Wintermute Asia executes inaugural options block trade via CME

South Korea’s largest crypto exchange, Upbit, suffered a security breach on Nov. 27 that resulted in the theft of 44.5 billion won ($30.4 million) in digital assets, all taken from the exchange’s hot wallets. The stolen tokens were all Solana-based, and Upbit CEO Oh Kyoung-suk said in a statement that no users will incur losses, as the company will cover the full amount with its own reserves.Photo by FlyD on UnsplashHot-wallet breach hits 24 tokensThe exchange said in a statement that the compromised tokens were transferred to an unknown external wallet at around 7:42 p.m. UTC on Nov. 26. In total, 24 cryptocurrencies were affected, all within the Solana ecosystem. The stolen assets ranged from infrastructure tokens such as Solana (SOL) to staking-related assets like Jito (JTO), along with the stablecoin USD Coin (USDC) and memecoins including Bonk (BONK), Moodeng (MOODENG), and Official Trump (TRUMP). According to Oh, the breach was followed by an emergency security review of the affected networks and wallets. He added that all remaining assets were moved to cold storage to prevent further unauthorized transfers. Oh also said the exchange is working to trace the stolen assets and block on-chain movements wherever possible, noting that Solayer (LAYER) tokens worth 2.3 billion won ($1.6 million) have already been frozen. Upbit is also reaching out to relevant projects and institutions for assistance. This marks Upbit’s second theft case. The first took place on Nov. 27, 2019, exactly six years ago to the day, according to News1. Authorities focus on Lazarus’ involvementFinancial authorities are investigating the incident, and North Korea’s Lazarus Group is being treated as the leading suspect, the Maeil Business Newspaper reported. Lazarus is also believed to have been behind the 58 billion won ($40 million) worth of Ethereum (ETH) stolen from Upbit in 2019. A government official told the paper that the latest breach did not appear to stem from a server intrusion but may have involved a stolen administrator account, allowing the attackers to impersonate internal staff and move assets—similar to the method used in the 2019 case. Security analysts echoed that assessment. One investigator said the stolen funds moved through exchange wallets before being mixed, a pattern often linked to Lazarus. He added that mixers, which are prohibited in Financial Action Task Force (FATF)-member jurisdictions, make tracing difficult and that attackers typically route assets through countries outside that framework, further pointing to North Korea. Following the incident, Upbit suspended deposits and withdrawals for all assets and said services will resume once security is fully verified. The halt has also affected trading dynamics on the exchange, with CryptoQuant CEO Ki Young Ju noting that retail investors are fueling altcoin spikes as arbitrage bots remain offline. Dunamu, Naver set $6.8B growth planThe security crisis struck at a particularly sensitive moment for Upbit’s operator, Dunamu, overshadowing what was intended to be a celebratory corporate milestone. On that same day, Dunamu, Naver, and Naver Financial held a joint press conference to outline their global expansion strategy. Dunamu brings its blockchain and crypto infrastructure, Naver contributes its position as Korea’s dominant search engine, and Naver Financial adds its payment platform serving 34 million users. The event came after reports that Naver Financial and Dunamu had approved a merger plan through a comprehensive share swap, with the ratio set at 2.54 to 1. The three companies said they will combine their respective strengths to invest 10 trillion won ($6.8 billion) over the next five years in building an ecosystem centered on Web3 and artificial intelligence (AI).During the press conference, Naver CEO Choi Soo-yeon said no decisions have been made on a Nasdaq listing for the newly combined Naver Financial–Dunamu entity or on whether it might eventually merge with Naver, according to TechM. She said dual listings remain a matter requiring national consensus. Choi also noted that while Naver Financial is a Naver subsidiary, Dunamu is the larger partner, and a later merger between the combined entity and Naver is unlikely.

