Hang Seng Ponders Crypto Product Offering

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Ribbon Finance Enables Altcoin Options TradingSingapore’s Ribbon Finance, a project that offers a suite of DeFi protocols that help users access crypto-structured products, has enabled altcoin options trading via its Aevo decentralized exchange (DEX).The Ethereum-based platform has begun offering options relative to cryptocurrencies beyond the top two of Ethereum and Bitcoin. Examples of coins that users of Ribbon Finance’s Aevo DEX can access as options include Lido’s LDO, Sui’s SUI token, APT, the token of high throughput proof of stake-based blockchain Aptos, the ARB token of layer two Ethereum scaling network, Arbitrum and Litecoin (LTC).Trading options on-chainThe Aevo DEX project took to Twitter on Monday to announce the development. The project has named the options product “Aevo OTC,” terming it as “the best place to trade altcoin options on-chain.” The firm claims that it’s the first platform to allow users “to trade altcoin options on-chain, in size, with institutional grade liquidity providers.”To kick things off, users will be enabled in trading these altcoin options across weekly, bi-weekly and monthly maturities relative to thirteen crypto tokens. The project plans to rotate the list of coins available for options trading every month depending upon what it deems to be the most popular coins on the market at a given time.Early service adoptersAs Aevo is a DEX, it will utilize on-chain margin systems. When a user buys an option the counterparty is required to post margin of approximately 30% of the notional trade size in the form of US dollar stablecoin, USDC. That procedure is all on-chain and transparent, enabled via smart contracts.Although officially launching the product today, Aevo OTC has been used in production for a number of weeks already. Both digital assets firm Galaxy Digital and crypto-native investment firm CoinFund have already been using the product to trade options.Other early adopters of the product include DeFi R&D and liquid crypto investment strategies firm Re7 Capital and crypto options and structured derivatives firm, OrBit Markets. In fact, Galaxy and OrBit Markets, alongside GSR, are acting as market makers for the product, enabling users to get instant quotes.Developing the crypto options marketThe development means that market participants can now strategize and take advantage of trading altcoins relative to specific events that may be fundamental to a project, such as Litecoin’s halving, for instance. At a later stage, the project intends to enable users in writing options contracts to include customized margins and a specified counterparty.The crypto options market is still at a very early stage of development. Deribit has been the dominant crypto options platform. Ribbon Finance’s service rollout broadens that market, extending options trading beyond the current limited offering of bitcoin, ethereum and solana.The product is more capital efficient for market participants as its portfolio margin system calculates real-time margin requirements, in that way offsetting money-making and losing positions relative to a particular portfolio.Photo by Shubham Dhage on Unsplash

SK C&C and NEAR Foundation Forge Strategic Partnership to Fuel Web3 GrowthSK C&C, the information and communications technology affiliate of the South Korean conglomerate SK Group, last week announced its strategic partnership with the NEAR Foundation, the organization supporting the NEAR Protocol blockchain, aiming to broaden its Web3 business initiatives.The partnership ceremony was held earlier this month at a hotel in Seoul and saw attendance from Choi Cheol, the Head of Web3 and Convergence Group at SK C&C, along with Marieke Flament, the CEO of the NEAR Foundation.NEAR Protocol is a layer 1 blockchain that enables enterprises to build private shards that can be connected to the public blockchain.Photo by Shubham Dhage on UnsplashBlockchain research and global marketingThrough this agreement, the two companies will establish a mutual support system to strengthen their business networks, cooperate on research and business projects related to blockchain technology, spanning all industries, and execute global marketing strategies to elevate their brands and accelerate the Web3 ecosystem.SK C&C’s ChainZ and NEAR ProtocolAs part of this initiative, the two sides seek to link SK C&C’s own blockchain platform, ChainZ, with NEAR Protocol to develop a Web3 market that supports both public and private blockchains. Focusing on the financial infrastructure sector, SK C&C aims to inject momentum into its ventures in domains like the sharing economy market — a flourishing ground for second-hand item trading platforms — and in the gaming, content, and commerce sectors, where the issuance of non-fungible tokens (NFTs) is expected.Tailored corporate solutionsThey will delve into the development of Web3 solutions tailored for corporations, concentrating on areas like supply chain management and enterprise resource planning (ERP). ChainZ’s Key Recovery System will play a pivotal role in enhancing security and simplifying account management, while NEAR Protocol will support high transaction speeds, scalability, and interoperability between multichains.For example, assets like inventories, orders, loans, and bills of lading can be marked with tokens based on NEAR Protocol. These can then be verified at each stage of an entire trade process through digital signatures recorded on ChainZ.Moreover, SK C&C will leverage the NEAR Foundation’s global network as a stepping stone for global market entry, while NEAR Protocol will utilize the business network of SK C&C to garner customers in the Korean market. This effort to expand NEAR’s presence in South Korea also aligns with its joining hands with Dongdaemun, an administrative district in Seoul, earlier this month.SK C&C’s Choi Cheol underscored the efforts underway across various industrial sectors, including public, finance, manufacturing, and commerce, to develop Web3 services driven by public blockchains. He stated that beginning with NEAR Protocol, SK C&C would intensify collaborations with different public blockchain projects to broaden the ecosystem for Web3 services.