Dubai’s VARA grants WadzPay ‘initial approval’ of trading license

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

An industry advocacy body for crypto and Web3 in India had urged the Indian government to take action against nine offshore exchanges, prompting the government to issue show cause notices and block URLs recently. Native industry pushbackAccording to CoinDesk, the publication has seen a copy of a letter that was sent in mid-December by the Bharat Web3 Association (BWA), addressed to the Indian Finance Ministry’s Department of Revenue Secretary, Sanjay Malhotra. The letter was penned by BWA Chairman Dilip Chenoy. Chenoy has been in the role since March of last year having a number of years of leadership experience within Indian industry bodies under his belt, with time spent previously as Secretary General of the Indian Chambers of Commerce and Industry and as Chairman of the board of Sant Longowal Institute of Engineering and Technology. According to its LinkedIn profile, the BWA seeks to “advocate for the collaboration between the regulatory bodies and the Industry for creating awareness about the new age technology and the emerging [Web3/crypto] asset class.” ‘Show cause’ noticesIt emerged last week that India’s Financial Intelligence Unit (FIU) had issued “compliance show-cause” notices to a number of overseas crypto platforms who have otherwise been active within the Indian market. The FIU is a national body tasked with liaising with and providing information to enforcement agencies where suspected illicit transactions are concerned. The offshore exchanges, including Binance, KuCoin, Huobi, Kraken, Gate.io, Bittrex, Bitstamp, MEXC Global and Bitfinex, have been given a two-week deadline to respond to the show cause notice. This notice questions why regulatory actions should not be taken against them, aiming to ensure compliance with the country's financial regulations. It’s understood that the BWA's letter requested a one-month grace period for offshore exchanges to register with the FIU. It remains unclear whether the government's actions were solely prompted by the BWA's letter or if it would have taken place independently. Notably, the BWA's letter aligns with the government's earlier mandate in March, requiring crypto businesses to register with the FIU and adhere to anti-money laundering processes under the Prevention of Money Laundering Act (PMLA). Since then, 31 domestic entities have registered with the FIU. Photo by Peter Glaser on UnsplashEnsuring a fair gameThe BWA's letter also proposes that offshore exchanges establish an Indian subsidiary, deposit the applicable tax deducted at source (TDS) from July 1, 2022 and face restrictions, including potential access blocks on mobile app stores and IP addresses, for non-compliance. While it's unclear if all these requests feature in the show cause notices, the BWA emphasizes the need for fair competition. Rajagopal Menon, Vice President of leading Indian crypto exchange WazirX, stressed that “all we are asking for is a level playing field." The BWA's letter also urges the government to grant Indian retailers a 30-day window to withdraw assets before implementing any restrictions. The fledgling BWA industry body recently celebrated its first anniversary with its founding member, CoinSwitch founder Ashish Singhal, stating that he got involved with the BWA “to help build an effective regulatory framework for Web3 and digital assets in India.” Singhal added that the BWA’s mission is “to help India realize its vision to be the leading digital economy.” 

Study Places Hong Kong as Leader in Crypto ReadinessHong Kong, according to a recent study conducted by Forex Suggest, has emerged as the leading jurisdiction worldwide in terms of its readiness for cryptocurrencies. The study evaluated various factors such as the number of blockchain startups per 100,000 people and the density of crypto ATMs in relation to the population.Photo by Traxer on UnsplashZero capital gains taxThe attractiveness of Hong Kong for investors in the crypto space stems from its advantageous tax policies. The study noted that Hong Kong does not levy capital gains taxes on cryptocurrency, making it an appealing destination for crypto enthusiasts. The United States and Switzerland secured the second and third positions, respectively, in the rankings of the most crypto-ready countries.In recent times, Hong Kong has actively embraced investments from digital asset companies and is poised to implement new regulations for the industry. Effective from June 1, the city’s new rules aim to establish Hong Kong as a global hub for digital assets. These regulations permit licensed cryptocurrency trading platforms to offer services to retail investors while incorporating measures to safeguard individual traders.Global crypto firms are gearing up for that new licensing approach, carving out separate corporate entities in order to meet the regulatory requirements which the Hong Kong regulator, the Securities Futures Commission (SFC), has set. Another Hong Kong regulator, the Hong Kong Monetary Authority (HKMA), is also opening up to embrace digital asset innovation through a pilot project implicating the tokenization of real world assets.Regarding the number of blockchain startups, Hong Kong boasts three startups per 100,000 individuals, securing the second position globally. Topping the list is Switzerland, with an impressive count of 12.9 blockchain startups per 100,000 residents, amounting to a total of 1,128.The study also highlighted that countries such as Hong Kong, Switzerland, Panama, Portugal, Germany, Malaysia, and Turkey impose the lowest taxes on cryptocurrencies. These nations exempt individuals from capital gains taxes on profits derived from cryptocurrency trading.Crypto ATM proliferationWhen considering the prevalence of crypto ATMs, Hong Kong ranks third globally, with two ATMs per 100,000 people, totaling 149 ATMs. The United States takes the top spot with nearly 34,000 crypto ATMs, but when normalized to the population, it has 10.1 ATMs per 100,000 individuals.Regressive measures in USIn contrast to Hong Kong’s favorable environment, regulators in the United States have intensified their efforts to tighten regulations on cryptocurrency exchanges, leading many within the industry to advocate for clearer guidelines. Consequently, several exchanges are exploring jurisdictions that offer more favorable conditions.Forex Suggest emphasized that the report’s findings were based on extensive data analysis, taking into account factors such as tax regulations, legislation, the presence of blockchain startups, and the level of interest in cryptocurrencies. Each jurisdiction received a normalized score out of 10 for each factor, and the overall rankings were determined by averaging these scores.Hong Kong’s position as the most crypto-ready jurisdiction in the world showcases its commitment to fostering innovation and becoming a global leader in the digital asset space. With its advantageous tax policies, growing number of blockchain startups, and forthcoming regulations, the autonomous Chinese territory is solidifying its position as an attractive destination for businesses and investors in the cryptocurrency space.