Uzbekistan Revamps Crypto Mining with New Regulatory Framework

Poly Network Exploit Results in Billions of Nonexistent TokensPoly Network, the China-based interoperability platform, was targeted by hackers over the weekend in a major attack that resulted in the creation of billions of tokens out of thin air. It’s the second time in as many years that the cross-chain bridge has been exploited by hackers.The attacker exploited a vulnerability in Poly Network’s cross-chain bridge tool, allowing them to generate a substantial number of tokens that previously did not exist, as reported by Arhat, the Founder of 3z3 Labs, on Twitter.Photo by Shubham Dhage on UnsplashNetwork suspensionThe Shanghai-based project team behind Poly Network promptly informed its users on Sunday that its services were temporarily suspended due to the attack. The platform assured its users that it was diligently assessing the extent of the breach and the impact on assets. They emphasized their commitment to safeguarding users’ assets and urged everyone to remain calm.The hacker, at one point, held nearly $43 billion worth of cryptocurrency in their digital wallet, according to DeBank, a decentralized finance portfolio tracker. This staggering figure was corroborated by PeckShield, a blockchain data and security firm.Bridge vulnerabilitiesBridges play a crucial role in the Web3 ecosystem, enabling users to transfer assets across different networks. However, they have often been attractive targets for hackers. In this attack on Poly Network, the hackers issued themselves nearly 100 million BNB and $10 billion worth of BUSD, the Binance-branded stablecoin, on the layer-2 network Metis, revealed Colin Wu, a Chinese crypto journalist.Similarly, on the Heco network, approximately 100 trillion units of the dog-themed meme coin, Shiba Inu, were created. Additionally, a significant number of altcoins were generated on Polygon and Avalanche networks.Illiquid Metis tokensMetis clarified that the BNB and BUSD tokens issued on its network by the hackers are effectively worthless since there is no available sell liquidity. Poly Network also locked these tokens, ensuring they cannot be utilized. Arhat of 3z3 Labs acknowledged that the impact of the Poly Network attack was somewhat mitigated by the lack of liquidity, which prevented the hackers from realizing substantial gains on Metis.However, on other networks like Ethereum, the stolen tokens were exchanged on decentralized exchanges. Arhat estimated that the attacker managed to convert only a small portion of the tokens, amounting to approximately $400,000 worth of crypto, while the remaining tokens lacked liquidity and were essentially worthless.SlowMist, a blockchain security firm, suggested that the hacker’s total gains were higher. They reported that over $4 million worth of digital assets from the attack had been cashed in, including 1,500 Ethereum worth $3 million and 93 billion SHIB worth $700,000.Poly Network had previously made headlines in 2021 when it experienced a historic attack, considered the largest exploit in decentralized finance at the time. The project suffered a loss of $600 million as funds were siphoned away from Ethereum, Binance Smart Chain, and Polygon. However, the hacker eventually returned $342 million worth of stolen crypto, and Poly Network took steps to repay affected users.

