Chinese Court Recognizes Virtual Assets as Legal Property

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

3AC Founders Vow to Donate Future EarningsThe co-founders of the Singapore-headquartered bankrupt crypto hedge fund Three Arrows Capital (3AC) have publicly committed to donating their “future earnings” to creditors who suffered losses during the fund’s dramatic collapse.Kyle Davies and Su Zhu made this groundbreaking announcement during a candid Twitter Spaces session hosted by Mario Nafwal, aiming to establish a “shadow recovery process” parallel to the ongoing liquidation proceedings.Photo by Josh Appel on UnsplashBelieving in karmaDavies explained that their intended donations would be separate from the formal recovery process, designed to supplement any reimbursements that creditors might receive through the liquidation proceedings. While acknowledging that some early creditors have already been made whole, he emphasized the founders’ unwavering belief in the concept of “karma.”They see their act of giving back as a way to balance the scales and provide an avenue for creditors to potentially recover their losses.Creditor skepticismHowever, these noble intentions expressed by Davies and Zhu have been met with skepticism from the crypto community and the very creditors they seek to assist. Teneo, the liquidator overseeing the 3AC liquidation, responded to Davies’ comments by expressing disappointment in the founders’ lack of cooperation during the ongoing process. They stressed that the founders should prioritize engaging in the court-ordered activities rather than making promises about future earnings from a new venture.Acknowledging concerns about optics, Davies addressed questions surrounding the launch of their new crypto exchange, Open Exchange (OPNX), while their previous company undergoes liquidation. He stressed the inherent connection between OPNX and the creditors, suggesting that the success of their new entrepreneurial endeavor would ultimately benefit those affected by the collapse of Three Arrows Capital.OPNX success requiredOPNX, the newly launched Dubai-based trading platform, is specifically designed to facilitate the trading of bankruptcy claims. Since its announcement in February, the platform has garnered significant attention, boasting an impressive user base of 20 million individuals holding a collective $20 billion in claims. It is worth noting that the collapse of Three Arrows Capital resulted in the loss of $2.5 billion in customer deposits, making the success of OPNX crucial for creditors seeking redress.Davies also revealed that OPNX currently records approximately $50 million in daily trading volume, showcasing promising early traction for the platform. However, the exact mechanics of the “shadow recovery process” were left unspecified.While OPNX currently only facilitates the trading of claims from lender Celsius, the platform has ambitious plans to include claims from other high-profile bankruptcies in the near future. The list of potential additions encompasses notable entities such as FTX, Genesis, BlockFi, Voyager, Hodlnaut, Mt. Gox, Vauld, Zipmex, and even Three Arrows Capital itself.When taken at face value, the founders’ pledge to donate future earnings to creditors takes on the appearance of a significant and commendable gesture. However, doubts persist within the crypto community due to the founders’ prior actions and the ongoing liquidation process. Only time will reveal the true impact of this “shadow recovery process” and whether it will genuinely alleviate the losses suffered by creditors in the wake of Three Arrows Capital’s collapse.

South Korea Advances Crypto Disclosures Bill for LawmakersThe floor leader of the ruling political party in the South Korean Assembly is urging faster implementation of a new bill that will require Korean politicians and senior government officials to make a declaration of any crypto-related holdings.The bill was already in the works but is now picking up speed, and likely to be brought into effect earlier than expected. That’s according to a local report published by Yonhap news agency. The bill is being finalized against the backdrop of a particularly poignant political controversy.Photo by rawkkim on UnsplashPolitical controversyLawmaker and former Democratic Party of Korea opposition party member Kim Nam-kuk is at the center of a political fuss, and with that, intense scrutiny relative to his interaction with crypto-assets. Kim reportedly held 800,000 WEMIX tokens in early 2022, with a value in the region of 6 billion Korean won (around $4.5 million).Existing legislation provides for a need for Korean politicians to disclose their investments and wealth. However, that provision has not caught up with the digital asset era. Virtual assets had been an exception which lawmakers are now rushing to remedy.Once news of Kim’s crypto holding emerged, it led to suspicion and accusations of insider trading. The politician had made a number of crypto trades during the time in which he was actively working on digital asset legislation. As the controversy gathered more attention, it led to the offices of two of the country’s leading crypto exchanges, Bithumb and Upbit, being raided. Records related to Kim’s crypto trading activity were seized.Bringing forward enforcement dateThe bill that will remedy circumstances like the one that has arisen as a result of Kim’s crypto trading activity is being put forward by Yun Jae-ok, the floor leader of the ruling party. It had originally been scheduled to be implemented in December, but Yun is looking to have the bill amended so that the enforcement date of the proposed legislation takes place in two months.“Given the current high level of public interest, especially regarding lawmakers, it’s not appropriate to enforce the law six months later after the promulgation,” Yun told Yonhap news agency. It’s understood that Yun has asked the leader of the Public Administration Committee to put forward the modified version of the law.The legislative process in South Korea requires initial drafting of the bill, followed by the proposed legislation being scrutinized by a number of relevant committees, inclusive of the Legislation and Judiciary Committee. An assembly debate follows, and beyond that, it’s expected that there will be a vote on the legislation, which has been scheduled for Friday.Should the bill be carried following the vote, the approved bill then proceeds to the President. So long as it is not vetoed, it is presented to the public and becomes law.On an international basis, financial interest disclosure requirements are common. Taking the US and the UK as examples, both jurisdictions require their politicians to disclose financial holdings. However, it would appear that South Korea is about to enact an advanced form of such legislation comparatively, as currently in both the US and UK, there is no specific provision requiring politicians to disclose crypto holdings.