Taiwan weighs up CBDC following feasibility study completion

Crypto vulnerability uncovered with $1B in digital asset exposureSecurity vulnerabilities in the validator infrastructure of InfStones, an established infrastructure provider, have been disclosed by Tel Aviv-headquartered cybersecurity firm dWallet Labs.Photo by Brett Jordan on UnsplashBlockchain network validator vulnerabilityIn a detailed Medium blog post published on Tuesday, dWallet Labs shed light on a series of vulnerabilities that, when exploited, could potentially allow attackers to gain full control, execute code and extract private keys from numerous validators on major blockchain networks. Cryptocurrencies such as ETH, BNB, SUI, APT and others were identified as at risk, with potential direct losses estimated to exceed one billion dollars.The vulnerabilities discovered by dWallet Labs opened the door for attackers to compromise the private keys of validators across multiple blockchain networks, putting over one billion dollars of staked assets at risk. In response to the findings, InfStones, a Web3 infrastructure platform, also released a statement on Tuesday acknowledging the potential threat. However, its representative, Darko Radunovic, disputed the figures provided by dWallet Labs in a statement sent to Cointelegraph. Radunovic stated that the vulnerabilities identified in the production environment account for below 0.1% of their active nodes launched to date, emphasizing that the impact would be limited to a small fraction of their operational nodes.According to InfStones, “237 instances were in scope, of which 212 instances were deployed for our development and testing purposes, and 25 freshly deployed instances in the production environment.”Mitigating steps takenThe company detailed the immediate actions taken to mitigate the vulnerabilities, including shutting down the affected ports, as well as rotating all credentials and keys within their platform. An internal review conducted by InfStones revealed no additional adverse effects. Notwithstanding that, the company took the additional step of hiring an external security firm to audit its systems and policies.Meanwhile, dWallet Labs Founder and CEO Omer Sadika shared his thoughts on the X platform as to how he believes such events should be handled. Sadika wrote:”The worst way to handle a cybersecurity vulnerability is not taking responsibility and lying. We were super open and transparent with the goal of eliminating the risk to web3. My take: it’s not about whether you are fully secure or not, because no one is, it’s about how you handle it and maintain the trust with your partners and customers.”The collaboration between dWallet Labs and InfStones sheds light on the ongoing challenges faced by the cryptocurrency industry in maintaining the security and integrity of blockchain networks. While vulnerabilities were identified and addressed, the incident underscores the importance of proactive security measures to safeguard the assets and data within the rapidly evolving landscape of digital assets.

IEEE to deploy skill certificates on blockchain for Indian membersThe Institute of Electrical and Electronics Engineers (IEEE), a professional association boasting a membership of over 75,000 in India, has chosen the Avalanche blockchain as the primary settlement layer for issuing tamper-evident certificates.Photo by Vishnu Mohanan on UnsplashIntegrating Avalanche blockchainIndia holds the second-largest IEEE membership base globally outside the United States, making this move a significant development in secure credentialing.According to a report by Cointelegraph on Wednesday, Avalanche’s C-Chain will serve as the key settlement layer for IEEE’s certificate issuance due to its compatibility with the Ethereum Virtual Machine (EVM). The decision aims to provide an ecosystem that meets the requirements for tamper-proof, instant and secure verification processes for all trainees and users receiving IEEE credentials.Zupple Labs collaborationThe blockchain certificates will be issued through LegitDoc, a blockchain-based credential lifecycle management system developed by Zupple Labs. Neil Martis, Co-Founder of Zupple, noted that the Indian public sector has shown increased willingness to implement full-fledged blockchain projects over the past 12 months, moving beyond pilot initiatives.This is the latest project in recent weeks that has seen Zupple Labs play a key role in enabling the real-world use of blockchain. Through a collaboration with the Indian Web3 startup in October, the Hindustan Petroleum Corporation (HPCL) streamlined its purchase order process, issuing tamper-proof digital purchase orders via LegitDoc.Avalanche expands into IndiaDevika Mittal, Head of Avalanche’s India arm, emphasized the significance of Avalanche’s EVM compatibility in simplifying the deployment of widely used applications, including credential registries and identity management. She pointed out that reputable institutions like SK Planet and JP Morgan Onyx prefer Avalanche as their go-to blockchain.Mittal has been a key hire for Avalanche blockchain developer Ava Labs recently as part of its efforts to target significant expansion within India. Earlier this year, the company collaborated with China’s Alibaba Cloud, the cloud computing subsidiary of e-commerce behemoth Alibaba Group, assisting with the building of a launchpad that will enable the deployment of metaverses.The partnership between IEEE and Zupple Labs is poised to bring about the issuance of numerous tamper-proof engineering credentials in India. This collaboration underscores the growing acceptance of blockchain in education credentialing, setting a powerful precedent for broader participation in the Web3 landscape.In an interview, Martis expressed the flexibility of their approach, stating:“We would be experimenting with new platforms as additional parallel settlement layers as suitable new tech emerges.”This reflects an openness to exploring evolving blockchain technologies while maintaining a commitment to ensuring the immutability, longevity and security of the solutions.The IEEE-Zupple Labs collaboration aligns with the trend of blockchain integration in educational and professional spheres, offering a glimpse into the future of secure and efficient credentialing systems. As the second-largest membership base outside the United States, India plays a pivotal role in shaping the trajectory of blockchain adoption within professional associations like IEEE.

South Korean entertainment production company Blade Entertainment has signed a memorandum of understanding (MOU) with Cardo, a firm specializing in custodial services for digital assets, to start a tokenized securities business, according to local news outlet Newspim on Wednesday. Blade Entertainment revealed plans to leverage its IP and content distribution rights to issue fractional investment-based tokenized securities based on underlying assets like waste landfills, electroceuticals and digital therapeutics.Photo by Verne Ho on UnsplashForging the future to tokenized securities"We will do our best to become a leader in tokenized securities by securing various underlying assets and building technology to facilitate valuation modeling for those assets," said Choi Young-in, head of the STO (security token offering) department at Blade Entertainment. "Through this agreement, we will cooperate in multiple ways with Cardo, who has expertise in blockchain and an understanding of financial products, to list our tokenized securities on the Korea Exchange’s (KRX) new securities market."  This market refers to an on-exchange market for new securities based on fractional investments that was recently designated by the South Korean Financial Services Commission (FSC) as a service under the financial regulatory sandbox system, according to a press release on Dec. 13.  The regulatory sandbox is a system run by the Korean government that exempts or suspends existing regulations for a designated amount of time for companies releasing new products and services and regulates them post-mortem if there is a problem.  Strategic collaborationBlade Entertainment said that it sought out Cardo – whose investors include one of South Korea’s major banks Nonghyup Bank – as a business partner to carry out this endeavor due to its accumulated knowledge and expertise in the blockchain sector. Cardo has also previously demonstrated its capabilities in the security token business by providing fintech solutions to financial service firm Galaxia Moneytree. "Currently, due to issues with the valuation of token securities, it is not easy for businesses in this area to operate smoothly, but we plan to issue and distribute tokenized securities of various assets soon," said Sohn Kyung-hwan, CEO of Cardo. "Based on the know-how we’ve accumulated from the two contracts we signed this year agreeing to supply security tokens platforms, we will actively help Blade Entertainment with the planning, design and platform construction of their security token venture to help establish a successful service."