Bank of Japan Publishes Results of CBDC PoCThe Bank of Japan (BoJ) recently concluded the second phase of its central bank digital currency (CBDC) proof of concept (PoC) project, which began in April. The results of this phase were published on Monday, and they shed light on key aspects such as the comparison between account-based and token-based CBDCs and the management of holding limits for users with multiple accounts.Photo by Manuel Cosentino on UnsplashToken-based CBDCsThe experiments conducted by the central bank covered a wide range of topics. Among the most intriguing findings were the advantages and disadvantages of token-based CBDCs and how to effectively impose holding limits for users with multiple CBDC balances.Token-based CBDCs have garnered interest from various central banks, with some adopting the UTXO token model used by Bitcoin without the use of a distributed ledger. A UTXO or unspent transaction output, defines where a blockchain transaction starts and finishes. The Bank of Japan explored this model and analyzed its pros and cons.In the initial proof of concept, both account-based and token-based CBDCs were examined, considering scenarios where the central bank managed the ledger or shared it with intermediaries like banks. In the token-based model, fixed token denominations were used, similar to physical cash in countries like India, and a centralized ledger was employed. However, in the recent phase, the central bank utilized flexible value tokens similar to UTXO and shared ledger functions with intermediaries.The Bank of Japan favored the flexible value token model due to its ability to handle multiple requests simultaneously. However, it acknowledged that this model may require more technical resources compared to the account-based approach. Challenges may arise when implementing additional functions, such as holding limits, while maintaining optimal performance. The European Central Bank (ECB) also noted in a recent report that most payment providers are accustomed to account-based payments and would incur costs to adapt to token-based systems.Another significant aspect explored by the BoJ was how to impose holding limits when users have multiple CBDC balances through different intermediaries. The challenge lies in determining if the overall holding limit has been breached without compromising user privacy.Homomorphic encryptionOne possible solution discussed in the report is the use of homomorphic encryption, which enables computations to be performed on encrypted data without it first needing to be decrypted. That allows for the necessary checks without intermediaries accessing the specific data being checked. Although this solution may slightly increase processing time, it could introduce a higher risk of data inconsistencies.Alternatively, a simpler approach proposed by the central bank is to establish a per-account holding limit and a limit on the number of accounts a single user can hold, rather than imposing global limits. Ideally, users with multiple accounts would have a higher per-account holding limit compared to those with fewer accounts.Phase 3 underwayWith the next pilot phase already underway, the BoJ aims to test the end-to-end process flow and identify challenges related to integrating with external systems. Additionally, they are creating a CBDC Forum to gather input from the private sector, ensuring a collaborative approach to CBDC development.While investigation and research into CBDCs continues, the BoJ has said that it will make a final decision on CBDC implementation by 2026.

In a major crackdown, the Chengdu Public Security Bureau announced on May 15 the dismantling of an extensive underground banking network, resulting in the arrest of 193 suspects across China in an operation that unveiled illegal businesses using the U.S. dollar stablecoin, Tether (USDT).Photo by DrawKit Illustrations on UnsplashUnauthorized foreign exchange settlements These activities involved illicit transactions amounting to approximately 13.8 billion yuan ($1.9 billion). The investigation began in November 2022 when authorities detected suspicious activities involving underground banks in Chengdu’s Longquanyi district. In response, a specialized task force was formed, integrating experts from various police departments, including economic investigation, cyber security and legal affairs. This team uncovered unauthorized foreign exchange settlements that bypassed national regulations. On June 1 of last year, acting on instructions received from the Ministry of Public Security, the task force conducted coordinated raids in several major cities, such as Shanghai and Shenzhen. These efforts led to the capture of key figures in the criminal syndicate, involving the arrest of 25 suspects. Law enforcement seized numerous bank cards, payment instructions and other digital payment instruments tied to the illegal operations during these raids. A broader investigation across 26 provinces has resulted in 193 suspects being arrested. Using USDT to evade regulationFurther investigations revealed that since January 2021, the syndicate exploited its import and export business to facilitate illegal activities. By using USDT as a medium, they bypassed official foreign exchange channels to service clients needing to transfer funds internationally. Moreover, these operations were intricately linked to other illicit activities, including financial fraud and smuggling. In a related development, on May 13, BeInCrypto reported that the Chinese government arrested six individuals responsible for illicit crypto transactions worth $295 million. These arrests highlight the challenges and risks associated with cryptocurrency in unregulated environments. Additionally, the Hong Kong police recently apprehended three men at a currency exchange shop following a deceptive transaction involving Tether’s USDT. The suspects allegedly showed a customer ceremonial "hell money" before deceitfully persuading him to transfer about $128,073 worth of USDT, only to refuse the agreed-upon cash exchange afterward.  According to the South China Morning Post (SCMP), hell banknotes are a form of ceremonial paper money burned as an offering to ancestors or deities in traditional Chinese culture. Late last year, USDT was used by a gang of gold smugglers in Nepal, who received $16 million in the Tether stablecoin in exchange for the precious metal. A joint investigation carried out by the authorities in Nepal and China led to the arrest of two Chinese and 13 Nepalese nationals in connection with the illicit activity. Over the course of the weekend, it emerged that two Chinese nationals had been charged by the authorities in the United States with money laundering through Bahamas-based Deltec Bank. Deltec acts as the primary banker for Tether, prompting longstanding Tether critics to suggest illicit activity relative to the stablecoin issuer’s dealings with the bank. This series of arrests and discoveries underscores the ongoing efforts of Chinese authorities to clamp down on illegal cryptocurrency activities. The activity also poses problems for Tether in its efforts to maintain compliance and stamp out illicit use in the face of ever-increasing regulatory scrutiny worldwide.