Rotonda revamps Burrito Wallet with cross-chain swapping, added mainnet and more

Kronos Research experiences significant cybersecurity breachKronos Research, a Taipei-based crypto trading, market making and venture capital firm, has found itself in the crosshairs of a cyber attack.Photo by FLY:D on Unsplash$25.6 million lossHackers gained unauthorized access to the company’s API keys, resulting in losses exceeding $25.6 million spread across various cryptocurrencies, prompting a concern within the crypto community.The breach was detailed by the company in a social media post on the X platform on Saturday. That post read:“In the interest of transparency Around 4 hours ago, we experienced unauthorized access of some of our API keys. We paused all trading while we conduct an investigation. Potential losses are not a significant portion of our equity and we aim to resume trading as soon as possible.”On-chain sleuthingInvestigations by crypto community members have followed, led by blockchain researcher ZachXBT. ZachXBT is a well-known anonymous persona in the crypto space, having earned a reputation for uncovering hacks, scams and unethical practices within the crypto sector.In this instance, ZachXBT uncovered a trail of transactions originating from a Kronos Research account. The meticulous execution of the cyber attack was evident in six transactions involving 2,780 ETH, 2,540 ETH (repeated twice), 2,636 ETH, 4.93 ETH and 2,507.52 ETH, all directed to addresses controlled by the hacker.Kronos Research has followed up with a tweet thread on X, acknowledging the gravity of the situation and confirming losses of approximately $25.65 million in crypto assets. Despite the alarming figures, the company sought to reassure stakeholders by emphasizing that the losses represent a relatively small fraction of its total equity. In a commendable display of accountability, Kronos Research pledged to absorb all losses internally, shielding its partners from the financial ramifications of the breach.The Taiwanese firm posted:“Our team has been working round the clock to minimize the impact and resume trading operations, following a hacking incident that involved unauthorized access to our API Keys.”Implications for Woo XThe operational repercussions were swift and impactful, with Kronos Research opting for a temporary suspension of all trading operations. This decision rippled through to Woo X, the affiliated Taipei-based exchange and liquidity provider created by Kronos, which temporarily blocked specific asset combinations due to liquidity concerns. Importantly, Woo X assured users of the security of their funds and later announced the resumption of spot and perpetual trading.Looking forward, Kronos Research outlined its intention to resume trading operations in the coming days, contingent on favorable conditions.The cyber attack on Kronos Research occurred against the backdrop of heightened cybersecurity concerns within the crypto space. According to blockchain security firm Certik, approximately $173 million was lost to crypto attacks in November alone. The Kronos Research breach follows on the heels of Poloniex’s $131 million hack, highlighting the persistent challenges faced by crypto platforms in securing user assets.

Dubai Increases Monitoring of Crypto License HoldersDubai is scrutinizing crypto license holders and license seekers more closely as a direct consequence of the collapse of Bahamas-based cryptocurrency exchange FTX, last year.On Wednesday Bloomberg cited people familiar with the matter who told it that Dubai’s Virtual Assets Regulatory Authority (VARA) has recently requested more information on the ownership structure, governance, and auditing procedures of applicants like global crypto exchange, Binance.©Pexels/Aleksandar PasaricCloser scrutinyAll international companies seeking permits are being asked for similar information. This stricter approach is a potential problem for Binance CEO Changpeng Zhao (CZ), who lives in Dubai and has made it a central point of expansion in the Middle East. The Emirate is attempting to balance fostering innovation with proper oversight of an industry that has been the subject of high-profile scandals in the past year.According to Sam Blatteis, CEO of The MENA Catalysts, which provides government-relations advice to fintech multinationals expanding in the Persian Gulf, “VARA wants to turn Dubai into a capital for the digital-assets economy while safeguarding its business ties with Western jurisdictions like Europe that are adopting more muscular crypto regulations.”CFTC lawsuitIn March, the US Commodity Futures Trading Commission sued Binance and CZ for allegedly violating derivatives regulations, claiming the firm had inadequate compliance procedures. Binance expressed disappointment with the lawsuit.The company claimed at the time that it had provided all necessary information to VARA regarding its ownership structure and external auditor, as well as answering any other queries on a proactive basis. VARA officials are also seeking information on the ownership, auditing, and board procedures at the global group level of Binance.Steering clear of FATFDue to its size and complexity, addressing these queries is taking longer. Binance’s complicated corporate structure includes several holding companies, three of which are named in the CFTC lawsuit, and multiple local entities. In February, a senior executive said Binance was attempting to hire an auditor for its entire balance sheet.Dubai is trying to get off the “gray list” of global money laundering and terrorist financing watchdog the Financial Action Task Force (FATF). To that end, it has cracked down on unlicensed over-the-counter (OTC) crypto exchanges, according to anonymous sources. Dubai belongs within the United Arab Emirates (UAE), with the foreign ministry of the UAE declining to provide any comment on the matter to Bloomberg. Komainu, Hex Trust, GC Exchange and Crypto.com are the four companies, in addition to Binance, that are licensed in the UAE, with the former three having only Preparatory Minimum Viable Product (PMVP) permits.Hex Trust said that providing additional information on ownership, auditing and board procedures didn’t prolong the application process for its Operational MVP license. Laurent Girouille, the head of Komainu’s regional office in Dubai, said the regulatory requirements were stringent. Meanwhile, Binance is awaiting the launch of Binance FZE, which is audited by Mazars and has a board of directors, while it upgrades to an Operational MVP license before applying for a Full Market Product permit.

