Top

Telcoin makes users whole in exploit recovery

Web3 & Enterprise·January 13, 2024, 10:31 AM

Singapore-regulated Telcoin, a developer of financial applications for mobile users, has successfully restored user balances following an exploit that saw approximately $1.2 million worth of funds transferred from affected accounts.

https://asset.coinness.com/en/news/3c1766686bc03dc8348603085a3f1f51.webp
Photo by Martin Sanchez on Unsplash

Unauthorized withdrawal of assets

The incident, which occurred in late December, was attributed to an error in the interaction between Telcoin's digital wallet and a proxy contract on Polygon. In a blog post which was published on Wednesday, the company shared a full post-mortem analysis report which it commissioned Hong Kong-based blockchain security firm BlockSec to carry out, relative to the exploit.

 

The fault in the proxy contract's implementation caused a technical conflict that allowed for the unauthorized withdrawal of assets. Fortunately, no admin keys were compromised, ensuring that the broader Telcoin ecosystem remained unaffected.

 

In response to the security breach, Telcoin took action by immediately freezing the use of its application as a precautionary measure. The team initiated an investigation and committed to releasing updates promptly to address the issue and restore normalcy. The identified address associated with the exploit was 0x35d2775e5f95596509951b140d68fc5b9185ff98.

 

TEL token freefall

Despite the initial market turbulence, with the price of the Telcoin (TEL) token plummeting, the cryptocurrency has demonstrated resilience. On Dec. 25, TEL fell from a peak price of $0.00235146 to $0.00122535, representing a 48% decrease. At the time of writing, the price has slightly rebounded, trading at $0.001335. Nevertheless, it's still down 40% over the course of the past month's trading.

 

In a social media direct message to CoinDesk recently, Telcoin's founder and CEO, Paul Neuner, expressed pride in how his team responded to the issue, stating:

 

“Making the decision to preemptively restore affected user wallets from our company treasury was a no-brainer, and I’m proud of the team for making that happen in record time.”

 

Regulatory standing

Telcoin's regulatory standing played a crucial role in instilling confidence during this challenging time. Although headquartered in Tokyo, the company is regulated in Singapore as a Major Payment Institution (MPI) by the Monetary Authority of Singapore (MAS).

 

The firm is also registered and regulated in other global markets, including Canada and Australia. Telcoin maintains offices in Singapore, Tokyo, Dubai and Los Angeles. The company had been active in trying to shape regulation in the United States in 2023, with company executives having made repeated visits to Washington D.C. to meet with Financial Services Committee members and staffers on Capitol Hill.

 

In April of last year, the company extended its service offering to the European market, starting out initially in Lithuania.

It appears that the restoration of Telcoin's application services led to a significant boost in user confidence. The company reported a 400% increase in deposits compared to the previous month. Users responded favorably to Telcoin's swift resolution of the security breach, with a ratio of $3.60 being deposited for every $1 withdrawn in the first day since the service restoration.

 

Telcoin's measures, collaboration with security experts and the surge in user deposits appear to have resulted in a resilient recovery. The saga highlights the importance of prompt and transparent responses in maintaining trust in the face of crypto security issues.

 

 

More to Read
View All
Web3 & Enterprise·

Feb 22, 2024

Korbit holds an education session on AML for its employees

Korbit, one of South Korea’s leading crypto exchanges, has recently conducted an education session on anti-money laundering (AML) for its employees, local tech media outlet ZDNet Korea reported.  Held in the office lounge of Korbit, the session was led by Hwang Seok-jin, an expert in financial crime and anti-money laundering regimes. A professor at the Graduate School of International Information Protection of Dongguk University, he has served as a compliance officer and a consultant at Digital Asset eXchange Alliance (DAXA), a group consisting of five leading cryptocurrency exchanges in South Korea.  Photo by Viacheslav Bublyk on UnsplashEmphasis on the Virtual Asset User Protection Act  Mr. Hwang informed Korbit’s employees about the upcoming Virtual Asset User Protection Act, effective July, highlighting guidelines for investor protection, prohibitions against unfair transactions and the financial regulators’ authority and oversight. The session especially focused on explaining the Virtual Asset User Protection Act, given that the Act would deeply influence many departments of Korbits ranging from the accounting and finance unit handling customer deposits to blockchain-related units responsible for the custody of virtual assets.  Korbit maintains a no-negotiation policy that bars projects from interacting with exchange employees prior to their tokens being listed. This policy enhances the transparency of Korbit’s evaluation process, ensuring that the exchange assesses projects impartially, without third-party influence or external pressures. After listing an asset, Korbit conducts quarterly risk assessments on all crypto assets traded on the platform. Additionally, it plans to adopt a stricter approach to internal controls to enhance customer protection, in line with the upcoming enactment of the Virtual Asset User Protection Act. 

news
Policy & Regulation·

Dec 11, 2023

South Korean FSC updates definition of virtual assets and VASP regulations for Virtual Asset User…

