Hong Kong Says No to Light Touch Regulation

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

Global crypto exchange platform KuCoin has announced the arrival of “KuCoin Thailand” (to be also known as “KuCoin TH”) in the Southeast Asian country. In a press release publicizing the development, the company outlined that the new platform has been formed following a rebranding of ERX, the first virtual currency exchange to be licensed and supervised by Thai regulator, the Securities and Exchange Commission (SEC).Photo by Bharath Mohan on UnsplashGlobal infrastructure enhancing service deliveryERX has rebranded to KuCoin Thailand, but the exchange will continue to be operated by ERX Company Ltd, while collaborating with KuCoin and benefiting from KuCoin’s global market presence and global exchange infrastructure. Commenting on what KuCoin brings to the partnership, ERX CEO Att Tongyai Asavanund stated: “With the global infrastructure and resources supporting us, we’re enhancing our ability to deliver localized solutions tailored for the Thai market. KuCoin Thailand reflects our continued mission — strengthened by strong technology and a broader global vision.” ERX Board Director Henry Chen said that the objective is “to build a leading digital asset platform in Thailand with global vision, institutional grade service and state-of-art technology.”Southeast Asian expansionFounded in China in 2017, although operating on a global basis, KuCoin continues to have stronger ties to Asia. Following the implementation of restrictions on crypto trading in China a few years ago, the company moved its headquarters to Singapore, subsequently opting to establish itself in the Seychelles. This latest development further strengthens KuCoin’s credentials within the Asian region. In a blog post, the company marked the event as a “key step forward” in its strategic expansion across Southeast Asia. Existing ERX users have already been migrated over to the new platform. The company has placed a notice on its website advising users to download the KuCoin TH app, which has been made available via Android and iOS. Last month ERX announced that it had received approval from the Thai SEC to activate its Crypto Exchange License. The company was first established in Thailand in 2019. It has been under the supervision of the local regulator since 2020.  The ERX platform was originally built out using AlphaPoint white-label software. It received a digital assets exchange license from the SEC in July 2020. ERX parent company, New York-based digital asset management firm Elevated Returns, has been working within the real-world asset (RWA) tokenization arena for some time. In 2018, the company was involved in a $18 million deal to tokenize the St. Regis Aspen Resort, a luxury hotel and resort located in Colorado, United States. Previously, KuCoin had remained unlicensed in Thailand. In recent times, the Thai authorities have made efforts to block unlicensed exchanges from engaging with investors in Thailand. Last month Thailand’s SEC filed a lawsuit against KuCoin competitor OKX for allegedly running an unlicensed exchange. KuCoin Thailand will compete with eight other licensed exchange businesses within the Thai market. These include WAAN Exchange, Gulf Binance, Thai Digital Assets Exchange, InnovestX Securities, GMO-Z.com Cryptonomics, Upbit Exchange, Bitkub Online and Orbix Trade.

Sejong Telecom to Collaborate with KOREIT for Security Token ProductsSejong Telecom said Wednesday that it is going to work with the Korea Real Estate Investment and Trust (KOREIT) to jointly develop security token products.Through this agreement, Sejong Telecom aims to transform trust products that are discovered by KOREIT into security tokens and then list them on BBRIC — an integrated real estate investment and income distribution service developed and operated by the Sejong Telecom Consortium — in order to attract investors.Photo by NordWood Themes on UnsplashRevolutionizing real estate investmentsBBRIC utilizes blockchain technology to ensure the transparency and security of financial products and provides a crowdfunding-style real estate indirect investment platform that is easily accessible to the general public, thus expanding the accessibility of fractional investments and allowing anyone to acquire information and engage in trading. It has also obtained information security management system (ISMS) certification, further enhancing measures for investor protection.“Security token transactions that are conducted online require security, confidence in product value, and transparency of transactions. BBRIC has consistently demonstrated its security and transparency as well as the investment value of its listed security tokens,” said Park Hyo-jin, Head of Sejong Telecom’s blockchain division.KOREIT is a leading comprehensive real estate and finance company. Leveraging its long-standing expertise and professionalism, it has been enhancing its competitiveness in various business areas, including land trusts, land trust-led urban improvement projects, and real estate investment trusts (REITs).“We will work together with KOREIT to find underlying assets for security tokens and select secure and reliable products with high investment value to offer to investors,” Park added.Further efforts to advance BBRICSejong Telecom also recently signed a business agreement with Hyosung TNS, the infrastructure and finance arm of South Korean conglomerate Hyosung Group, to promote BBRIC and develop security token services.