Korean Blockchain Firm Proposes Fintech Collaboration in Cambodia

Hacking Attempts on Upbit Reach 160,000 in First Half of the YearThere have been approximately 160,000 hacking attempts on Upbit, Korea’s largest cryptocurrency exchange, in the first half of this year alone, according to a report submitted by Upbit’s operator Dunamu to lawmaker Park Sung-joong of the National Assembly’s Science, ICT, Broadcasting, and Communications Committee.“Cryptocurrency hacking incidents are increasing both domestically and internationally, and hacking attacks on exchanges such as Upbit, which have daily trading volumes exceeding KRW 2 trillion, are a serious issue,” Park said.Photo by Clint Patterson on UnsplashAn uptick in hacking attemptsThe data revealed that the number of cyber breach attempts in the first half of the year totaled 159,061–2.17 times higher than the number of attempts in the first half of last year, which stood at 73,249.Hacking attempts on Upbit have been steadily increasing in recent years, from 8,356 in the second half of 2020 to 34,687 and 63,912 in the first and second half of 2021, respectively. In the first half of last year, there were 73,249, and 87,242 in the second half. Notably, the exchange suffered losses of approximately KRW 58 billion (approximately $43 million) from a hacking attack in 2019.Ramping up securitySubsequently, Dunamu has taken action to enhance security by managing over 70% of its assets in cold wallets and operating hot wallets in a distributed structure instead of a singular one. Hot wallets refer to online crypto wallets, whereas cold wallets are crypto wallets that are offline and disconnected from the internet. Hot wallets offer the advantage of direct deposits and withdrawals, but they have weaker security levels — most known exchange hacks have thus occurred through this medium. On the other hand, cold wallets store private keys on offline sources like external hard drives and portable storage devices, making real-time trading difficult but providing better security and stability.“We have taken various preventive measures since the hacking incident in 2019, such as operating hot wallets in a distributed manner. There have not been any successful cyber breaches to date,” Upbit said.Regarding the role of the Ministry of Science and ICT in managing and overseeing crypto hacking incidents, Park pointed out that this still remains ambiguous. “The Ministry should conduct large-scale white-hat hacking tests and security assessments for crypto exchanges that are frequently faced with hacking attempts, as well as for hospitals and subway systems that manage large amounts of personal information,” he said.

INDODAX, Indonesia’s largest virtual asset trading platform by trading volume, has acquired full licensing in Indonesia from the local regulator. That’s according to a report published by local media outlet VOI. The license, a Physical Crypto Asset Trader (PFAK) license, has been awarded to the company by Indonesia’s Commodity Futures Trading Supervisory Agency, better known as BAPPEBTI.  The license will place INDODAX in a complaint position within the Indonesian market, relative to local regulations. The business has been issued certificate number 10/BAPPEBTI/PFAK/12/2024 by the regulator, its approval certificate as a Physical Crypto Asset Trader.Photo by Mark König on UnsplashMandatory registration requirementIn December 2023 the authorities in Indonesia set out a mandatory requirement for crypto trading entities to register with the Commodity Future Exchange (CFX). CFX is Indonesia’s national crypto bourse, while INDODAX is a member. As of April 2024, 35 crypto exchanges had been registered with the regulator. CFX has been given the mandate to monitor crypto exchange operations, to safeguard investors by ensuring exchanges abide by local regulations. Fendy Tan, chief financial officer (CFO) at INDODAX commented on the firm’s recent licensing milestone, stating: "We are grateful to BAPPEBTI and CFX for the trust given through this full license. The long process that must be passed reflects our commitment to providing the best protection for users. The license number 10 also has a special meaning, which symbolizes perfection, and symbolizes the 10-year journey of INDODAX in leading the crypto industry in Indonesia."  Liquidity and SOP requirementsIn order to acquire this license INDODAX had to comply with BAPPEBTI Regulation Number 8 of 2021 and Number 13 of 2022. It has also had to ensure a minimum paid-up capital of 100 billion Indonesian Rupiahs ($6,158,000), and a minimum equity of IDR 50 billion ($3,079,000). Furthermore, the company has had to implement a set of standard operating procedures (SOPs), together with achieving ISO certification in accordance with global security standards, with specific emphasis on complying with regulations to safeguard customer funds according to the balances held on account of fiat currency and digital assets by INDODAX customers. INDODAX is understood to have 7.1 million customers while a transaction volume of 109 trillion Indonesian rupiahs was reached for the period January to November 2024. BAPPEBTI had extended a deadline for the crypto licensing of exchanges late last year, a move welcomed at the time by INDODAX CEO Oscar Darmawan. Darmawan said that the move would strengthen the industry by ensuring that market participants were compliant with recently introduced regulations. While this licensing milestone is a positive for INDODAX, the firm had faced challenges in 2024. In September it emerged that the platform had been compromised with the loss of around $18 million in digital assets. Meanwhile, the authorities in Indonesia had planned to switch crypto market oversight from BAPPEBTI to the Financial Services Authority (OJK) by Jan. 12. However, a recent report published by the Jakarta Globe suggests that the Indonesian government has yet to finalize this regulatory transfer.

