Top

CertiK Skyfall research team inducted into Samsung Mobile Security Rewards Program Hall of Fame

Web3 & Enterprise·January 25, 2024, 6:11 AM

Global blockchain security ranking platform CertiK announced that its Skyfall research team has been inducted into the Samsung Mobile Security Rewards Program’s 2023 Hall of Fame, according to an article by South Korean news outlet Greenpost Korea on Thursday (KST).

https://asset.coinness.com/en/news/a9bbc815696c54bad7b2a3dbe873910d.webp
Photo by Franck on Unsplash

Teamwork excellence

This Hall of Fame recognizes outstanding security researchers who have made significant contributions each year to the security of Samsung products. CertiK Skyfall’s spot in the ranking highlights the importance of collaborative efforts in solving complex cybersecurity challenges, the company said.

 

Securing the future

The team was responsible for actively identifying a total of seven vulnerabilities in the Samsung Blockchain Keystore – a software development kit (SDK) developed by Samsung to manage private keys – four of which were critical and three of which were high risk. The vulnerabilities left the SDK susceptible to local attacks, including arbitrary code execution and unauthorized access to sensitive data. In response, Samsung was able to quickly deploy security patches that added appropriate boundary checks and protection mechanisms.

 

Skyfall has formerly been acknowledged twice in Apple's release notes for discovering multiple vulnerabilities in new iOS and iPadOS software releases, the most recent being iOS 17 Security Update. Last June, the team was also awarded the Sui network’s highest bug bounty for discovering and fixing a critical vulnerability.

 

"We are extremely proud of the outstanding performance of the CertiK Skyfall team," said Kang Li, Chief Security Officer at CertiK. "It is a testament to the team's professionalism, integrity and deep impact at the forefront of cybersecurity."

 

CertiK is comprised of a team of seasoned experts from reputable universities including Yale and Columbia University and globally renowned companies like Google and Microsoft. The firm also operates from several offices around the world, including Seoul.

More to Read
View All
Policy & Regulation·

Jan 17, 2025

PM encourages focus on crypto so Malaysia doesn’t get left behind

Malaysian Prime Minister Datuk Seri Anwar Ibrahim has said that Malaysian government agencies and the country’s central bank need to study blockchain and cryptocurrency from a policy perspective so as not to get left behind.Photo by Esmonde Yong on UnsplashConsidering major changesHis comments emerged alongside the news that Anwar had discussed digital finance policy matters with Abu Dhabi government officials and with Changpeng Zhao (CZ), the founder and former CEO of Binance. According to the New Straits Times, an English-language newspaper published in Malaysia, the Malaysian government is homing in on the establishment and adoption of a formal policy relative to digital assets and blockchain.  Anwar confirmed that discussions also related to “digital transformation, data centers and artificial intelligence (AI),” and that the demands that Malaysia now faces require the government to consider major changes. In discussion with local media, Anwar stated: "I proposed several months ago how our agencies, including security, treasury and Bank Negara study how Malaysia can explore this so we aren't left behind. Ensuring that is regulated could safeguard the people's interests and prevent leakages.” Crypto-friendly regulationsAnwar added that a “radical departure from the old ways” would be needed for Malaysia to remain competitive, emphasizing the need for the Southeast Asian country to keep up to speed through the application of crypto-friendly regulations. Addressing the pace of technological change, he stated: “This is an evolution which happens quickly and requires us to be equally fast. We feel that Malaysia should not be left behind while mired in an old financial system.” In moving towards setting out a clear policy relative to digital assets, the Malaysian prime minister is encouraged by his recent dialogue with United Arab Emirates (UAE) government officials. He said that they confirmed that they feel they can forge close cooperation with Malaysia on the matter. Anwar added:“We need to discuss this in detail, leave behind the old business model and give meaning to this digital finance policy.” Taking to the X social media platform, Binance’s CZ described the nature of his discussion with the Malaysian prime minister, stating: “The discussions were not about Binance but about the crypto industry and Malaysia, including regulations, policies, risks, and collaborations between industries and across national borders. Forward!” A pseudonymous crypto investor and programmer, @darren_com_my, responded to CZ’s tweet to explain that the Malaysian government provides support to the digital assets industry via government agencies, but that, on the other hand, it has blacklisted a number of exchanges such as HTX (formerly Huobi) and Binance.  The local regulator has issued licenses to six virtual asset service providers. In recent weeks, Malaysia’s Securities Commission has taken action against global exchange Bybit and crypto app Atomic Wallet, prohibiting them from trading within the jurisdiction due to both companies not having obtained the required licensing.

