Hong Kong establishes rules to enable crypto staking

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Crypto.com, the global crypto exchange platform headquartered in Singapore, has recently added an “AED Fiat Wallet,” allowing its users based in the United Arab Emirates (UAE) to deposit and withdraw UAE dirhams to and from their Crypto.com accounts. In a statement published on its website on Dec. 11, the firm outlined details of the added feature. So as to be able to access the AED Fiat Wallet, UAE residents will need to be registered on the platform with a UAE phone number. Once users configure platform settings to reflect the AED as their default currency, the platform displays the relevant deposit information to enable users to deposit the currency to their accounts. The minimum deposit has been set at 10 AED per transaction with a maximum of four million AED per day.Photo by Katerina Kerdi on UnsplashFacilitated by Standard CharteredCrypto.com claimed on X that the new feature could be set up easily, enabling fast and simple transfers. Additionally, the company is not charging users a deposit fee for AED deposits. Tarik Erk, Crypto.com’s General Manager for Middle East & Africa, explained that a collaboration with British multinational bank Standard Chartered had enabled the offering. Erk stated: “This new wallet launch is made possible through our global banking partnership with Standard Chartered which we announced in August, alongside the ongoing and valued support of VARA [Virtual Assets Regulatory Authority], which enables us to continue our expansion across the UAE. We’re extremely focused on offering our customers a seamless world-class experience and, at its very core, that includes ease of deposits and withdrawals – enabling our customers to interact with our products and services with as much flexibility as possible.” Crypto.com launched its service in the UAE in August, and at the time, it recognized the significance of its partnership with Standard Chartered. In September Standard Chartered announced the launch of crypto custody services in the UAE in collaboration with Brevan Howard Digital. The service was licensed by the Dubai Financial Services Authority (DFSA).  In November of last year, Crypto.com was awarded a license by VARA to provide virtual asset services. Last week, it emerged that the company had acquired Orion Principals Limited, an Abu Dhabi-based securities firm. The brokerage firm is licensed by the local regulator within the Abu Dhabi Global Market, an economic free zone and financial center. Crypto.com said that the acquisition will lead to the company rolling out new services to eligible platform users, including securities, options, futures and contracts for difference. Deutsche Bank partnershipHaving forged a partnership with TradFi banking giant Standard Chartered in the Middle East, Crypto.com announced a similar partnership with another TradFi giant, Deutsche Bank, last week. The collaboration will see Deutsche Bank provide the company with banking support and corporate banking services within its home base of Singapore, as well as in Australia and Hong Kong. Back in June, Deutsche Bank partnered with another crypto exchange business, Bitpanda, to assist it in offering real-time inbound and outbound payments on its platform. 

In the ongoing legal tussle over cryptocurrency assets, the High Court of Singapore has rejected a plea by the bankrupt crypto hedge fund Three Arrows Capital (3AC) to dismiss a lawsuit filed by Arthur Cheong, the founder of Web3 investment firm DeFiance Capital. This ruling represents a pivotal moment in the $140 million dispute, shedding light on the ownership and control of assets, while building upon DeFiance Capital’s previous success back in August of last year in having its preference for jurisdiction in Singapore endorsed.Photo by Tingey Injury Law Firm on UnsplashRecognizing assets held in trustOn Jan. 26, a Singapore judge ruled against 3AC's request to have Cheong’s claim thrown out, stating that DeFiance Capital has adequately demonstrated the existence of a Singapore-based trust safeguarding its assets. This revelation could potentially shield DeFiance Capital from 3AC's liquidators, marking a crucial juncture in the legal battle. The dispute traces back to an agreement where Cheong was set to launch an independent fund on the 3AC Group platform, with ownership and control vested in DeFiance Capital. This fund, leveraging 3AC's infrastructure, faced disagreements over the transfer of certain assets, whose undisclosed value became a point of contention in court documents. The downfall of the $10 billion 3AC hedge fund, responsible for the "Super Cycle" thesis predicting perpetual crypto price increases, had widespread repercussions in the crypto industry. DeFiance Capital bore the brunt of this collapse and the recent court ruling brings the firm closer to resolving the aftermath favorably. The ongoing argument holds strategic importance for DeFiance Capital, as the investment firm challenges any legal obligation for its shareholders to compensate 3AC creditors. "Wassielawyer," a pseudonymous restructuring attorney advising DeFiance Capital's founder Arthur Cheong, highlighted the significance of this stance on social media. Positive signThe judge's acknowledgment of the trust, while not conclusive, is viewed as a positive sign for DeFiance Capital. In a series of posts on the X social media platform, Wassielawyer outlined on Thursday that he sees this as "much-needed vindication" for Cheong, signaling a potential turn in favor of the investment firm. Wassielawyer emphasized that DeFiance Capital merely utilized 3AC's legal structure, without commingling operations. This distinction becomes crucial as carefully drafted legal documents form the basis for 3AC creditors attempting to seize DeFiance Capital funds. The restructuring professional added:”[DeFiance Capital] have on the basis of the substantive facts, ran an argument that the assets of DCs should not be used to pay back 3AC creditors. This eventuality would be manifestly unjust, enriching the creditors of 3AC at the expense of innocent DC investors.” Once a major player in the crypto hedge fund arena, 3AC's demise resulted from exposure to Terra, staked Ethereum and Grayscale's Bitcoin Trust. The bankruptcy filing on June 30, 2022, marked the end of an era for the once-mighty fund. Established in 2020, DeFiance Capital specializes in crypto investments, focusing on decentralized finance and GameFi. It has supported projects such as dYdX, Aave and Lido. This decision establishes a precedent for similar cases, particularly in jurisdictions like Singapore, emerging as pivotal hubs for cryptocurrency and blockchain-related activities. The outcome holds implications for how such legal disputes will be handled in the future, shaping the landscape of crypto-related legal proceedings.