South Korean FSC updates definition of virtual assets and VASP regulations for Virtual Asset User Protection ActThe South Korean Financial Services Commission (FSC) on Monday (local time) published a new enforcement decree and supervisory regulations for the Virtual Asset User Protection Act, under which non-fungible tokens (NFTs) and deposit tokens are excluded from the definition of virtual assets. The act serves to protect customer assets, prevent unfair trading practices, and enforce penalties.“The enforcement decree and supervisory regulations provide detailed standards and methods to safeguard users’ assets and establish stability in the market,” the FSC said.Photo by Tingey Injury Law Firm on UnsplashDefining virtual assetsThe agency explained that it decided to exclude NFTs because they are mainly bought and sold for collection purposes, posing low risks to holders and the financial system. However, NFTs that can be used as a means of payment for purchasing certain goods and services are considered virtual assets. On the other hand, deposit tokens — which will be managed by the Bank of Korea’s central bank digital currency network — are regarded as a legitimate form of monetary deposit and are subject to relevant regulations instead of the User Protection Act. Other “electronic certificates of economic value,” such as mobile vouchers and electronic bonds, are also excluded from the definition of virtual assets.Enhancing security and transparencyFollowing the clarified definition of virtual assets, the updated regulations underline conduct measures that virtual asset service providers (VASPs) must comply with. For example, VASPs must calculate the total value of their customers’ crypto assets every month and store at least 80% in a cold wallet to prevent infringements like hacks — a boost from the current 70 percent. Cold wallets are deemed more secure than hot wallets because they keep crypto keys offline instead of staying connected to the internet.VASPs are also not allowed to arbitrarily block deposits and withdrawals of user assets without prior notice and a justifiable reason like internal system failure or hacks as well as requests from courts, investigative bodies, the National Tax Service and financial authorities. User deposits must be stored in banks, which can invest them only in safe assets such as government bonds.The act is set to take effect on July 19 next year after a legislative review scheduled for next month.

news
Web3 & Enterprise·

Oct 20, 2023

Avalanche Blockchain Developer Expands into India

Avalanche Blockchain Developer Expands into IndiaAva Labs, the company behind the layer one Avalanche blockchain, is setting its sights on a significant expansion in India.Seeking out state agency partnershipsThe move by the New York-based blockchain development firm reflects the growing interest in blockchain technology within the world’s most populous country. Ava Labs outlined that it is actively seeking partnerships with Indian government agencies and institutions to facilitate the development of applications on the Avalanche (AVA) blockchain, according to a blog post published by the firm on Thursday.While government and state agencies have not been terribly progressive when it comes to decentralized cryptocurrencies in India, they have been more receptive in terms of developing the underlying blockchain technology.Earlier this year, the Royal Bank of India (RBI) highlighted the importance of adopting blockchain technology. Last month, an RBI-led initiative emerged through India’s National Payments Corporation of India (NPCI) to further explore blockchain technology relative to payment systems.Indian government’s initiatives, such as launching a Centre of Excellence in Blockchain Technology, align with Ava Labs’ expansion strategy. Moreover, Indian states like Goa and Telangana have demonstrated a proactive approach to leveraging blockchain for real-world use cases, including land records and vehicle registrations.Photo by Studio Art Smile on PexelsRecruiting local talentAs part of its plans, Ava Labs has made a few pivotal hires to lead its operations and business development in India. Devika Mittal, formerly the Head of Token Listings for OK Group company Okcoin, and Kamakshi Arjun, who has held leadership positions at Polygon (MATIC) India and Tech Mahindra, have joined the team. Both individuals bring extensive experience in the blockchain industry to their new roles.Mittal expressed her excitement about the opportunity, stating:“I am so excited to help Ava Labs expand its reach and impact in the region, and am confident that Ava Labs is well-positioned to meet the demands of India’s large and growing population of tech-savvy individuals and businesses.”Equally Arjun, with her understanding of the blockchain market, is expected to play a critical role in Ava Labs’ expansion strategy.Business development fundMittal said in an interview with The Block that Ava’s operations in India would focus on several sectors, including ticketing, certification, and supply chains. She also highlighted the innovative features of Avalanche subnets. Notably, Ava Labs has a specific business development fund earmarked for India.There’s a lot of activity within India’s blockchain ecosystem, with projects like Loco, an esports and live-streaming platform, leading the way. Loco is developing a range of Web3 products and pioneering innovative fan experiences using a custom Avalanche Subnet.While Polygon Labs, the founder of Ethereum scaling network Polygon, operates on a fully remote basis, its origins can be traced back to India through its founders. One community member responded to this latest news, stating that the Avalanche development team has a lot of ground to make up by comparison with the progress recorded by Polygon in India in terms of partnerships and business development.Ava Labs is actively engaging with various prominent institutions and has already secured a partnership with a government agency, although specific details have not been disclosed.

news
Loading