China’s digital yuan set for deposit-based role in banks next year

Crypto vulnerability uncovered with $1B in digital asset exposureSecurity vulnerabilities in the validator infrastructure of InfStones, an established infrastructure provider, have been disclosed by Tel Aviv-headquartered cybersecurity firm dWallet Labs.Photo by Brett Jordan on UnsplashBlockchain network validator vulnerabilityIn a detailed Medium blog post published on Tuesday, dWallet Labs shed light on a series of vulnerabilities that, when exploited, could potentially allow attackers to gain full control, execute code and extract private keys from numerous validators on major blockchain networks. Cryptocurrencies such as ETH, BNB, SUI, APT and others were identified as at risk, with potential direct losses estimated to exceed one billion dollars.The vulnerabilities discovered by dWallet Labs opened the door for attackers to compromise the private keys of validators across multiple blockchain networks, putting over one billion dollars of staked assets at risk. In response to the findings, InfStones, a Web3 infrastructure platform, also released a statement on Tuesday acknowledging the potential threat. However, its representative, Darko Radunovic, disputed the figures provided by dWallet Labs in a statement sent to Cointelegraph. Radunovic stated that the vulnerabilities identified in the production environment account for below 0.1% of their active nodes launched to date, emphasizing that the impact would be limited to a small fraction of their operational nodes.According to InfStones, “237 instances were in scope, of which 212 instances were deployed for our development and testing purposes, and 25 freshly deployed instances in the production environment.”Mitigating steps takenThe company detailed the immediate actions taken to mitigate the vulnerabilities, including shutting down the affected ports, as well as rotating all credentials and keys within their platform. An internal review conducted by InfStones revealed no additional adverse effects. Notwithstanding that, the company took the additional step of hiring an external security firm to audit its systems and policies.Meanwhile, dWallet Labs Founder and CEO Omer Sadika shared his thoughts on the X platform as to how he believes such events should be handled. Sadika wrote:”The worst way to handle a cybersecurity vulnerability is not taking responsibility and lying. We were super open and transparent with the goal of eliminating the risk to web3. My take: it’s not about whether you are fully secure or not, because no one is, it’s about how you handle it and maintain the trust with your partners and customers.”The collaboration between dWallet Labs and InfStones sheds light on the ongoing challenges faced by the cryptocurrency industry in maintaining the security and integrity of blockchain networks. While vulnerabilities were identified and addressed, the incident underscores the importance of proactive security measures to safeguard the assets and data within the rapidly evolving landscape of digital assets.

The European Council has banned all transactions within the European Union (EU) involving the Russian Ruble-backed stablecoin A7A5, according to a press release published Oct. 23. The prohibition targets the stablecoin itself, its developer, its Kyrgyzstan-based issuer, and the operator of a platform that facilitates major A7A5 trades. The package also takes aim at Russian crypto exchanges.Photo by Christian Lue on UnsplashAdditional banking restrictionsThis measure is part of a broader set of economic sanctions against sectors the EU stated assist the Russian invasion of Ukraine, including energy, finance, and defense industries. As part of this financial clampdown, the EU will also impose a ban on five additional Russian lenders starting Nov. 12. One of those lenders, Alfa-Bank, recently began offering Bitcoin buying and selling services, according to an X post by journalist Pete Rizzo. The European body said the new crypto measures address Russia’s increasing use of digital assets to circumvent existing sanctions. Russian banks were cut off from the SWIFT international payment system in early 2022, following the onset of the Russo-Ukrainian war. Reports of Russia using cryptocurrency to finance malign activities have surfaced previously. Earlier this month, Sławomir Cenckiewicz, the head of the Polish National Security Bureau (BBN), told the Financial Times that Russia has employed crypto to finance attacks on EU countries. Cenckiewicz said that a network of agents recruited by Russia’s GRU military intelligence agency and uncovered in Poland in 2023 had been substantially funded with cryptocurrency. Reflecting this concern, lawmakers in Poland’s lower house approved a bill in September to strengthen national crypto oversight, a move also expected to help curb Russian funding channels. Cenckiewicz noted that Polish intelligence agencies are closely monitoring the legislation to prevent loopholes that allow foreign actors to support agents using digital assets. Russia’s evolving crypto policyThe EU’s action comes as Russia itself is attempting to refine its own cryptocurrency rules. According to the Moscow Times, Russia's central bank wants to limit cryptocurrency use strictly to cross-border payments within an experimental legal regime (ELR). The institution continues to reject recognition of cryptocurrency as a legal means of payment and has advocated banning its use for domestic payments and retail investment, while permitting trading only for high-net-worth individuals through licensed platforms. Russia’s finance ministry has expressed a more flexible view, pointing to the scale of crypto adoption among the public. Earlier this year, the central bank estimated that domestic crypto transactions exceeded 1 trillion rubles (about $12.4 billion) per month, and that as of March, wallets linked to Russian users held roughly 827 billion rubles (about $10.2 billion). The finance ministry and the central bank have agreed to tighten supervision of the crypto market, with officials expecting to finalize the new framework before the end of the year. 

