Hong Kong criminalizing promotion of unlicensed stablecoins

BC Card Accelerates Launch of NFT Guarantees for Secondhand Luxury Goods TradesSouth Korean credit card issuer BC Card announced on Sunday that it has applied for two domestic patents for blockchain technology that will be used to issue digital guarantees for purchases of luxury goods, such as bags, watches, and more. These guarantees will be minted as non-fungible tokens (NFTs) that can later be accessed by buyers or sellers during secondhand trades, which often pose risks and uncertainty regarding product quality or authenticity.Enhancing trust and securityThese NFTs will be based on paper or digital payment receipts — which contain detailed information on purchase receipts, such as product names, payment amounts, purchase dates, and shop information — that a customer receives after purchasing goods at stores that accept BC cards.Photo by Towfiqu barbhuiya on UnsplashBecause the guarantees are stored on a blockchain, they are almost impossible to tamper with. BC Card anticipates that this service will offer advantages like boosted safety, convenience, and security for both buyers and sellers who wish to partake in transactions of secondhand luxury goods.In addition, the data distributed across servers eliminates concerns about data loss. To achieve this, BC Card plans to collaborate with telecommunications provider KT and BC’s subsidiary, VP, which specializes in electronic payment services.“Through this patent application, we expect to significantly enhance the trustworthiness of secondhand luxury goods transactions in Korea,” said Kwon Sun-moo, Director of the New Financial Research division at BC Card. “After the patents are registered, we plan to collaborate with companies under KT Group like KT Alpha as well as other distribution companies in a business-to-business-to-consumer (B2B2C) system.”Access through a digital walletCustomers can take a photo of a receipt with their phones or download it, then upload it to BC Card’s financial platform, Paybook. The photo is then converted into an image that is automatically stored as an NFT on the blockchain network.Once a seller registers a payment receipt for a product that they bought, then the subsequent NFT guarantee can be accessed or sent through their BC Card digital wallet — a feature that the company plans to launch soon — at any time during future transactions. This offers a convenient solution to the possibility of losing receipts, which traditionally requires manually downloading them again from the card company’s website or app.Revolutionizing secondhand tradeThis new technology could play a significant role in the booming resell and secondhand goods trading market, the company said. According to data from the Korea Internet & Security Agency last year, the domestic secondhand market has grown from a scale of KRW 4 trillion in 2008 to KRW 24 trillion in 2021 and is projected to exceed KRW 30 trillion this year.“Through the registration of payment receipts, we can analyze consumption patterns and even suggest improvements in spending habits to our customers,” Director Kwon highlighted.BC Card is also considering offering luxury appraisal and authentication services along with the future launch of the NFT service.

China Unveils Offline SIM Card Wallet for Digital Yuan PaymentsThe People’s Bank of China (PBoC) has announced a new offline SIM card-based solution for its digital yuan, enabling users to make payments even with their phones switched off.Photo by Sumeet Singh on UnsplashEmbedded hardwareThe innovative initiative was revealed via a social media post on Monday. It aims to reach users with 2G phones who were previously unable to access digital currency.Currently, this feature is only available for Android phone users with NFC functionality, as no details have been given for iOS users or 2G phone owners. This innovation is part of the central bank’s efforts to expand the reach and usage of its digital currency, especially for users with 2G phones who were previously unable to access it.Earlier this year, the PBoC launched a similar solution for smartphone users, using near-field communication (NFC) technology. However, the latest solution relies on hardware embedded in SIM cards, which can act as a “hard” (offline) central bank digital currency (CBDC) wallet.Partnership with telecoms giantsThe central bank’s partners relative to this particular project include major telecom operators China Mobile, China Telecom, and China Unicom, as well as state-owned commercial banks Industrial and Commercial Bank of China and Bank of China, who have also introduced SIM card-based “hard wallet products.” These developments are expected to significantly improve the payment capabilities and network-free functionality of the digital yuan.To use this feature, citizens have to get a “super SIM card” from their carriers. After they have replaced their existing SIM cards and opened the digital yuan app on their phones, they will see an option to “open a SIM card hard wallet.” This will enable them to make touch-based payments to merchants even when their devices are powered off or lack network connectivity.SIM-based wallets are likely to be particularly useful for those using 2G devices or smartphones without NFC capabilities. Considering that about 20% of Chinese mobile users still use 2G phones, it would make sense for the PBoC to continue working in this direction with future updates.Driving adoptionThe ultimate plan of the PBoC regarding SIM-based wallets is not clear yet. However, recent developments, such as the pilot project in Qingdao where CBDC payments were tested on the metro system without electricity or network, indicate a strong push toward increasing the accessibility and adoption of the digital yuan.Frankly, moves to bring about adoption of the e-CNY have been nothing short of relentless. These measures have varied from paying state employees in e-CNY in Changshu, collaborating with French bank BNP Paribas so that its corporate clients start to use the digital yuan and enabling e-CNY bus fare payments on public transport in Jinan.China’s Jiangsu Province has integrated the digital yuan into its education system, while the resort city of Sanya recently introduced e-CNY ATM machines so that foreign tourists have a means through which they can access the digital currency. These developments demonstrate a clear commitment by the Chinese authorities in advancing the rollout of its central bank digital currency.

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.