news
Web3 & Enterprise·

Oct 17, 2023

Haru Invest Considers Server Suspension as Troubles Persist

Haru Invest Considers Server Suspension as Troubles PersistIn the wake of halting withdrawals in June, Haru Invest, a Singapore-headquartered cryptocurrency platform, is contemplating the suspension of its server. This decision is part of the firm’s ongoing efforts to streamline operations and reduce maintenance costs.Photo by David Guenther on UnsplashCost reductionCEO Hugo Lee made the announcement on Monday, underscoring the significant burden of server maintenance costs on the company’s finances. He acknowledged that this cost represents a substantial portion of their fixed expenses and is thus a top priority for the firm.Lee disclosed:“We plan to suspend the service in a few weeks, backing up all member information.”However, he also noted that the company is yet to finalize a concrete plan for the server suspension.The move to shut down the server aligns with Haru Invest’s broader strategy to lower all costs associated with its services. Lee explained:“Some of the current fixed expenditures include the upkeep of Haru Invest services, the cost of workspace like the office, and the cost of communication with our members.”The company is actively seeking ways to reduce these expenses and preserve its assets.Asset distributionAdditionally, Lee assured users that the assets conserved thus far would be included in the distribution to those who have had their funds locked on the platform since June, offering a glimmer of hope to impacted users.Nevertheless, the announcement of the server suspension has raised concerns within the Haru Invest community. Some users have expressed skepticism about the purported high costs of server maintenance, believing the firm’s claim to be exaggerated.One user, voicing this discontent, commented on Haru Invest’s Telegram channel, “Server costs cost nothing.” Another remarked: “Servers are gone soon guys, huge costs, 200 USD a month.” According to industry standards, the maintenance costs for running a server for a small to medium-sized business typically range between $35 to $500 per month.Unhappy platform usersLee’s statement regarding the impending server suspension follows the platform’s earlier decision to terminate deposits and withdrawals in June. This decision was coupled with the closure of Haru Invest’s offices and the dismissal of numerous employees, as reported by local news agencies.Haru Invest attributed these issues to the fraudulent activities of the consignment operator B&S Holdings, formerly known as Aventus. While some investors accused the firm of orchestrating a “rug pull,” Haru Invest denied these allegations and maintained its innocence. One user posted the following claim on X (formerly Twitter) last week: “Rugpull. If justice is served, the scammers will be behind bars.”In a bid to address concerns over its corporate rehabilitation application, Lee appeared in court in September, emphasizing that Haru Invest was actively cooperating with investigating agencies. However, the company has yet to provide a timeline for the recovery of users’ assets as of early October.Lee also addressed the matter in Monday’s statement: “We are also responding to the rehabilitation proceedings that some of our members have filed with the court as mentioned in our previous announcement, in addition to actively cooperating with other authorities’ investigations. ”Haru Invest is reportedly facing a class-action lawsuit with disgruntled investors alleging fraud.

news
Web3 & Enterprise·

Dec 19, 2023

OKX NFT Marketplace hits the front on trading volume

OKX NFT Marketplace hits the front on trading volumeIn the non-fungible token (NFT) space, OKX’s NFT marketplace has emerged as the leader in daily trading volume, surpassing long-standing frontrunners such as OpenSea, Blur and Magic Eden.According to data from decentralized applications (DApp) tracker DappRadar, on Dec. 18, the OKX NFT Marketplace had recorded a 24-hour trading volume of $50 million. In more recent trading, that has reduced to around $35 million. Nevertheless, it maintains its lead over its main competitors, whose combined 24-hour trading volume stands at approximately $24 million.Photo by Kanchanara on UnsplashOrdinals driving volume uptickThe surge in trading volume can be attributed to OKX’s support for Bitcoin Ordinals NFTs and BRC-20 tokens. Notably, the NFT transaction volume on Bitcoin experienced a substantial increase, reaching $121.8 million between Dec. 10 and Dec. 17.Unlike traditional NFTs, Ordinals do not rely on smart contracts pointing to a digital asset. Described as digital artifacts by developer Casey Rodarmor, they lack smart contract features, making their trading reliant on decentralized exchanges and wallets.The Ordinals protocol has been made possible by the Bitcoin Taproot upgrade, which was implemented in November 2021. The upgrade allows digital files to be inscribed on satoshis, the smallest monetary denomination on the Bitcoin network, each with a unique number or ordinal.Strategic focus on BRC-20The OKX NFT Marketplace’s strategic focus on the BRC-20 token standard has also played a role in its success. Collaborating with UniSat, a developer of Ordinals wallets, OKX created an indexing mechanism for BRC-20 transactions built on ordinal inscriptions, further solidifying its position in the market.The Ordinals protocol has not been without controversy, with some, including Adam Back, CEO of Blockstream, criticizing it as a misuse of Bitcoin transaction blockspace. Despite the controversy, Ordinals have gained momentum, contributing to $367 million in sales volume on the Bitcoin network, surpassing Ethereum and Solana.Ordinals and the BRC-20 standard have generally been a boon for Bitcoin miners, boosting their revenues through increased fees. This incentivizes miners to secure the network. Over 49 million transactions have resulted in over 2,250 BTC in transaction fees. Around 6 p.m. UTC on Monday, bitcoin fees are averaging out at $38.43 per transaction.Beyond Bitcoin Ordinals, the broader NFT space has seen a resurgence, with the collective volume nearing $1 billion in November. During that month, the average value of NFT transactions experienced a notable 114% increase, rising from $126 to $270. This suggests a willingness among users to engage in higher-value trades compared to previous months.Speaking with The Block, Nick Ruck, COO of ContentFi Labs, a community-owned Web3 tool suite, had this to say on the development:“OKX has become the number one NFT marketplace after enabling trading of BTC Ordinals NFTs. Blur and OpenSea have not yet allowed trading of these Bitcoin-based NFTs, so they’ve started to fall behind in terms of volume due to the huge demand of Ordinals.”

news
Loading