Hong Kong Reiterates Web3 Credentials and CommitmentHong Kong is committed to growing the Web3 industry under appropriate regulations, according to government officials.©Pexels/Andrea PiacquadioAt the four-day Web3 Festival, which is the largest Web3 event that the city has hosted since declaring its intention last year to become a digital asset hub, Financial Secretary Paul Chan stated that the stability of the financial system and investor protection should not be damaged, and that appropriate regulations are a must to create a sustainable development environment and a more ideal space for development.DeFi licensing requirementSome attendees were surprised to learn that the Securities and Futures Commission (SFC) believes that decentralized finance (DeFi) platforms for virtual assets need a license under existing rules. Keith Choy, interim head of the intermediaries division at the SFC, stated that people operating or performing DeFi activities should be subject to Hong Kong’s licensing requirements.This means that if Hong Kong really intends to regulate DeFi, it will have a stricter environment than Singapore. The Web3 industry has been closely watching the development of a new regulatory framework for virtual assets in Hong Kong since the city revealed at the end of October its intention to become a cryptocurrency hub. Under new regulations that go into effect in June, cryptocurrency exchanges serving customers in Hong Kong must be licensed by the SFC.10,000 Web3 Festival attendeesThe event attracted more than 10,000 people ahead of the conference, with several big-name speakers and exhibitors looking for new opportunities in the city. OKX and Filecoin were some of the large cryptocurrency firms in attendance, as were traditional tech firms like Tencent Cloud, which had a booth touting its blockchain-related services for corporate clients. Alibaba Cloud was also a co-organiser, along with Amazon Web Services and Hong Kong’s Cyberport.Binance co-founder and CEO Zhao Changpeng (CZ) also dialed in via video for a fireside chat. Last month, the US Commodity Futures Trading Commission (CFTC) sued CZ and Binance over what it alleged was “sham” compliance with domestic regulations. The company has been scrutinized over connections to its local firm Binance.US, which legally is meant to operate as a separate entity. Zhao was not asked and did not address his legal troubles at the conference. However, he did note that Binance is in talks with regulators in many markets.“We are actively engaged with regulators all around the world,” Zhao said. “Many of them are very receptive, some of them are still skeptical, and that’s fine, but we need to engage. We need to have dialogue, we need conversations, and we also need patience.”Singapore comparisonsHong Kong has frequently been compared with Singapore, which had been considered a friendlier market for related activity until Hong Kong’s policy shift. Some attendees had hoped that Hong Kong’s shift would provide some competition for Singapore in the region. “We did see a very obvious trend of people flying to Singapore to make sure their business was part of this space,” said Luke Liu, chief core ecosystem contributor at cross-chain protocol developer Poly Network. “Hong Kong and Singapore can coexist in some sense, but there is definitely a very positive change going on recently because of the Hong Kong policy announcement.”Hong Kong has reaffirmed its commitment to growing the Web3 industry under “appropriate” regulations, with the stability of the financial system and investor protection as a top priority. This has been reiterated during the largest Web3 event in the city since declaring its intention to become a digital asset hub.