Global Blockchain Incheon Conference to Promote Web3 Exchange and Advancement

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies. Huoine PayOn July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. Photo by allPhoto Bangkok on Unsplash‘Pig butchering’It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.”  Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.” The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet. The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform. Compromising crypto businessesIn a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications. A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware.  Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

Hong Kong’s HashKey Adds AVAX TradingHashKey Hong Kong, the Chinese autonomous territory’s first licensed retail crypto exchange, has unveiled an addition to its platform with the launch of Avalanche (AVAX) trading.According to an announcement published to its website on Wednesday, HashKey has listed Avalanche on Thursday with the caveat that access to AVAX trading will be reserved for professional investors, as defined by Hong Kong’s Securities & Futures Commission (SFC).Photo by Wance Paleri on UnsplashAccessible to professional investorsTo meet the criteria as a professional investor in Hong Kong, individuals must possess an investment portfolio valued at a minimum of 8 million Hong Kong dollars, roughly equivalent to $1 million. This decision sets AVAX apart from other widely traded cryptocurrencies, such as Bitcoin and Ether, which remain accessible to retail investors in Hong Kong. While Tether (USDT) enjoys retail status, the majority of altcoins on HashKey will remain the preserve of professional investors.This move is a direct result of the SFC’s proactive stance on regulating the rapidly expanding crypto market in Hong Kong. Since the introduction of regulated retail crypto trading in the Chinese autonomous territory in August, the SFC has imposed rigorous requirements on exchanges. HashKey mandates users to deposit a minimum of 10,000 Hong Kong dollars or $1,500 into their exchange accounts as part of the Know Your Customer (KYC) verification process.Low trading volumeAmid these regulatory challenges, HashKey Hong Kong currently reports a 24-hour trading volume of approximately $5.3 million, significantly lower than its global peers. This lower trading volume suggests that stringent regulations may be affecting the exchange’s ability to attract retail investors effectively.The path to regulatory compliance in Hong Kong has been anything but smooth for crypto exchanges. Reports indicate that these platforms have collectively invested over $25 million in establishing the requisite infrastructure for obtaining a Hong Kong Virtual Asset Service Provider (VASP) license. It was reported earlier this year that crypto firms are forking out between $2.55 million and $25.5 million in order to secure a VASP trading license.Despite the challenges, HashKey is looking at various avenues in bringing its offering forward. Earlier this month the firm signed a memorandum of understanding (MOU) with insurer OneDegree. That collaboration could be significant as it should lead to the assets of HashKey users being protected and insured on the platform. That would solve a major issue for participants in the crypto space amid the backdrop of ongoing platform failures and hacks.JPEX collapseEven as regulatory efforts intensify, the crypto industry in Hong Kong has not been impervious to bad actors. The recent collapse of the JPEX crypto exchange earlier this month serves as a stark reminder of the ongoing risks associated with the industry. Described as the largest financial fraud in Hong Kong’s history, JPEX faced allegations of embezzling over $178 million of investors’ funds. Notably, JPEX was operating without SFC registration at the time of the alleged embezzlement.In response to such incidents, the SFC has taken proactive measures by publishing a warning list of crypto exchanges considered non-compliant within the Chinese autonomous territory.

In Malaysia local regulator the Securities Commission has ordered global crypto exchange platform Bybit to shut down its operations within Malaysia as part of enforcement actions being taken by the regulator against the company.Photo by Esmonde Yong on UnsplashOperating without registration The Securities Commission published a statement to its website late last week outlining that both Bybit and its CEO Ben Zhou had been reprimanded for carrying out digital asset trading activities in Malaysia without having completed the necessary registration. The regulator also pointed out that both Zhou and his company have been listed on its Investor Alert List since July 2021. The Securities Commission took the opportunity to remind investors that they should only deal with what it termed “Recognized Market Operators” (RMOs), a designation it applies to entities that have completed registration with the regulator. Investors who utilize unregistered platforms are not extended any form of protection under Malaysian securities law, the Securities Commission warned, adding that such platforms could put them at risk of fraud and implicate them in money laundering activity potentially. Enforcement actions Bybit has been directed by the regulator to disable its website and mobile applications that are currently targeting Malaysian investors within 14 business days from Dec. 11.  The regulator also wants the company to curb other forms of promotion aimed at Malaysian investors. With that, it has requested that the company take down its Telegram-based support channel for Malaysian customers. Advertising activity, including social media posts, must also cease in cases where such activity is aimed at Malaysian investors. The Securities Commission acknowledged that thus far, Bybit has been compliant with its latest enforcement requests. Intentions to secure licensing Bybit has responded to these developments on its Bybit Malaysia Telegram channel, stating that the company understands that these actions “may cause some inconvenience” to Malaysian customers. “Once we have secured the appropriate licenses, we look forward to reconnecting with you again in the future,” it added. The enforcement action is likely to be a setback for Bybit given that the firm appeared to be focusing on the Malaysian market of late. In June it emerged that the company was moving to relocate Chinese employees to both Malaysia and Dubai.  This is not the first occasion in which Malaysia’s Securities Commission has taken action against a crypto platform. In 2023 the commission ordered the closure of the Malaysian operations of global exchange Huobi (subsequently rebranded as HTX). The circumstances in that instance were similar in that it acted against the exchange and its CEO for operating illegally within the Malaysian market. Within the Malaysian market, only six trading platforms have been registered. These include Hata Digital, Luno, MX Global, Sinegy, Tokenize Technology and Torum International. Earlier the Securities Commission acted similarly in prohibiting Atomic Wallet from operating within Malaysia given its failure to register its digital asset exchange activities.