HAQQ Network co-founder points to Indonesia’s crypto hub potential

Poly Network Exploit Results in Billions of Nonexistent TokensPoly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.Photo by Shubham Dhage on UnsplashNetwork suspensionThe Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.Bridge vulnerabilitiesBridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.Illiquid Metis tokensMetis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

Atomic Wallet Hacker Uses Lazarus Crypto MixerThe stolen cryptocurrency from the recent $35 million hack of Atomic Wallet is already being moved to a crypto mixer favored by North Korea’s notorious cyber-hacking group.Photo by Micha Brändli on UnsplashSinbad.ioAccording to UK-based crypto compliance analysis firm Elliptic, the funds have made their way to a crypto mixer used by Lazarus Group, a notorious hacker group that focuses on crypto heists which is believed to have direct ties with the North Korean government.On June 5, Elliptic’s Investigations Team revealed that it had traced the funds from the Atomic Wallet hack to the crypto mixer Sinbad.io. Lazarus had previously used the mixer to launder over $100 million in stolen crypto assets.While the exact amount sent to the mixer was not specified, Elliptic noted that the stolen funds were being exchanged for Bitcoin before undergoing obfuscation through the mixer. Additionally, Elliptic reported that Sinbad.io is likely a rebranded version of Blender.io, another mixer extensively used to launder funds by the Lazarus Group. Blender.io has been sanctioned by the US Treasury.Atomic Wallet hackThe hack of several user accounts on Atomic Wallet occurred on June 3, resulting in losses of up to $35 million. News of the issue broke with the following tweet from the project team (which has subsequently been deleted): “We have received reports of wallets being compromised. We are doing all we can to investigate and analyze the situation. As we have more information, we will share it accordingly.”In a follow-up tweet the next day, the team confirmed that it was investigating the matter with the assistance of a number of “leading security companies.”However, Atomic Wallet later downplayed the incident, stating that less than 1% of its monthly active users were affected. The project team was castigated by users for trying to present the hack as a minor incident. One user took to Twitter to call out the Atomic Wallet team for “having the nerve to come to the networks and say that only 1% of wallets were affected.”The Atomic Wallet project is based out of Tallinn, Estonia, having been founded in 2017. It claims to provide a non-custodial decentralized multi-currency crypto wallet. The product supports over fifty coins and two hundred tokens. It also offers atomic swaps between digital assets, while also supporting integrations with instant exchanges such as Changelly, ShapeShift, and others.Roland Säde, the Chief Marketing Officer of Atomic Wallet, assured users that the team is working tirelessly to recover the stolen funds. He emphasized the need to complete the investigation to develop a concrete plan.Despite the ongoing efforts, Säde urged victims to track the illicit transfers and report them to popular crypto exchanges. By doing so, it was thought that may hinder the scammers from exchanging the funds.Crypto hacking menaceLazarus Group hackers have been the bane of the crypto space in recent years. Elliptic released a report last month that identified Japan as having been the country most adversely affected by the North Korean hackers. It’s understood that the estimated $721 million in stolen crypto from Japan-based entities amounts to nearly nine times the value of North Korea’s exports based on 2021 data.While Atomic Wallet is directly reporting the incidents, Säde believes that having more individuals monitoring the hackers’ activities will make it more challenging for them to move the funds undetected. Unfortunately, Elliptic’s recent findings suggest that for many victims, it may already be too late to prevent further misuse of their stolen cryptocurrency.

Many Countries Are Welcoming Traditional Financial Institutions Into Crypto — When Will Korea Catch Up?Although overseas traditional financial institutions are gradually expanding their reach into the crypto market by launching related services and products, this remains challenging for institutions in South Korea, where it is difficult for them to even invest in virtual assets.Photo by NASA on UnsplashMajor developments in other countriesAccording to industry sources, traditional financial companies such as Japan’s largest investment bank and brokerage group Nomura Group, and New York-based investment banking company Citigroup are starting to bring new crypto-related services and products to the market.Laser Digital, the asset management unit of Nomura Group, launched a Bitcoin adoption fund targeting institutional investors, according to an official press release from last Tuesday (local time), which will provide institutional investors with direct and secure access to investments in Bitcoin.Similarly, Citigroup’s Treasury and Trade Solutions (TTS) is piloting its new crypto-based cash management and trade finance service dubbed Citi Token Services, which caters to institutional clients by utilizing blockchain and smart contract technology to provide digital asset solutions. “Digital asset technologies have the potential to upgrade the regulated financial system by applying new technologies to existing legal instruments and well-established regulatory frameworks. The development of Citi Token Services is part of our journey to deliver real-time, always-on, next-generation transaction banking services to our institutional clients,” said Shahmir Khaliq, Global Head of Services at Citi.Earlier this summer, several asset managers in the US, including BlackRock, applied for a spot-traded Bitcoin exchange-traded fund (ETF) with the US Securities and Exchange Commission (SEC), drawing the interest of the industry as a whole. The SEC has been delaying its decision regarding approval for the ETF and will likely do so until its allotted 240-day review period is over, but industry experts predict that the approval will go through for several reasons including BlackRock’s implicit influence as the world’s biggest asset manager and the SEC’s former court loss against Grayscale for its review of the firm’s spot Bitcoin ETF.These developments are made possible through the commonly held opinion that the involvement of traditional financial institutions in the crypto sphere is beneficial for the industry due to their ability to increase liquidity by moving much larger amounts of capital than the crypto market alone.Moreover, many countries around the world already allow institutions to invest in virtual assets. For instance, the US Nasdaq Stock Market has already listed crypto futures-based ETFs such as Bitcoin and Ether, and there are trust products on the market like Grayscale’s Bitcoin Trust that target qualified investors. Countries like Hong Kong have also gradually begun to allow individual investments in virtual assets again, while institutional investment has always been permitted.Roadblocks in KoreaIn contrast, it remains impossible for institutional or corporate investors in Korea to invest in virtual assets, let alone offer virtual asset fund products. Although local asset managers like Mirae Asset Global Investments and Samsung Asset Management have listed Bitcoin-related ETFs in the US and Hong Kong, such products do not exist in South Korea.Korean authorities also banned financial institutions from holding, purchasing, or investing in virtual assets back in 2017 on the grounds that their investment in cryptocurrencies could stimulate investor sentiment. Also, shadow regulation after the enactment of the Act on Reporting and Using Specified Financial Transaction Information in 2021 practically bars local corporations and institutions from using crypto exchanges, though there is no provision that explicitly prohibits opening corporate bank accounts on crypto exchanges.In response to this situation, an anonymous industry insider highlighted the need for a nationwide drive to support virtual assets and Web3 technology. “This is the time to push emerging industries, and we should not overlook industry trends. The current situation is somewhat frustrating,” they said. “Japan was the most conservative country in this regard, but it has recently opened up and subsequently gained momentum. Korea should also take a more progressive approach.”