The Ministry of Justice Investigation Bureau in Taiwan has referred Nine Chen, a popular Taiwanese singer-songwriter and television program host, to the prosecutors' office in Taipei on suspicion of aggravated fraud and violations of banking laws for his alleged involvement in a fraud scheme linked to the JPEX cryptocurrency exchange. Local media publication the United Daily News reported on June 26 that as an outcome from an investigation into the matter, the authorities have established that Chen acted as a brand ambassador for JPEX in 2023, receiving 320,000 USDT in the process. While Chen has been referred on to the prosecutors’ office in Taipei, they have yet to press charges against him. Photo by Thomas Tucker on UnsplashOngoing sagaThe first public soundings of an issue in Taiwan relative to JPEX emerged in November 2023. At that time, the Taipei District Prosecutors Office (TDPO) requested that Chang Tung-ying be taken into custody amid allegations of fraud. Tung-ying was understood to have been chief partner at JPEX’s Taiwan office.  The previous month, the TDPO had called Chen in as a witness. The singer had informed local media that he was out of pocket for funds he had held in digital assets via JPEX, incurring a 15% loss.  At that time, the authorities in Taiwan arrested dozens of suspects related to what is believed to be a fraud to the value of approximately $205 million. Hong Kong investigationsJPEX garnered the most negative reaction in Hong Kong. In excess of 2,000 complaints were registered with local regulators within the Chinese autonomous territory relative to the cryptocurrency exchange.  Problems were first reported in September 2023 when the platform outlined that it had experienced a liquidity crisis. Losses in Hong Kong relative to the platform were understood to be in the region of $180 million.  In an effort to deal with the matter, JPEX proposed a plan in October 2023 to transition the business to a decentralized autonomous organization (DAO). Multiple arrests were made by the Hong Kong authorities, with a collection of assets being seized in an effort to gather up funds on behalf of platform customers who found themselves out of pocket. While JPEX hit the headlines in 2023 for questionable activity in Asian markets, the business is actually headquartered in Dubai in the United Arab Emirates (UAE). In September of last year, Dubai’s Virtual Assets Regulatory Authority (VARA) outlined that as far as it was concerned, JPEX wasn’t regulated in Dubai and hadn’t registered with the regulator.  Following the same pattern in Taiwan, JPEX had not registered with the Financial Supervisory Commission (FSC) relative to anti-money laundering (AML) regulations, which it requires crypto platforms to comply with. Taiwanese authorities have experienced issues with a number of crypto platforms over the course of the past 18 months. Aside from JPEX, the founder of ACE Exchange, David Pan, was arrested in January 2024. Charges of money laundering and fraud were brought against him. As with JPEX, there was a connection with Dubai in that Pan was also the founder of Dubai-based crypto exchange ZORIXchange. In November 2023, Bitgin, a local crypto exchange, found itself at the center of an investigation into money laundering.