Crypto.com unlocks regulated expansion through UK FCA licensing awardSingapore’s Crypto.com has obtained an Electronic Money Institution (EMI) license from the Financial Conduct Authority (FCA) in the United Kingdom. The approval complements the platform’s existing status as a registered crypto-asset business, a milestone achieved in August 2022.Photo by Robert Tudor on UnsplashSet to expand product offeringIn a press release published to its website on Monday, the company outlined that the EMI license represents a pivotal step for the firm, empowering the exchange to issue and manage electronic money. This expansion goes beyond its initial crypto-asset business focus, which concentrated primarily on compliance with anti-money laundering (AML) and counter-terrorist financing (CTF) regulations.The regulatory nod came after Crypto.com underwent a comprehensive examination of its business and compliance practices, ensuring alignment with the stringent AML and CTF requirements in the UK.With this authorization in hand, Crypto.com is poised to introduce a range of e-money products tailored for the UK market. This move aligns the company with other cryptocurrency firms like Coinbase and Gemini, which have previously secured similar licenses.Notwithstanding that, while some other well-known platforms have struggled with recently introduced rules related to the marketing of crypto products and services in the UK, Crypto.com’s UK subsidiary company, FORIS DAX UK LIMITED, had successfully registered with the FCA in October.Building out global expansionWhile a trend has emerged in 2023 for crypto platforms to expand within regional markets around the world beyond the United States, Crypto.com has been following a global strategy for some time already. Last month, CRO DAX Middle East, a subsidiary company of Crypto.com, secured a license from the Virtual Assets Regulatory Authority (VARA) in Dubai to offer regulated virtual asset services.Earlier this year, Patrick Yoon, General Manager of Crypto.com’s Korean business outlined plans for expansion within that market, including the aspiration to obtain the banking relationship required in order to conduct virtual asset trading business in South Korea.Dutch licensing successEarlier in July, Crypto.com received approval from the Dutch central bank, De Nederlandsche Bank (DNB), to extend its cryptocurrency services in the Netherlands.This recognition places Crypto.com among the 36 cryptocurrency-related businesses approved by the Dutch central bank, joining major industry players like Coinbase Europe, eToro and Bitstamp. Notably, this approval followed Binance’s inability to secure registration in the Netherlands, leading to its exit from the country.Expressing enthusiasm about this achievement, Kris Marszalek, CEO of Crypto.com, emphasized the importance of the UK market for their business. He stated:“The UK has and continues to be a hugely important market for our business and the greater industry. We look forward to continuing to collaborate with a global regulatory leader in the FCA in our collective pursuit of responsible innovation for crypto.”Crypto.com’s global expansion strategy includes regulatory approvals in Singapore, France, Italy, Dubai and Australia. However, in a strategic shift, the platform discontinued its institutional exchange service for professional customers in the United States in June. Citing a decline in demand, this move aligns with the broader market conditions in the U.S., influenced by ongoing legal actions against major exchanges such as Binance and Coinbase.