Blockstream, a blockchain technology firm headquartered in British Columbia, Canada, has moved to expand its activities in Japan with the opening of a new office and the announcement of a partnership with local companies. The infrastructure development company has partnered with Diamond Hands and Fulgar Ventures, CoinDesk Japan reported. Diamond Hands is a Japan-based company involved in providing Bitcoin-related products. It helps companies to integrate Bitcoin and lightning payments into their services. Based in Wilmington, Delaware, Fulgur Ventures invests in early-stage startups. It is particularly focused on Bitcoin and Lightning Network-related projects.Photo by David Edelstein on UnsplashBootstrapping brand awareness Fulgur Ventures is Blockstream’s largest shareholder. The objective is to bootstrap brand awareness within Japan using these partnerships with local companies. To that end, Diamond Hands CEO Koji Higashi will become Blockstream’s brand ambassador. It’s thought that efforts will be made going forward to further expand partnerships with local Japanese companies. Blockstream announced in a press release that it aims to drive adoption of self-custody technologies and Bitcoin layer-2 innovations within the East Asian country. Furthermore, it plans to drive adoption of real-world asset (RWA) tokenization. Commenting on the development, Blockstream Founder and CEO Adam Back stated:"With increased regulatory clarity and rising institutional interest in Bitcoin now is the moment for Blockstream to establish a direct presence in Japan, one of our most important markets." Back added that the company is looking forward to “empowering Japanese enterprises and individuals to fully harness Bitcoin as the foundation for a financial future that's secure, scalable and decentralized.” Tokyo office Another aspect to the expansion involves the opening of an office in Tokyo by Blockstream.  Adam Back is a Bitcoin OG who has often been the subject of speculation in attempts to identify pseudonymous Bitcoin founder Satoshi Nakamoto. Back proposed Hashcash, a proof-of-work-based system and forerunner to Bitcoin, in 1997. The Japanese corporate world has demonstrated its interest in Bitcoin in recent months, with local company Metaplanet launching an ambitious plan to acquire 21,000 Bitcoin by 2026, having adopted the Bitcoin playbook pioneered by American business intelligence and Bitcoin development company MicroStrategy. Blockstream’s investment arm, Blockstream Capital, has also been active in the market. Last month, the company invested $75 million into crypto custodian Komainu. Komainu is a joint venture between CoinShares, Ledger and Japanese global financial services company Nomura.  The same month, the company launched two institutional-grade Bitcoin investment funds. The funds, Blockstream Income Fund and Blockstream Alpha Fund, have been devised to cater to a growing demand from institutions for transparent, regulated and secure financial products. A third fund, Blockstream Yield Fund, is due to launch later this year. It will offer Bitcoin holders consistent, low-risk returns on their holdings. Blockstream was founded in 2014. In its earlier years, the company has served as a technology provider relative to the Liquid Network. In Core Lightning, it has developed a well-recognized implementation of the Lightning Network protocol.  To facilitate Bitcoin holders in terms of self-custody of the leading crypto asset, Blockstream developed Blockstream Jade, a hardware wallet built on open-source software. The device offers air-gapped functionality, meaning that users can perform transactions without connecting the device itself directly to the internet.

South Korean FSC updates definition of virtual assets and VASP regulations for Virtual Asset User Protection ActThe South Korean Financial Services Commission (FSC) on Monday (local time) published a new enforcement decree and supervisory regulations for the Virtual Asset User Protection Act, under which non-fungible tokens (NFTs) and deposit tokens are excluded from the definition of virtual assets. The act serves to protect customer assets, prevent unfair trading practices, and enforce penalties.“The enforcement decree and supervisory regulations provide detailed standards and methods to safeguard users’ assets and establish stability in the market,” the FSC said.Photo by Tingey Injury Law Firm on UnsplashDefining virtual assetsThe agency explained that it decided to exclude NFTs because they are mainly bought and sold for collection purposes, posing low risks to holders and the financial system. However, NFTs that can be used as a means of payment for purchasing certain goods and services are considered virtual assets. On the other hand, deposit tokens — which will be managed by the Bank of Korea’s central bank digital currency network — are regarded as a legitimate form of monetary deposit and are subject to relevant regulations instead of the User Protection Act. Other “electronic certificates of economic value,” such as mobile vouchers and electronic bonds, are also excluded from the definition of virtual assets.Enhancing security and transparencyFollowing the clarified definition of virtual assets, the updated regulations underline conduct measures that virtual asset service providers (VASPs) must comply with. For example, VASPs must calculate the total value of their customers’ crypto assets every month and store at least 80% in a cold wallet to prevent infringements like hacks — a boost from the current 70 percent. Cold wallets are deemed more secure than hot wallets because they keep crypto keys offline instead of staying connected to the internet.VASPs are also not allowed to arbitrarily block deposits and withdrawals of user assets without prior notice and a justifiable reason like internal system failure or hacks as well as requests from courts, investigative bodies, the National Tax Service and financial authorities. User deposits must be stored in banks, which can invest them only in safe assets such as government bonds.The act is set to take effect on July 19 next year after a legislative review scheduled for next month.