Upbit Operator Dunamu Assists Indebted Youths in Rebuilding Credit Scores

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Seoul Labs to build layer 2 blockchain mainnet using SASEULSouth Korean blockchain solutions provider Seoul Labs announced Thursday (local time) that it will build a layer 2 mainnet utilizing the third-generation blockchain engine SASEUL. This comes in an effort to strengthen the scalability of the SASEUL network and improve capabilities for large-scale traffic processing. Layer 2 refers to a set of off-chain solutions built on top of a layer 1 network to reduce bottlenecks with scaling and data.Photo by Shubham Dhage on UnsplashScalability and stabilitySeoul Labs plans to actively utilize the mainnet’s core functions, such as its HAP-2 hypothesis acceptance verification algorithm and dual chain mechanism as well as its ability to solve storage space problems. In particular, the HAP-2 hypothesis acceptance verification algorithm is a more efficient method for generating blocks than the proof of Work (PoW) algorithm that is widely used in blockchain mainnets, significantly improving scalability.According to the company, the layer 2 mainnet will implement an approach to becoming a node on the network without a graphics processing unit (GPU).“By building the layer 2 mainnet, we will be able to build the SASEUL blockchain network into a stable and scalable platform,” said Dohee Jang, CEO of Seoul Labs.Multifaceted solutionThe project is also poised to become a solution to the excessive computing resources and electrical energy required to run blockchain networks that lead to environmental repercussions. In addition, the company is facilitating research and development for the implementation of central bank digital currencies (CBDCs) into the global economy. Notably, the South Korean government is also planning to launch a CBDC pilot project by 2024.“Recently, central banks around the world have been promoting the integration of CBDCs, but they are facing various problems in terms of scalability and speed,” said an unnamed employee at ArtiFriends, the company behind the SASEUL mainnet. “Layer 2 mainnet is a stable and scalable platform suitable for CBDCs.”

Wemade to unveil upgraded DAO platform Wepublic in FebruarySouth Korean gaming publisher Wemade’s blockchain-powered social platform Wepublic is scheduled to undergo a revamp this coming February, according to an official press release on Wemade’s website on Monday (KST).Photo by Christin Hume on UnsplashDecentralized empowermentWepublic is a platform that employs decentralized protocols to allow a wide variety of official organizations — from political and religious factions to non-profit organizations — to build and operate decentralized autonomous organizations (DAOs) based on the transparent sharing of the status of their funds.Through its integration of blockchain technology, Wepublic guarantees the transparency and integrity of all information and records stored on its platform, safeguarding them against counterfeiting and diversion. The platform notably emphasizes the ability of all participants in a DAO to partake in organizational activities and democratic decision-making.Major overhaulThe upcoming second version, Wepublic 2.0, will extend access to individuals and non-official groups. In particular, a new feature called Wepublic Point will be added, which will enable donations and further solidify the platform’s decentralized protocols. The platform will also offer connectivity with social media platforms, boosting accessibility.Wemade stated that it is currently recruiting the first cohort for Wepublic’s support group, Wepublic Supporters, which will be responsible for planning and executing promotional projects on the platform for 12 weeks starting from Jan. 25. College and postgraduate students are eligible to apply until Jan. 13. Those who stand out with their performance will get the opportunity to apply for an internship at Wemade.