Japan’s PM holds off on supporting Bitcoin as reserve asset

NBC and AliPay collaborate to enable enhanced cross-border paymentsThe National Bank of Cambodia (NBC) and Ant Group, the parent company of AliPay+, the borderless payment and marketing solutions provider for merchants, have inked a memorandum of understanding (MOU) on “Cross-Border QR Code Payment Cooperation.”The deal was announced at last week’s Singapore FinTech Festival. The collaboration aims to boost the use of KHQR codes through Alipay+. KHQR codes provide for a standardization of QR codes which have been created for retail transfers and payments within Cambodia.Chea Serey, the Governor of NBC, and Douglas Feagin, Senior Vice President of Ant Group, formally signed the MOU to facilitate efficient and secure cross-border QR code payment transactions. The agreement focuses on bridging Bakong’s network through KHQR codes and Alipay+’s extensive global QR code acceptance network, as outlined in an NBC press release.Photo by Paul Szewczyk on UnsplashBakong CBDCBakong is Cambodia’s central bank digital currency (CBDC) based upon the Cambodian riel. Japanese fintech developer Soramitsu has collaborated with the Cambodian authorities in developing it.This latest development unfolded as Chea Serey took the stage as a keynote speaker at the Singapore Fintech Festival, addressing the theme, “The Intersection of Policy, Finance, and Technology.”According to a statement from Chea Serey’s official Facebook account, this collaboration opens doors for Cambodia Bakong users to access Alipay+ and engage with over 83 million merchants worldwide. Additionally, it allows international tourists to seamlessly make payments to KHQR merchants in Cambodia. Serey stated:“Today I am glad to announce the MoU signing between Alipay Plus and NBC, hence I encourage local banks to inform their merchants to open KHR accounts and start accepting KHR payments otherwise they won’t be able to benefit from this arrangement.”Greater interoperabilitySerey highlighted that this collaboration marks a significant step in enhancing Cambodia’s payment connectivity on a global scale, creating a more convenient and inclusive experience for tourists and contributing to the growth of the national economy.In an interview with CNBC at last week’s event, Serey said that the initiative will enable greater interoperability. In China, Cambodian merchants and visitors can use the Cambodian payment system to make payments to Chinese vendors. Likewise, Chinese visitors can use Alipay+, a platform they are familiar with, to make payments for goods and services in Cambodia. Serey believes this to be important, given that Cambodia depends heavily on tourism.The Alipay+ platform facilitates payments through various digital wallets, including Korea’s KakaoPay, Malaysia’s TouchnGo, Thailand’s TrueMoney and the Philippines’ GCash. Ant Group has been attempting to extend the regional utility of its payment system for some time.As far back as 2017, Ant Group signed an MOU with British bank Standard Chartered with a view towards increasing financial services access to clients located along China’s “Belt and Road” initiative route. In 2019, Alipay inked a deal with Cambodia’s DaraPay to allow Alipay wallet holders to pay for goods and services at DaraPay POS terminal points.Alipay and WeChat Pay are recognized as two of the most preferred payment methods among Chinese consumers. Together, they dominate the Chinese mobile payments landscape, boasting a market share of over 92 percent and a user base exceeding 2 billion.

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Growing Concerns about Single Crypto Exchange Listings in KoreaAccording to Yonhap Infomax, there is increasing concern about single crypto exchange listings in the Korean market, following the recent arrest of two former Coinone employees.©Pexels/RODNAE ProductionsCrypto listing briberyThe individuals were detained by the Seoul prosecution for allegedly accepting about 3 billion KRW (equivalent to over $2.2 million) in bribes to list a certain cryptocurrency on the exchange.Prosecutors are investigating if these suspects were also involved in the listing of the Puriever token, which is reportedly connected to the kidnapping and murder of a woman in her forties in Gangnam, Seoul.Single exchange-listed cryptosA recent report by the Financial Services Commission (FSC) revealed that 389 cryptocurrencies were listed on a single Korean exchange in the second half of last year, a decrease from the previous year’s 403. Despite the decrease, the trend of single exchange listings continued. Exchanges often exclusively list specific cryptocurrencies to gain a competitive edge, as investors typically prefer larger exchanges with greater liquidity.However, these cryptocurrencies may lack proper review and management and are often highly volatile. The FSC report showed that 34% of cryptocurrencies listed on a single exchange had a market cap of less than 100 million KRW (~$76,000). The Financial Intelligence Unit also warned investors about price fluctuations and liquidity shortages.High volatile cryptocurrencies are attractive to exchanges, as they can lead to increased transaction fee profits.Transparent listingTo address this issue, experts advocate for a transparent listing process.One lawyer in the crypto industry noted that there is a global trend of regulating cryptocurrencies as securities, and if relevant bills pass in Korea, their issuance and disclosure will be regulated. Clear guidelines on disclosures could resolve the issues of single crypto exchange listings, the legal advisor added.Another industry insider has called for investor caution, stressing the need to consider the potential delisting of these crypto assets.