Lotte Data Communication launches NFT donation campaign for children’s rehab center

Korea’s Virtual Asset User Protection Act to Take Effect in July Next YearThe Virtual Asset User Protection Bill was passed during the South Korean National Assembly’s plenary session last Friday, according to a report by news agency Newsis. The legislation aims to safeguard customer assets, establish regulations against unfair trading practices, and enforce penalties. The act is scheduled to take effect one year after its passage.Photo by KS KYUNG on UnsplashDefinition of virtual assetsUnder the act, a virtual asset is defined as a digital representation of economic value that can be digitally traded or transferred. It’s important to note that central bank digital currencies (CBDCs) are not considered virtual assets. Virtual assets with characteristics of securities will initially fall under the jurisdiction of the Capital Market Act.Roles of Korea’s central bankThe act grants the Bank of Korea (BOK) the authority to request data and information from virtual asset service providers (VASPs). This provision is deemed necessary for the Korean central bank to formulate monetary and financial policies, despite virtual assets not being equivalent to traditional currencies.Responsibilities of VASPsMoreover, VASPs are obligated to segregate users’ virtual assets from their own holdings. VASPs are also required to reserve the same type and quantity of virtual assets entrusted by users and maintain a certain proportion of these assets in a cold wallet, which is an offline storage solution.Unfair trading practices will be regulated in a similar manner as outlined in the Capital Market Act. The act specifically prohibits the use of undisclosed information, price manipulation, fraudulent transactions, and trading of self-issued virtual assets. VASPs are barred from suspending deposits and withdrawals without legitimate reasons. They are also mandated to monitor suspicious transactions and take appropriate measures to safeguard users. Any suspected unfair trading practices must be promptly reported to financial authorities. Violators of these rules may face criminal penalties, liability for damages, and potential class action lawsuits.Powers of financial authoritiesThe act also clarifies the powers of financial authorities in supervising, inspecting, and taking action against virtual asset operators. Unfair trade practices can result in imprisonment for more than one year (up to 10 years for violations related to self-issued virtual assets) or fines ranging from three to five times the illicit gains. Assets acquired through unfair trade practices will be confiscated, or an equivalent value will be charged if confiscation is not feasible.Impact on crypto investigationsThe absence of legislation directly addressing unfair trading practices in the virtual asset market has posed challenges for prosecutors. They had to rely on existing statutes related to fraud, the capital market, and financial investments. Once the new act takes effect, prosecutors will no longer need to determine whether a virtual asset qualifies as a security or not.Regarding this development, a prosecutor told local legal news outlet Law Times that the implementation of the new act will escalate prosecutorial investigations into cryptocurrency incidents.Meanwhile, the individuals behind the crash of Terraform Labs’ stablecoin TerraUSD and its sister coin Luna will not be subject to this act due to the legal principle of nulla poena sine lege, which prevents the retrospective enforcement of criminal laws. Do Kwon, co-founder of Terraform Labs, was recently sentenced to four months in prison by a Montenegrin court for passport forgery after being arrested in March. The other co-founder, Daniel Shin, has been indicted by prosecutors in Korea.

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies. Huoine PayOn July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. Photo by allPhoto Bangkok on Unsplash‘Pig butchering’It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.”  Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.” The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet. The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform. Compromising crypto businessesIn a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications. A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware.  Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

CipherBlade Opens Singapore OfficeThe emerging crypto hubs in Asia continue to make progress and on this occasion blockchain and crypto investigations firm, CipherBlade has decided to be part of that emerging growth in Singapore, opening an office in the city state.Cybercrime investigationsAccording to Asia-centric digital assets publication, Blockhead, the firm’s decision to open an Asian base was rooted in a need to service the requirements of a growing client base in the region, as demand intensifies for its services. CipherBlade has developed an expertise in the particular niche of blockchain analytics, cryptocurrency investigations and digital forensics.The firm was co-founded by its lead investigator Richard Sanders in 2018. Initially based out of Pittsburgh, CipherBlade has team members distributed internationally, in Europe, and now also in Singapore via its new office location.CipherBlade’s CEO of Americas, Justin Maile, said that “Singapore is a perfect location for us, with its strong reputation as a financial hub and its commitment to technological innovation.”With the expansion, it is understood that the company is currently recruiting to fill a variety of specialist positions.Photo by cottonbro studio on PexelsTracking down hackersAs the crypto and blockchain sector as a whole grows, it has also been accompanied by a significant component of illegal and illicit activity. This includes money laundering, fraud and hacking. The stand out example in the Asian region would be the activities of hacker collective, Lazarus Group.The hacker group has become notorious in the crypto space, given the extent to which it has pulled off hacks of various entities and DeFi networks in the sector. Hacks and exploits of DeFi networks accounted for 82% of all digital assets stolen in 2022. Lazarus Group has received particular attention as it is understood to be affiliated with the North Korean regime.The default approach for start-ups across all sectors is to focus on growth. The danger for start-ups in the DeFi space is that they overlook elements of network security in pursuing that growth, when achieving a high level of network security is an incredibly difficult task to begin with.Collaborating with industry stakeholdersThe activities of Lazarus Group and other more disparate entities like them, have created a need for the services of companies like CipherBlade. To that end, the firm collaborates with a wide range of industry stakeholders, including regulators, law enforcement, intelligence agencies and cryptocurrency exchanges.Recent work the blockchain forensics and cybercrime firm has been involved in includes a class action lawsuit brought against failed crypto lender Voyager. The allegation of the class action is that Voyager built in hidden fees to the detriment of customers.From crypto divorces to ‘pig butchering’ scamsPointing to the diversity of the firm’s work, it has been involved in over 150 crypto divorce cases. That is to say, tracking down digital assets belonging to one of the parties to a divorce so that those assets are recognized and made part of any divorce settlement.CipherBlade’s investigators have worked on cases involving ‘pig butchering’ crypto scams. These are instances of scams that lure the victim into contact with the scammer before the scammer gains their confidence, directing them onwards towards fraudulent crypto investment platforms where they’re encouraged to invest.