryptocurrencies have valueFurthermore, the ruling challenges the perception that cryptocurrencies have no “real” value. Judge Jeyaretnam firmly refuted this notion, highlighting that the value of any asset, whether physical or digital, is ultimately determined by collective human belief and judgment.One critical classification made by the judge is grouping cryptocurrencies under the category of “things in action” within British common law. This categorization means that cryptocurrencies are considered a form of property, over which personal rights can be claimed and enforced through legal actions, rather than requiring physical possession.The judge’s decision also referenced the Monetary Authority of Singapore’s (MAS) consultation paper, which proposes implementing segregation and custody requirements for digital payment tokens. By taking cues from the MAS’s stance on digital assets, the court emphasized the legality of holding cryptocurrencies on trust, as long as practical methods for identification and segregation are in place.Cues taken from existing lawSingapore’s legal framework for property also played a crucial role in the ruling. Judge Jeyaretnam pointed to Order 22 of Singapore’s Rules of Court 2021, which defines “movable property” to include various assets, such as cash, debts, bonds, shares, and cryptocurrency or other digital currency. This inclusion reinforces the recognition of cryptocurrencies as a valid form of property within Singaporean law.In April of this year, a Hong Kong court reached a similar conclusion, recognizing cryptocurrency as property. In the High Court of Justice in London the following month, non-fungible tokens (NFTs) were recognized as “private property.”Overall, Judge Jeyaretnam’s ruling represents a significant milestone in the legal recognition of cryptocurrencies in Singapore. By acknowledging cryptocurrencies as property, the court provides greater clarity and certainty for crypto users and investors while affirming the importance of embracing digital assets within the nation’s legal framework.

CoinEx Reveals Insights Into Recent Platform HackHong Kong crypto exchange CoinEx has issued a further update relative to the security breach that occurred on the platform last week resulting in one of the exchange’s hot wallets being compromised.Photo by FLY:D on UnsplashImmediate responseIn the immediate aftermath of the $70 million hack, CoinEx took action to safeguard user assets and initiate an investigation into the incident. It suspended all deposit and withdrawal services and executed an emergency shutdown of the hot wallet server. Following this, the company securely moved the remaining assets to cold storage, commencing the process of reconstructing and deploying a new wallet architecture.The firm also engaged in an investigation, spearheaded by its wallet and security teams, to ascertain the extent of the breach. Moreover, CoinEx claims to have proactively reached out to fellow exchanges to freeze any assets related to the attack.Haipo Yang, the Founder and CEO of CoinEx, conveyed his apologies to affected users through his personal X (formerly Twitter) account. He emphasized the team’s commitment to restoring services promptly and reassured users that their funds will remain secure.Following up on that commitment, CoinEx published an update on the hot wallet hack on September 15 to address these concerns individually.New wallet deploymentThe exchange expects to finalize wallet upgrades within the upcoming week, after which withdrawals will gradually be phased in, subject to security evaluations. The CoinEx team is currently working on developing and deploying an entirely new and robust wallet system capable of managing activities across 211 chains and 737 assets.The firm has outlined that each of its product lines operates independently, featuring its own risk control system. Consequently, the security incident that occurred on CoinEx will not affect the integrity of its other product lines.In its most recent update on Tuesday, the Hong Kong crypto exchange confirmed that 80% of its wallet system has now been reconstructed. It added that it has initiated preparations to enable the withdrawal system on the platform. It stated:”Details about the resumption of withdrawals, including specific dates, times, and arrangements, will be announced on the CoinEx website. Please stay updated on our announcements for the latest information.”Ongoing investigationRegarding the identity of the attacker, CoinEx has confirmed that the matter is currently under investigation. While some security firms have made attribution claims, the company is focusing primarily on deploying the new wallet architecture, restoring affected users and functionalities, and enhancing overall security.At the same time, the company has initiated communications with the hackers in a bid to proactively seek a mutually agreeable resolution. While the incident implicates the loss of a substantial amount of funds, the firm maintains that in the context of the overall business, the sum represents only a small percentage of total assets under its management.Exchange security remains a major challenge in the crypto sector, with hacks happening on an ongoing basis. Last week, Seychelles-headquartered peer-to-peer crypto platform Remitano acknowledged a $2.7 million hack. At the beginning of September, crypto gambling platform Stake was reported to have suffered a $41 million hack.