Rotonda launches crypto wallet service Burrito Wallet in Latin America

Poly Network Exploit Results in Billions of Nonexistent TokensPoly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.Photo by Shubham Dhage on UnsplashNetwork suspensionThe Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.Bridge vulnerabilitiesBridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.Illiquid Metis tokensMetis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

The Hong Kong Securities and Futures Commission (SFC) has unveiled a new roadmap for digital asset regulation titled “ASPIRe.” The authorities in the Chinese autonomous territory have been working towards crypto hub status in recent years. This latest ASPIRe roadmap initiative has been formulated in an effort to future-proof Hong Kong’s status as a location that has been optimized for crypto businesses to form and develop. The ASPIRe roadmap was announced by the SFC on Feb. 19 with comprehensive details on the plan published to the regulator’s website. Photo by Skull Kat on UnsplashFive pillarsA-S-P-I-Re details five pillars that the regulator is focusing on in order to address challenges to strengthen Hong Kong’s crypto hub status going forward. The “A” pillar refers to “access,” with a focus on fostering an ecosystem that’s aligned with a regulatory regime that enables global participation. The regulator wants to attract “qualified participants,” while enhancing investor choice and integrating Hong Kong’s digital assets sector with global liquidity. The “S” pillar stands for “safeguards” with the objective of adopting risk-proportionate oversight, promoting regulatory clarity and aligning compliance requirements such that a balance is struck between core regulatory objectives and providing flexibility for the adoption of new technology. “Products” forms another pillar, with a focus on expanding the range of digital asset products and services offered by regulated service providers in Hong Kong. “Infrastructure” is another aspect that the plan homes in on. The focus in this regard is on modernizing reporting, surveillance and cross-agency collaboration through infrastructure building and the use of new technology.  The final pillar, “relationships” (Re), focuses on the empowerment of both investors and the industry in general through education, engagement and transparency. Influencing modern financeThe Hong Kong regulator is putting forward this plan with the understanding that the global virtual asset market was valued at $3 trillion in 2024. It suggests that the sector “has significantly influenced modern finance.” At Consensus Hong Kong 2025 this week, a crypto conference held in the Chinese autonomous territory, SFC CEO Julia Leung suggested that this plan will put Hong Kong in a strong position to secure its role as a crypto industry hub going forward. Hong Kong Financial Secretary Paul Chan Mo-po also delivered a keynote speech at the conference. He said that Hong Kong would “remain a stable, open and vibrant market for digital assets,” adding that Hong Kong is “investing heavily in the related infrastructure and talent development.” Mo-po went on to assert that Hong Kong’s Cyberport Web3 network and the Hong Kong Science and Technology Park are “vibrant hubs for Web3 innovation and fintech.” He also claimed that industry partnerships and the city’s universities are bringing through blockchain expertise.  The Financial Secretary understands the importance of appropriate regulation. He stated: “The key to success lies in maintaining an open, fair, balanced and forward-looking regulatory approach that is conducive to the sustainable and responsible development of financial innovation, including Web3.”

UK Watchdog Adds Crypto Exchanges to Warning ListThe UK’s Financial Conduct Authority (FCA) has expanded its warning list to include nearly 150 digital asset companies, including crypto exchanges HTX and KuCoin.Photo by Maxim Hopman on UnsplashPromotion without approvalThese firms have been added to the list due to their promotion of services in the UK without obtaining the necessary regulatory approvals. The move comes as the FCA strengthens its oversight of the cryptocurrency sector.The FCA recently broadened its rules on financial promotions, effective from October 8, to encompass crypto-asset service providers, regardless of their geographical location. This means that all crypto platforms are now obligated to display clear risk warnings to UK-based consumers and adhere to more rigorous technical standards. Additionally, they must implement a mandatory 24-hour cooling-off period for new customers.Exchanges respondIn response to the inclusion of their platforms on the FCA’s warning list, both HTX and KuCoin issued statements. A spokesperson for HTX, known until recently as Huobi, clarified that the firm does not operate or market its services in the UK. KuCoin, on the other hand, acknowledged that it doesn’t operate in the UK but expressed its commitment to adapt its products and services to ensure compliance with the relevant laws and regulations in each country.Another exchange, OKX, alongside global exchange Binance, have both indicated that they are working towards complying with the FCA’s regulatory requirements in respect of marketing.The FCA issued a generic warning message for both HTX and KuCoin, stating:“This firm may be promoting financial services or products without our permission. You should avoid dealing with this firm.”Non-compliance with the FCA’s regulations can result in severe penalties, including takedown requests for websites and apps, substantial fines, and potential legal action, which could lead to imprisonment.It’s worth noting that HTX Advisor, Justin Sun, has encountered regulatory challenges in the past. In March, the US Securities and Exchange Commission (SEC) accused Sun of fraud and market manipulation related to TRX, the native cryptocurrency of his Tron blockchain. Despite holding licenses to operate in various jurisdictions, HTX’s website does not specifically mention the UK as a prohibited venue.KuCoin has its platform restricted in several countries, including the US, Singapore, Hong Kong, mainland China, Thailand, Malaysia, and Canada’s Ontario province. Notably, the UK is not listed among these restricted locations.The FCA’s decision to rapidly identify and publicize crypto firms violating the expanded rules underscores increasingly stringent regulatory requirements. The regulator is continuously updating its list of violators as new infractions are uncovered. In August, the UK regulator published data that demonstrated that only 13% of crypto businesses who have applied to trade in the UK have been offered permits to do so.Lucy Castledine, the FCA’s Director of Consumer Investments, emphasized the dynamic nature of the list, which is constantly evolving to keep pace with emerging issues within the crypto sector.As the FCA takes a more proactive stance in overseeing crypto businesses, the warning list serves as a tool for consumer protection, signaling the importance of adherence to regulatory standards in the cryptocurrency ecosystem.