Hong Kong releases ‘LEAP’ framework for digital assets

Upbit Accidentally Accepts Counterfeit APT Tokens, Initiates Retrieval EffortsUpbit, South Korea’s largest cryptocurrency exchange, is reported to have accepted deposits of counterfeit Aptos (APT) tokens, mistaking them for their legitimate counterparts. The exchange has been reaching out to the sellers of these tokens by phone, requesting their recovery. This news has been circulating in several online crypto communities since the afternoon of September 24 (Korea Standard Time).Photo by Kenny Eliason on UnsplashUpbit’s responsesOn September 24 at 15:47 KST, Upbit announced a temporary suspension of deposit and withdrawal services for APT due to maintenance on the APT wallet. Following this, at 22:32 KST on the same day, Upbit explained that system maintenance was undertaken after identifying an unusual attempt linked to APT deposits. The crypto exchange went on to announce that the deposit and withdrawal services for APT would resume at 23:00 KST on the same day.DeFi degenerates’ insightsIn relation to this incident, Definalist, a group of DeFi degenerates based in Korea, shared insights on X (formerly Twitter). The group stated: “It seems that during the process of reflecting $APT coin deposits, there was a failure to check the type arguments, and all same functions transfers were recognized as the same APT native token. … If all APT ecosystem tokens were sent to Upbit’s wallet, they would have been mistakenly treated as APT native coins.”Decimal place differenceDefinalist also remarked on the fortunate nature of the counterfeit APT token having six decimal places, in contrast to the authentic APT token’s eight. They noted that if the deceptive token had mirrored the genuine token’s decimal places, the market disruption could have amplified a hundredfold. Meanwhile, the value of the counterfeit APT tokens deposited into Upbit is estimated to be about KRW 20 million (approximately $15,000).

FPG Halts Withdrawals Following HackFloating Point Group (FPG), a prominent crypto prime brokerage platform, has temporarily halted trading, deposits, and withdrawals following a cyber security incident that occurred on Sunday.Photo by Thom Milkovic on UnsplashIncident responseFPG, headquartered in Singapore while maintaining a base in Hoboken, New Jersey in the United States, manages over $50 billion in assets. The firm took immediate action upon discovering the incident by engaging third-party forensics experts and law enforcement agencies.The company acknowledged the problem publicly via a tweet thread on Twitter on Wednesday. FPG stated that the company has locked all third-party accounts and secured its wallets while it investigates the extent and details of the breach. Although the full extent of the loss is still under investigation, the current estimate stands at approximately $15 million to $20 million in lost cryptocurrencies.Investigative cooperationIn response to the incident, FPG is collaborating with the FBI, the Department of Homeland Security, regulatory bodies, and Chainalysis to comprehend the nature of the attack and initiate asset recovery measures. As the investigation involving those entities is ongoing, specific details are not being disclosed at this stage, but FPG has pledged to provide updates as new information becomes available.The cyber security incident comes six months after FPG obtained a SOC 2 certification, which verifies the implementation of robust security, privacy, and control measures by service organizations to ensure the reliable handling of sensitive data and systems.Originally founded in 2018 at the Massachusetts Institute of Technology (MIT) in the US, FPG functions as both a crypto prime brokerage platform and an agency trading desk for asset managers, offering access to liquidity across various markets. In December, FPG announced that its blockchain foundation customers accounted for 5% of the total treasury management market.Backed by prominent investors such as Coinbase Ventures, Anthony Scaramucci of SkyBridge Capital, and Naval Ravikant, the founder of AngelList, FPG has raised a total of $12 million in funding thus far.In August of the previous year, FPG successfully registered as a virtual asset service provider (VASP) in the Cayman Islands. This registration ensured the secure custody of customer assets and safeguarded them from the company’s creditors in the unlikely event of bankruptcy.Broader crypto issuesIt has not been a good couple of weeks for the crypto sector relative to hacks and platform withdrawal pauses. Within the past twenty four hours, two Asia-based crypto lending platforms, Haru Invest and Delio, have suspended withdrawals. In those cases, the issue is suspected to relate to platform contagion and solvency issues.Earlier this month, the Atomic Wallet platform was hacked despite the understanding that the project offered self-custodial wallets. Originally, the loss was estimated at $35 million, but more recent reports are now estimating that figure to be in excess of $100 million.As FPG continues its efforts to mitigate the aftermath of the cyber attack, industry participants eagerly await further updates and measures undertaken by the company to recover from this incident and restore trust among its clients.

The Dubai Financial Services Authority (DFSA), the financial regulatory agency of the Dubai International Financial Center (DIFC), a special economic zone, has approved two stablecoins under its crypto regulatory framework. The two stablecoins, USD Coin (USDC) and EURC, are both issued by blockchain-focused financial services firm Circle. While USDC is a U.S. dollar-backed stablecoin, EURC is a euro-backed stablecoin. In a press release published on the Circle website on Feb. 24, the company announced details regarding the approval. The stablecoins are the first to be recognized and approved by the DFSA.Photo by Christoph Schulz on UnsplashStablecoin integrationThe development means that firms based in the DIFC are now free to integrate either stablecoin into digital asset applications and products focused on areas such as payments and treasury management. A number of Circle executives took to social media to comment on the development. Circle Co-founder and CEO Jeremy Allaire outlined on X that the approval means that financial institutions in Dubai “are now able to transact in markets with USDC and EURC.” In legally recognizing the two stablecoins, Allaire pointed out that the DFSA had joined regulators in the European Union (EU) and Canada.  Last Summer, Allaire announced that Circle’s stablecoins complied with the EU’s Markets in Crypto Assets (MiCA) regulation. In December, Circle became the first stablecoin issuer to meet Canadian listing regulations. Dante Disparte, Circle’s chief strategy officer and head of global policy, pointed out that a trend is emerging requiring the pre-clearing of stablecoins prior to them entering into circulation or gaining regulatory approval. “In always-on finance, reciprocity is key,” he added.  Meanwhile, the firm’s EU Strategy & Policy Director, Patrick Hansen, underscored the significance of the approval. Hansen pointed to the fact that the DIFC is home to 6,000 registered entities, including 800 authorized financial firms. An ‘edge’ over TetherEugene Cheung, Chief Institutional Business Officer at Hong Kong-based digital asset platform OSL, said that the approval was “massive for institutional adoption,” while giving Circle an “edge” over Tether within the $157 billion stablecoin market. While Circle has always taken a regulatory-compliant approach, competitor Tether has struggled with compliance. In Europe, 10 companies have been approved to issue stablecoins under MiCA regulations, but Tether is not among them. This has led to a number of exchanges delisting Tether’s USDT in Europe. The DIFC was first established in 2004. The economic free-zone caters to firms operating within the Middle East, South Asian and African regions. The number of businesses registered within the free zone has increased by 25% since 2023. In November 2022, the DIFC recognized Bitcoin (BTC), Ethereum (ETH) and Litecoin (LTC). The following year, it added Toncoin (TON) and Ripple’s XRP, together with ZETA, the native token of the ZetaChain network. In 2024, the DFSA amended its crypto regulations to allow foreign funds to invest in recognized crypto tokens, while enabling domestic qualified investor funds to invest in unrecognized tokens.Although the regulatory approach taken by the authorities in Dubai accommodates stablecoins, algorithmic stablecoins are prohibited.