Korea’s crypto sector moves ahead as investors stay on edge

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Coinbase Affirms Commitment to India Despite Disabling Sign-UpsLeading US-based cryptocurrency exchange Coinbase announced on Monday that it has temporarily disabled new user sign-ups for its exchange platform in India.A report emerged via India’s English-language business daily The Economic Times on Monday which stated that Coinbase was stopping “all services” for Indian users.Photo by Big G Media on UnsplashClarification of a misunderstandingIt appears that Coinbase sent emails to a subset of its Indian customers, notifying them of the cessation of exchange operations in the country by September 25. However, a more recent report by TechCrunch outlined that Coinbase has provided further clarification that these emails were sent exclusively to customers who did not meet the updated standards set by the company.On that basis, these messages do not affect and are not relevant to the majority of Coinbase users in India. The email further advised affected users to transfer their funds from the platform by the specified date.A Coinbase spokesperson communicated to TechCrunch via email, stating:“We stopped allowing new user sign-ups on our exchange product in India back in June of this year. We maintain a robust tech hub in the country and offer live products, including our Coinbase Wallet. We are committed to India over the long term.”Coinbase’s proprietary exchange app in India reportedly boasts fewer than 50,000 monthly active users, as indicated by data from Sensor Tower, shared by an industry executive.Difficulty in cracking Indian marketDespite its aspirations, Coinbase has been unable to make headway with local authorities since launching its exchange in India over a year ago. The lack of progress with local officials has proven frustrating for company executives, including Durgesh Kaushik, who joined Coinbase last year as the Senior Director for Market Expansion, only to leave the company within a couple of months.Coinbase’s CEO, Brian Armstrong, made a visit to India last year to launch the exchange service by adding support for India’s popular payment instrument, the Unified Payments Interface (UPI). Unfortunately, the body overseeing UPI immediately denied Coinbase’s recognition, leading Coinbase to suspend support for the payment system shortly thereafter.UPI has proven to be a runaway success in India. Consequently, being able to access and integrate with it would be very important in providing Coinbase’s Indian customers with the means of on-ramping and off-ramping between the exchange and fiat currency. Coinbase affirmed its commitment to collaborating with the National Payments Corporation of India (NPCI) relative to UPI but these efforts simply have not borne fruit.RBI pushbackIn May of the same year, Armstrong disclosed that Coinbase had to halt its trading service in India due to “informal pressure” from the Reserve Bank of India (RBI), the nation’s central bank. Armstrong pointed out that cryptocurrency trading isn’t illegal in India — in fact, the country had recently imposed taxation on it. However, there were elements within the government, including the RBI, that appeared less enthusiastic about cryptocurrencies and were exerting “soft pressure” behind the scenes.Notably, other Indian cryptocurrency exchanges like CoinDCX and CoinSwitch remain operational, but they’ve had their own struggles in their own local market. In August CoinSwitch downsized its headcount, citing a 30% tax on crypto gains and a 1% tax deducted at source (TDS) on transactions as contributing factors. That same month, CoinDCX cut its headcount by 12%.

South Korean crypto exchange Bithumb is working with the International Criminal Police Organization (Interpol) to combat global criminal activities involving digital assets. According to Korean media outlet Joseilbo, Yoo Jung-ki, who heads Bithumb's Policy Support Office, met with Tomonobu Kaya, Assistant Director of Interpol's Financial Crime and Anti-Corruption Centre, during a recent meeting in Thailand. The gathering was part of a three-day event held from March 10 to 12, organized under Interpol's Project ViCTOR (Virtual assets-facilitated financial Crime – Trace, Obstruct and Recover), an initiative funded by Japan's Ministry of Foreign Affairs. During their meeting, the two officials explored ways to enhance cooperation while committing to maintaining a close, sustainable working relationship.Photo by rc.xyz NFT gallery on UnsplashExchange shares expertiseDuring his Bangkok visit, Yoo delivered a speech addressing emerging crypto crime trends and necessary regulatory changes to protect users. He also discussed the Financial Action Task Force's (FATF) guidelines and recommendations, along with South Korea's policies on anti-money laundering and combating terrorism financing (AML/CFT). His presentation resonated with the audience, particularly when he emphasized the importance of collaboration between the public sector and crypto exchanges on multiple fronts, including recovering stolen funds from criminals. Regarding the meeting, Yoo stated that he found it meaningful to participate, as a representative of South Korean crypto exchanges, in a gathering focused on developing global countermeasures against money laundering and digital asset crimes. He added that Bithumb is committed to supporting the international cooperative system aimed at preventing and recovering from crypto crimes. Interpol’s effortsThe event also covered recent updates on Interpol's Global Rapid Intervention of Payments (I-GRIP) stop-payment mechanism, launched in 2022, and Singapore's evolving crypto regulatory landscape. In June last year, Interpol reported that police across 61 countries had collectively intercepted approximately $135 million in fiat currency and $2 million in cryptocurrency, with I-GRIP helping authorities track illicit proceeds from both types of currencies.Interpol's involvement in investigating crypto crimes has been expanding recently. According to Cointelegraph, Argentine lawyer Gregorio Dalbon has requested that a prosecutor and judge issue an Interpol Red Notice for Hayden Davis, a co-creator of the LIBRA token allegedly linked to Argentine President Javier Milei. The controversial memecoin, launched last month, briefly reached a $4.5 billion market cap before its value collapsed.