Iran acts to regulate crypto to counter sanctions

The crypto space continues to suffer a disproportionate share of hacks and scams that were further exacerbated on Wednesday, with Malaysian crypto data aggregator the latest to succumb to a security breach. Serving as yet another stark reminder of the persistent threats plaguing the sector, a phishing scam targeted CoinGecko's X account, leading to a brief compromise that raised concerns about the safety of user information.Photo by GuerrillaBuzz on UnsplashPhishing scamDuring this incident, hackers posted a phishing link on CoinGecko's X account, falsely advertising a token airdrop for a cryptocurrency named GCKO. The deceptive post claimed that GCKO could be used for API services, including the cryptocurrency ANKR. Swift action by CoinGecko involved the removal of the fraudulent post and a public warning urging users to avoid interacting with any suspicious links or content. In an X post, CoinGecko wrote:”Our Twitter accounts @CoinGecko and @GeckoTerminal have been compromised. We're taking immediate steps to investigate the situation and secure our accounts. Please DO NOT click on any links or engage with suspicious content. Your security is our top priority.” Employee errorThe firm followed up with an update on Thursday, attributing the breach to a team member inadvertently clicking on a fraudulent Calendly link, granting unauthorized access to the hacker. Despite having two-factor authentication (2FA) enabled and employing robust security measures, CoinGecko emphasized that the inadvertent click allowed unauthorized access. The compromised accounts were then exploited to disseminate misleading information and potentially engage in malicious activities. CoinGecko expressed sincere apologies for any confusion or inconvenience caused by the incident. The company reiterated its commitment to platform security and continuous improvement of internal controls, assuring users that corrective measures were promptly implemented. SEC incompetenceCoinGecko's security incident occurred within 24 hours of a similar occurrence involving the U.S. Securities and Exchange Commission (SEC). The SEC's X account was compromised, with scammers posting a false message from Chair Gary Gensler about the approval of spot bitcoin exchange-traded funds (ETFs). While CoinGecko identified a vulnerability in its security regimen, the SEC later confirmed that the breach in its case was far more basic. It was not due to infrastructure attacks but rather the lack of 2-factor authentication (2FA) tied to the SEC's account, the most basic form of operations security. Gensler and the SEC have come in for major criticism from the crypto community in the U.S. due to a policy of regulation by enforcement that has been pursued. With that, the Commission came in for swift and harsh criticism in the immediate aftermath of its X account hack. Many pointed out the irony of Gensler advising consumers to secure their accounts back in October when the SEC itself had failed to do so. Others queried who would be responsible for what some interpreted as an episode of market manipulation, something that the SEC has perennially associated the crypto markets with. During the time that the account was compromised, millions of dollars of value were liquidated in short and long trading positions. CoinGecko's quick response serves as a valuable lesson in the importance of vigilance and proactive security measures amid the growing threats facing the cryptocurrency community.

