Huobi Delists USDD Stablecoin Pairs

Metaplanet, a Japanese investment and consulting firm, has recently announced the acquisition of an additional 42.466 Bitcoins, valued at 400 million Japanese yen ($2.5 million). This purchase increases their total Bitcoin holdings to 203.734 BTC, which were acquired at an average price of approximately 10 million yen ($62,000) per coin—about 7% above the current market price. This move reinforces Metaplanet’s strategy to integrate Bitcoin as a central component of its treasury assets. Market impact and future plansDubbed "Asia’s MicroStrategy" for its aggressive cryptocurrency investment strategy, Metaplanet has seen significant market momentum since its initial Bitcoin purchase in April 2024. The firm's stock surged by 90% the day following its initial announcement. However, following a recent downturn in Bitcoin prices, Metaplanet’s stock experienced a 25% decline from its peak in June. Despite this, the stock price remains 344% higher than at the start of 2024. In response to the volatile market, Metaplanet has announced plans to issue 1 billion yen ($6.26 million) in bonds to fund further Bitcoin acquisitions, signaling continued confidence in the long-term value of Bitcoin as part of its investment strategy. 

Korea Securities Depository Spotlights the Significance of a Security Token PlatformDuring a press conference held today in Seoul, Chairman Lee Soon-ho of the Korea Securities Depository (KSD) highlighted the need for developing innovative financial infrastructure, including a security token platform, as reported by local tech news outlet etnews.Photo by JEONGUK -on UnsplashBlockchain-based securitiesIn recent times, there has been a surge in demand for blockchain-based securities, prompting the South Korean government to issue guidelines on security tokens in February of this year. Consequently, securities firms, fractional investment platforms, and technology companies have been collaborating to form consortia.The KSD has been actively studying the legislative and institutional aspects of security tokens to establish a foundation for their widespread acceptance. Furthermore, it has devised a mid-to-long-term roadmap for the security token platform. Since February, the KSD has been spearheading a security tokens council with an aim to develop a business model for a security token platform starting in July.KSD’s roleSpecifically, the KSD intends to provide feedback on subsequent legislative revisions pertaining to security tokens, review security token registrations, and establish methods for managing the total volume of security tokens under the Act on Electronic Registration of Stocks and Bonds.Additionally, the KSD aims to expedite the construction of a new system for the capital market infrastructure. This endeavor entails revamping the operational system to enable flexible responses to internal and external changes, as well as creating a smart workplace suited for the digital era.Since its establishment in 1974, the KSD has played a crucial role in supporting the development of the Korean capital market by providing diverse securities services, including the issuance and distribution of securities. Nonetheless, participants at the conference concurred that the agency needs a fresh vision and strategy to maintain its position in the future.Chairman Lee emphasized that the agency’s 50th anniversary will take place next year, prompting a thorough assessment of its current status and the formulation of a new vision and strategy to adapt to the ever-evolving financial landscape. As part of these efforts, he underscored the recent establishment of a task force dedicated to devising future plans.

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.