Korean Crypto Market Outpaces Stock Exchange Amid Bitcoin ETF Optimism

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Pakistan Implements Ban on CryptocurrencyPakistan has moved to ban cryptocurrency once more, with the country’s Minister of State for Finance and Revenue, Aisha Ghaus Pasha disclosing the move last week.According to multiple local media reports within Pakistan, on May 16 Ghaus Pasha stated at a session of the Senate Standing Committee on Finance and Revenue, that cryptocurrencies are banned and “will never be legalized in Pakistan.”Photo by Hamid Roshaan on UnsplashFATF Grey ListGhaus Pasha supported this position by outlining that the Financial Action Task Force (FATF) had set the banning of crypto as a condition for Pakistan’s removal from its “Grey List.”FATF is an initiative of the G7 group of countries, first established in 1989. Its mandate is to develop policies geared towards combating money laundering, and most especially, terrorist financing. The FATF grey list includes those jurisdictions who are deemed to require increased monitoring relative to their efforts to keep money laundering and terrorist financing to an absolute minimum.Pakistan had found itself on the FATF grey list over the course of a number of years. That meant reputational damage on an international basis, together with loss of investor confidence. It also signals the likelihood of weaknesses in a country’s financial system and in its financial controls. The categorization would have had an impact on the country’s ability to access international finance, impacted trade relations, and involved increased compliance costs.Against that background, there may be a certain logic to the Finance Minister’s stance, despite it naturally being distasteful to those of us that support the development of decentralized systems, blockchain, and cryptocurrency. After an extended period on that Grey List, Pakistan was only removed from it in October of last year.Currency devaluationNotwithstanding that, governments in the developing world may have added incentives in banning cryptocurrencies. Their currencies are oftentimes unstable, and the Pakistani rupee is no exception. Cryptocurrencies like bitcoin find their greatest use case in countries that have their currencies devalued or economies that fall into the trap of hyperinflation relative to the sovereign currency.In Pakistan’s case, the rupee plummeted to a record low against the US dollar in January. Naturally, that hurts ordinary citizens and provides the conditions under which people are more likely to investigate decentralized cryptocurrencies. On that basis, we shouldn’t be surprised to learn that the Pakistani government’s decision to ban crypto was publicly supported by Sohail Jawad, Director of the State Bank of Pakistan (SBP).Pakistani banks are naturally following the government and the central bank’s lead, in implementing the ban. One circular obtained by CoinDesk stated: “As per regulatory instructions from the State Bank of Pakistan (SBP), any remittance of foreign exchange directly/indirectly outside Pakistan to overseas foreign exchange trading, margin trading, and CFD trading apps/websites/platforms through any payment channel is not allowed/permitted by SBP and such payments are inherently risky and illegal.”Community reactionNaturally enough, the crypto community internationally and locally, is not enamored by the move. However, people who have been in the space over the last few years are accustomed to ever-changing stances taken by governments as a reaction to a technology that they simply don’t know how to deal with.Waqar Zaka, a Pakistani who works within the Web3 space commented previously on a ban that was implemented in Pakistan in 2017, only later to be found to be unconstitutional. Another Pakistani community member took to Twitter in taking a stand against the decision. Others still immediately considered how they could circumvent the ban.Crypto has always benefited from jurisdictional arbitrage, and while bans are not in any way helpful, in the longer run, they will never stop the roll out and further development of this innovation.

Chinese Nationals Detained in Crypto Mining Clampdown in LibyaAuthorities in Libya have detained 50 Chinese nationals suspected of involvement in an illicit crypto mining operation in Zliten, a city located 160 kilometers east of the Libyan capital of Tripoli.The attorney general’s office in Libya made the announcement on Friday, revealing that the individuals were caught operating a cryptocurrency mining farm within an abandoned iron factory.Photo by Dmitry Demidko on UnsplashMining operation dismantledPhotos and videos released by the office of Attorney General Siddiq Al-Sour showcased the dismantling process of the extensive mining systems discovered in Zliten.This is not the first instance of Chinese miners being detained for crypto mining activities in the North African country. The development follows the recent arrest of ten other Chinese nationals in the city of Misrata on the Mediterranean coast, as well as at two sites within the capital, Tripoli. The individuals were apprehended on Wednesday while being caught “red-handed” with numerous powerful equipment used for intricate proof of work (PoW) mining calculations. The mining rigs were subsequently confiscated by the attorney general’s office.Mining banDespite the official ban on cryptocurrency mining in the country, Libya has witnessed a high prevalence of such activities, with the nation recording the highest percentage of cryptocurrency mining across the African continent in 2021. It is estimated that Libya accounted for approximately 0.6 percent of global Bitcoin production during that year.Libya’s appeal as a destination for cryptocurrency mining stems from its low electricity costs, which stand at a remarkably low rate of $0.004 per kilowatt hour. This cost is approximately 40 times cheaper than in the United States, making Libya an attractive location for miners.While energy may be cheap, the increased demand for electricity that crypto mining brings puts a strain on what was an already vulnerable power grid in the country. That has resulted in frequent and lengthy power blackouts, particularly during the summer months.A lack of oversight has also encouraged an influx of Chinese miners, albeit with these recent arrests, it appears that the Libyan authorities are stepping up the level of oversight and enforcement. The vast majority of Bitcoin miners were based in China up until a mining ban was enforced in 2021.Global issueThat event led to an exodus of miners internationally. Some established themselves legally in the United States and elsewhere. The first casualty of illegal mining was Kazakhstan. The sudden arrival of miners led to its power grid coming under pressure. As a consequence, the Central Asian country clamped down on the activity, and later regulated it.In response to these illegal activities, Libyan authorities have intensified their efforts to combat cryptocurrency mining operations. They are conducting investigations into alleged mining sites in Tripoli and Misrata, aiming to curtail these activities and mitigate the strain on the country’s electricity infrastructure.The recent arrests highlight the ongoing challenges associated with illegal mining activities in jurisdictions globally where cheap energy can be exploited, giving rise to the need for enhanced regulatory measures to address these issues.