Police Crack Down on JPEX Continues with Millions RecoveredHong Kong authorities are intensifying their efforts to deliver justice to victims of the JPEX cryptocurrency exchange fraud, a scandal that has left thousands of investors in distress.According to recent reports in the South China Morning Post (SCMP) on Wednesday and Friday, more arrests have been made, with the recovery of more assets. The pursuit of those responsible for orchestrating this massive scam is in full swing.Photo by RJ Joquico on UnsplashLargest digital asset fraud in Hong Kong historyThe Dubai-headquartered JPEX crypto exchange, an unauthorized platform, stands accused of defrauding more than 2,400 individuals of nearly $200 million, marking it as the largest digital asset fraud case in Hong Kong’s history. During a recent press conference, the Secretary for Security of Hong Kong, Chris Tang Ping-keung, expressed his commitment to ensuring justice prevails for the victims.Tang revealed that among the assets seized by the police were more than HK$8 million ($1 million) in cash and assets valued at HK$77 million ($9.8 million), including real estate and digital currency. These significant seizures mark a pivotal step in the ongoing investigation. Furthermore, the police have apprehended 12 individuals connected to the JPEX scheme, including three employees of JPEX Technical Support Company and two YouTubers.The first signs of trouble emerged when JPEX users faced difficulties in withdrawing their funds on September 15. In response to mounting complaints and regulatory warnings, JPEX infamously raised its withdrawal fees to 999 Tether in a desperate attempt to discourage users from withdrawing funds. This maneuver raised suspicion and intensified the scrutiny on the exchange.Ongoing investigationLocal authorities in Hong Kong have been inundated with 2,369 complaints from victims who lost their investments in the unregulated exchange. The estimated total monetary loss is HK$1.4 billion ($178 million). While the police continue towards bringing those responsible to justice, they are also collaborating closely with regulators to implement measures aimed at preventing the emergence of such fraudulent schemes in the future.Recent developments have seen the net tighten around the individuals connected to JPEX. Additional arrests have been made in Hong Kong and Macao. Hong Kong police apprehended two individuals who were caught attempting to destroy documents with paper shredders and bleach. In addition, they seized almost HK$9 million ($1.15 million) in cash and gold from three apartments.Meanwhile, Macao authorities apprehended two more individuals and confiscated over HK$14 million ($1.8 million) in cash and valuables. The suspects had made multiple visits to Macau this month, which may be linked to their illicit activities.Hong Kong’s Securities and Futures Commission (SFC) had issued a prior warning, stating that JPEX operated without the necessary licenses and had maliciously frozen users’ funds. Last week, the SFC took a step further, blocking access to web and mobile versions of the platform with JPEX responding by encouraging users to sidestep the measure through the use of VPN.

AEON, a modular payment protocol that aims to standardize and unify crypto payments, has launched a QR code payment system on the BNB Chain, with a view towards expanding crypto payments in Southeast Asia. The project clarified in a press release published on Nov. 11 that its BNB-based QR code payment system has been established in collaboration with Terminus, a payment association project that bridges crypto and real-world transactions through banks, e-wallets and fiat settlement networks. The new service means that merchants can now access AEON’s payment system without having to acquire additional hardware, while crypto payments are settled in fiat currency. AEON believes that the new offering provides greater convenience for users and merchants, while also supporting the BNB Chain ecosystem through the promotion of a seamless payment experience at offline locations throughout the Southeast Asian region.Lara Jameson on PexelsIntegrating with Asian payment networksUsers can now rely on assets such as Bitcoin (BTC), Ethereum (ETH), Tether (USDT), USD Coin (USDC) and Binance Coin (BNB) as a source of funds for payments, which can be made in-store by scanning a QR code via a network of merchants throughout Southeast Asia. Once a transaction is confirmed, funds are converted to fiat currency in real time. The offering minimizes friction for the merchant, making it easy for them to accept crypto as a means of payment. This scan-to-pay feature has now been integrated with national payment networks like VietQR, a money transfer service in Vietnam that enables customers to scan and pay across the mobile apps of the Southeast Asian nation’s banks. Similarly, AEON has integrated with another such service in Thailand known as ThaiQR, which is supported by a number of leading Thai banks.  Connecting Web2 with Web3In an article posted to X last month, Terminus outlined that acting as a “payment association” isn’t just a label but an attempt by the company to take an approach that seeks to connect Web2 with Web3 in a manner previously thought impossible. It believes that it is creating a powerful ecosystem by taking disparate payments providers and joining them together via a cohesive payments association. In bridging Web2 and Web3 Terminus says that it is laying “the groundwork for a future where payments are not only efficient but universally accessible.” Network integrations seem to be key where crypto payment solutions providers are concerned. With that, AEON has been active in bringing about other such integrations beyond this collaboration with Terminus. In September, it entered into a partnership with Singapore’s Alchemy Pay, a crypto-to-fiat payment gateway, with a view towards combining Alchemy’s expertise in payments with AEON’s payments infrastructure and protocol. In October AEON integrated with the TRON layer-1 blockchain network. The collaboration means that decentralized applications within the TRON ecosystem can accept crypto payments over AEON’s payments infrastructure.