AhnLab Blockchain Company to integrate digital wallet into Sogang University’s education metaverse

Hot Wallet Exploit Results in $23M Bitrue LossBitrue, a Singapore-based crypto exchange, has fallen prey to a $23 million hack due to a hot wallet exploit. The exchange has been forced to suspend all withdrawals until April 18, to provide an opportunity to conduct a thorough security review.©Pexels/Karolina GrabowskaHot wallet vulnerabilityHot wallets are used by exchanges to store small amounts of cryptocurrencies for easy access. These wallets are connected to the internet and are therefore more vulnerable to attacks compared to cold wallets, which are stored offline. In the case of Bitrue, hackers were able to exploit the hot wallet and steal cryptocurrencies worth $23 million.In a series of Twitter posts, the exchange outlined that the exploit occurred at 07:18 (UTC) on Friday. “We were able to address the matter quickly and prevented the further exploit of funds”, it went on to state.The stolen digital assets include ETH, QNT, GALA, SHIB, HOT and MATIC. Bitrue outlined that the hot wallet funds account for only 5% of overall funds and that the rest of its wallets remain secure and have not been compromised.Blockchain security firm PeckShield outlined how the funds were swapped and drained. A wallet it has labeled as “Bitrue drainer” swapped 173,000 QNT, 22.55 billion SHIB tokens, 46.4 million GALA and 310,000 MATIC for 8,540 ETH. The ether is now being held within the following address:0x1819EDe3B8411EbC613F3603813Bf42aE09bA5A5Reimbursing usersIn response to the hack, Bitrue has promised to reimburse all affected users. However, the process could take some time.The incident underscores the importance of taking precautions when storing cryptocurrencies on exchanges. Users should only keep a minimal amount of cryptocurrencies on an exchange and should not store more than they can afford to lose. Ongoing exploits, hacks and frauds exemplify the need for users to only use reputable platforms with a proven track record of security.Doubling down on securityBitrue has promised to improve its security measures to prevent similar incidents from occurring in the future. The exchange’s response to the hack has been lauded by many in the cryptocurrency community, who have praised the company’s transparency and commitment to reimbursing affected users.The cryptocurrency community has been vocal in its criticism of exchanges that fail to prioritize security. The Bitrue hack is just the latest in a series of incidents that have highlighted the importance of maintaining security in the world of cryptocurrency.It’s not the first security breach that the exchange has encountered. In 2019 Bitrue suffered a $4.7 million loss, with quantities of both XRP and Cardano (ADA) having been stolen. On that occasion, the exchange released tracking details relative to the stolen funds. Thanks to collaboration with Huobi, Bittrex and ChangeNOW, the funds and associated accounts were frozen.According to data from CoinGecko, Bitrue trades an average of $1 billion in digital assets daily, with bitcoin and ether trading pairs accounting for a large proportion of that trading volume. The Bitrue hack has been a wake-up call for the cryptocurrency community and serves as a reminder of the ongoing risks associated with storing cryptocurrencies on exchanges.

Hong Kong's Office of the Privacy Commissioner for Personal Data (PCPD) has issued a directive for the Worldcoin Foundation to cease its operations within the region, citing violations of local privacy laws. The decision comes after the PCPD found that Worldcoin had improperly collected facial and iris data from approximately 8,302 individuals. The agency’s investigation included ten covert visits to six different Worldcoin locations between December 2023 and January 2024. According to the PCPD, the extent of data collection by Worldcoin was deemed "unnecessary and excessive" failing to adhere to the Data Protection Principles.Photo by Claudio Schwarz on UnsplashConcerns over data retentionThe privacy watchdog criticized Worldcoin for its intention to retain personal data for up to 10 years. This retention period was intended for training AI models for user verification processes but was judged by the PCPD to be excessively long, amounting to prolonged retention of personal data. Following the findings, the PCPD has issued an enforcement notice to Worldcoin, mandating the cessation of all its activities in Hong Kong. Privacy Commissioner Ada Chung has called on the public to report any ongoing operations by Worldcoin in the city. In response to growing international scrutiny, Worldcoin announced in March that it would halt the collection of personal data and is planning to introduce a new feature titled "Personal Custody," which would purportedly allow users to store their data on their devices. This change comes as Worldcoin faces additional challenges in other jurisdictions, including Spain and Portugal, which have also expressed concerns over the project's data collection practices. The project was also scrutinized in South Korea but it recently resumed services. As of now, Worldcoin has not provided comments regarding the recent regulatory actions. 

The Philippines Forging Crypto Reg. Path US Could Learn FromThe Philippines has demonstrated best practice in operating a sensible regulatory framework relative to cryptocurrency while the United States has erred by engaging in regulation via enforcement while responding after the horse has bolted in relation to a string of crypto company collapses. That’s according to Robert De Guzman, Head of Legal Compliance at Philippines-based cryptocurrency exchange Coins.ph.©Unsplash/C BuezaIn an opinion piece published in Forkcast News on Tuesday, De Guzman lays out his view as to what’s required in terms of regulation, while drawing comparisons between the application of regulation relative to crypto in both jurisdictions.The need for “sensible” regulationDe Guzman believes that the crypto industry’s recent failures are a wake-up call for the whole sector. Losses of billions of dollars affected Celsius Network, BlockFi, Voyager Digital, Genesis, and FTX, and led to Silvergate, Silicon Valley Bank (SVB), and Signature banks’ collapse in a week. To maintain consumers’ trust, he believes that sensible regulation is necessary for the crypto exchanges dealing with digital assets.The legal compliance expert cites the FTX collapse. FTX’s Sam Bankman-Fried’s empire was among the largest collapses. FTX pretended to support regulation, but its true nature was an offshore exchange for global clients. Nonetheless, some businesses act on their regulation support by acquiring licenses and complying with central bank audits in the countries of operation.State-level and industry-level regulationThe crypto industry being open to self regulation is one element of the solution, he says. Regulators must proactively protect their consumers from scams and business failures, not just clean up the mess after millions of people have been harmed.Regulatory failuresDe Guzman points the finger at reactionary regulatory action. Regulators filed charges against crypto industry founders after their collapse. Previously, they missed the problems of the largest companies. FTX, based in the Bahamas, was mismanaged, and American regulators only responded after customer issues. Regulations by enforcement, preferred in several countries, wait for failure to happen before taking action. Over-regulation through enforcement pushes platforms offshore, where Wild West-type environments thrive, with clear consequences.Regulators in some countries focus on surface-level questions, like which tokens should be considered securities, while others, like in the Philippines, prioritize execution-level details to protect consumers. Anti-money laundering measures and custody are core issues, with the G-7’s Financial Action Task Force’s Travel Rule likely to be more strictly applied. Active regulation and audits are needed to ensure financial platforms act responsibly with customer deposits. Basic rules need to be put in place through a licensing regime, followed by regulation of market practices like commingling of assets, self-dealing, and trading against customers.The Philippines sensible approach to regulationThe Coins.ph legal guru holds out his home country as exemplary in terms of its approach to regulation. The Philippines’ regulatory regime requires a virtual asset service provider (VASP) license to operate a crypto exchange, as well as additional licenses for other services. The country’s central bank, BSP, directly regulates all crypto exchanges and expands its crypto regulations to adapt to market needs. KYC processes in the Philippines require recognition of valid ID documents from across 82 provinces.Additionally, the BSP expects the industry to cooperate in quarterly audits where they share balance sheet information and disclose digital assets in hot and cold wallets. Regulators in the Philippines are proactive and knowledgeable about the crypto space, which sets a sensible framework based on customer protection.