Legislator calls for Bitcoin reserve in Hong Kong

The Financial Services and the Treasury Bureau (FSTB), a policy bureau attached to the government of the special administrative region of Hong Kong, has released a new digital assets policy statement, incorporating its “LEAP” framework for the digital assets industry within the city. The document, outlining the government’s objectives and guiding principles relative to the digital assets sector, builds on its first policy statement for the industry which it published in October 2022.Photo by Harry Shum on PexelsA ‘LEAP’ towards an integrated digital assets ecosystemThe FSTB suggests that this new policy statement builds upon foundational initiatives pioneered through the initial policy statement, asserting that “Hong Kong is poised to 'LEAP' towards a trusted, sustainable, and deeply integrated [Digital Assets] ecosystem embedded within the real economy.” The government agency also suggested that this “Policy Statement 2.0” also builds on the “ASPIRe” digital asset regulatory roadmap introduced by the Securities and Futures Commission (SFC) in February, outlining the next phase of digital asset sector development in Hong Kong. Strengthening global hub statusThe government has set out to home in on strategic measures to bring about greater liquidity in digital asset markets and diversify digital asset product offerings, while strengthening the Chinese autonomous territory’s position as a global hub for the digital asset sector. “LEAP” is an acronym for the proposed initiatives that underpin the new framework, including: - Legal and regulatory streamlining- Expanding the suite of tokenized products- Advancing use cases and cross-sectoral collaboration- People and partnership development The framework focuses heavily on the tokenization of real-world assets (RWA), with particular emphasis on bond tokenization. In February 2023, Hong Kong pioneered the issuance of the world’s first-ever tokenized government green bond. Building on that, it now seeks to bring about the regularization of the issuance of tokenized government bonds. The Hong Kong government would also like to see tokenization efforts expanding into “a broader range of assets and financial instruments.” It cited sectors such as precious metals, non-ferrous metals and renewable energy as candidates for tokenization. Promoting tokenized ETFsThe authorities are also encouraging tokenized exchange-traded funds (ETFs), with plans to introduce a stamp duty waiver for these products as an incentive. Additionally, the Hong Kong government is interested in nurturing the development of secondary market trading of such tokenized ETF products, whether that’s through digital asset trading platforms or other channels. The framework considers the further development of stablecoins. The city’s new licensing regimen for stablecoin issuers commences on Aug. 1. The FSTB maintains that stablecoins have the potential “to transform payments, supply chain management, and capital market activities by offering a cost-effective and efficient alternative to traditional systems.” In order to capitalize on this potential, the Hong Kong government, together with the city’s regulators, intends to enable licensed stablecoin issuers in the city “to explore and implement different stablecoin use cases.” Cyberport, a Hong Kong business park and digital technology incubator that hosts in excess of 1,650 startups, will also extend its support through its incubation ecosystem to further the objectives set out in the Hong Kong government’s new digital assets policy statement.

The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an advisory to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks. The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users' wallets without proper authorization.Photo by Junrui Wu on UnsplashDrainer-as-a-service threatOf particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider. The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers. Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim's system, enabling hackers to withdraw funds without additional authorization. MS Drainer and Inferno DrainerWhile no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023. Last month, Singapore-based cyber security firm Group-IB produced a report concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November. In December, the Pink Drainer hacking group notched up another victim, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer reported that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days. Hardware walletsTo counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers. In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem. As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.  

Korean Travel Rule Solution Provider Partners with ACAMS to Enhance AML MeasuresConnect Digital Exchanges (Code), the Korean Travel Rule solution provider, announced today that it has forged a partnership with the Association of Certified Anti-Money Laundering Specialists (ACAMS), the largest international membership organization of its kind.©Pexels/Savvas StavrinosTravel RuleThe Travel Rule, issued by the Financial Action Task Force (FATF) to prevent money laundering and terrorist financing, requires virtual asset service providers to screen the information of the senders and recipients of crypto transactions.Code’s collaboration with ACAMSCode will collaborate with ACAMS to develop more effective anti-money laundering (AML) measures in Korea by producing anti-financial crime experts, and enhancing Travel Rule regulations. ACAMS offers internationally recognized training programs, with more than 40,000 certified AML specialists in over 175 countries and regions.More about CodeCode was jointly established by Korea’s major crypto exchanges Bithumb, Coinone, and Korbit in August 2021. Code recently published a report containing the Travel Rule operation results over the past year in Korea and its recommendations.