2023: A year of success for Com2uS Platform

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Japanese blockchain infrastructure firm Soramitsu has been contracted by the State Bank of Pakistan (SBP) to work on a pilot program for the digital Pakistani rupee. Pakistan originally announced its intention to pursue a central bank digital currency (CBDC) or digital rupee back in 2019. However, unlike other Asian nations such as China, Cambodia and Thailand, it has not taken much action to progress such a digital currency since then.SBP Governor Jameel Ahmad spoke at the Reuters NEXT Asia Summit in Singapore last month, outlining that the South Asian country was moving towards the establishment of a digital rupee and “building up [its] capacity” to launch it, and that a pilot project would be the next step. According to a report published by Nikkei Asia on Aug. 12, that pilot project is now underway.Photo by Hamid Roshaan on UnsplashCBDC specialistSoramitsu already has a wealth of experience in this field. In 2023, it signed a memorandum of understanding with the Laotian central bank to launch a proof-of-concept CBDC project, with the Tokyo-headquartered company going on to play a pivotal role in the issuance of Laos’ Digital Lao Kip.In Cambodia, it partnered with the National Bank of Cambodia to bring about the establishment of Bakong, Cambodia’s CBDC-like payment system. The company is also involved in CBDC projects in Papua New Guinea and the Solomon Islands, while spearheading a project aimed at enabling seamless cross-border payments among Asian countries. Japanese fundingIn the case of Pakistan’s pilot project, Soramitsu’s CBDC platform will facilitate the digital rupee while funding is being provided by the Global South Future-Oriented Co-Creation Project, an initiative from Japan’s Ministry of Economy that seeks to promote the formation of co-creation business models. Infrastructure, such as the internet and power, can be unstable in some parts of Pakistan. Consequently, the proposed CBDC will incorporate the ability for the user to transact with it using their smartphone, even if the phone doesn’t have an active internet connection. Digital transformationMasato Toriya, an associate professor at Tokyo University of Foreign Studies and an expert on Pakistan, outlined the behavioral change that would be required in getting Pakistanis in rural areas to use such a currency. He stated: “Many transactions in rural areas are cash-based, even for wage payments, and the rate of people with bank accounts is low."  However, cash-based systems have significant overheads, and it's thought that a CBDC could reduce such costs considerably. Last month, the Pakistan Institute of Development Economics published an article written by Dr. Ahmed Fraz, an assistant professor of finance with the organization, in which he claimed that the digital rupee pilot project is part of a “profound digital transformation” that Pakistan is moving towards.  Dr. Fraz asserted that a CBDC would enhance financial inclusion in Pakistan through the reduction of transaction fees, digitization of welfare payments and the financial inclusion of millions of unbanked citizens within the formal economy.He added that the digital rupee “is not intended to replace existing payment systems immediately but to complement platforms” and to modernize Pakistan’s financial architecture.

As the 2024 F1 season gears up for its launch on March 2, leading NFT marketplace and crypto exchange OKX is set to take center stage by showcasing its logo on McLaren F1 cars.Photo by Jesper Giortz-Behrens on UnsplashThe move, outlined in a recent press release, will see the OKX brand on the side of McLaren’s cars in 20 high profile races. Going beyond a mere branding endeavor, the sponsorship initiative has been put together in an effort to energize the blockchain-centric world of F1, enhancing track-side aesthetics and elevating the visibility of the Web3 company. ‘Stealth Mode’The collaboration will see OKX's branding appear on various elements of McLaren cars, from side pods and rear wings to mirrors, drivers' helmets and team apparel. OKX's logo will be prominently featured during 20 out of the 24 races in the upcoming F1 season. The primary 2024 livery of the vehicle draws inspiration from the OKX-McLaren "Stealth Mode" design showcased during the Singapore and Japan Grand Prix races in 2023. According to Haider Rafique, the Chief Marketing Officer at OKX, the decision to expand the sponsorship deal with McLaren aligns with the increased brand awareness achieved through their partnership. Building upon existing sponsorship dealThe collaboration between McLaren and OKX isn't new. OKX's initial partnership with McLaren commenced in May 2022 as a primary partner to its F1 team and laid the foundation for this continued collaboration. The crypto platform’s livery featured on McLaren MCL60 F1 cars at the Singapore and Japan Grand Prix races in 2023.  Surveys conducted post-event revealed that 80% of attendees expressed interest in learning more about the exchange, indicating a curiosity within McLaren's fan base about Web3 and digital finance. This resonance with the audience aligns with OKX's mission to make the crypto economy accessible to everyone and educate the public about the benefits and opportunities within this space. Looking ahead, Rafique expresses OKX's intent to pursue a long-term partnership with McLaren, emphasizing the value derived from longevity and growth over time. He envisions the McLaren-OKX partnership as potentially spanning decades, fostering generational associations akin to his own fondness for Ayrton Senna and McLaren from his youth. Broader crypto sector marketingThe broader trend of the cryptocurrency sector's increased involvement in F1 is evident, with partnerships like Crypto.com creating NFTs for every lap and Kraken's marketing collaboration with the Williams Formula One racing team. Earlier this month, crypto gambling platform Stake signed a sponsorship deal with the Sauber F1 team. Crypto.com has been a prominent sponsor of Formula 1 since 2021, showcasing its logo at Grand Prix circuits globally and sponsoring the Aston Martin Aramco Cognizant F1 team. The other high profile sports sponsorship forum for crypto businesses appears to be the English Premier League (EPL). In this arena too, OKX has been active, having an ongoing deal in place with Manchester City which it strengthened last year. Singapore-based crypto trading platform BingX recently followed suit, securing a sponsorship deal with Chelsea Football Club.