Further Setback for Luno With Loss of Top Exec

OKX shores up App security following bug discoveryCryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.User data and asset vulnerabilityThe flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.Taking to the X social media platform on Tuesday, CertiK wrote:”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”Photo by FLY:D on UnsplashPrompt responseRecognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”Ongoing exploitsThis security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.Industry collaborationThe collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

OSL Group, a publicly-listed digital asset and blockchain platform company headquartered in Hong Kong, is set to acquire Indonesia’s Evergreen Crest Holdings.Photo by Kelly Sikkema on UnsplashAs the proposed acquisition of Evergreen Crest, a business that includes a virtual assets exchange platform, will involve a share transaction, OSL filed details of the acquisition with the Hong Kong Stock Exchange on June 2. OSL will take a 90% stake in Evergreen Crest in return for $15 million worth of consideration shares, which will be issued by OSL to the seller. This share issuance will account for 1.48% of the total issued shares in the company. Once the acquisition goes through, Evergreen Crest will become a subsidiary of OSL Group, with Evergreen’s financial results consolidated into the overall financial statements of OSL going forward.  ‘Strategic benefits’The filing suggests that OSL management believe that the acquisition “will bring substantial strategic benefits to the Group,” as it opens up access for the company to the Indonesian digital asset market. The company is optimistic about the outlook for the Indonesian crypto market. It stated: “Indonesia possesses key attributes conducive to growth in this sector, including a substantial and youthful demographic, robust economic growth fundamentals, and a rapidly increasing rate of cryptocurrency adoption.” Acquiring licensesOne interesting aspect of the acquisition is that Evergreen Crest has acquired the requisite licensing to operate within the Indonesian market. Those cryptocurrency and futures trading licenses are likely to be of significant value to OSL as it means that through the acquisition, OSL can now enter the Indonesian market in a fully compliant manner. Using the existing compliant platform, OSL intends to expand the range of services offered within the Indonesian market. It indicated that it would do so in respect of payment finance (PayFi) and tokenized real-world asset (RWA)-related products and services, subject to acquiring the necessary licensing. OSL is encouraged by the opportunity that exists within Indonesia as far as tokenized RWAs are concerned. It claimed that the country has already demonstrated significant tokenized RWA-related activity. PT Multikripto Exchange Indonesia (also known as Koinsayang), the exchange business owned by Evergreen Crest, was awarded a virtual asset trading license by the Indonesian regulator, the Financial Services Authority (OJK), in March. At the time, the exchange outlined that it intended to expand its service reach, while creating a better trading experience for users located within Indonesia and overseas. In September 2024, the exchange was awarded a license to offer crypto asset perpetual futures contracts by Indonesia’s Commodity Futures Trading Supervisory Agency (Bappebti).  OSL expanding its reachOSL appears to be making a concerted effort to expand beyond its Hong Kong base. In February it acquired CoinBest, a Japanese crypto exchange, rebranding the business as OSL Japan. At the time it was reported that the company was also looking at opportunities to expand in European markets. OSL was amongst the first digital asset exchange platforms to be licensed in Hong Kong, receiving Type 1 and Type 7 licenses from the Securities and Futures Commission (SFC) in December 2020.

Hong Kong is gearing up for the potential approval and implementation of both bitcoin exchange-traded funds (ETFs) and stablecoin regulations in 2024, with further progress achieved through the first filing of a spot bitcoin ETF in the Chinese autonomous territory.Photo by André François McKenzie on UnsplashHarvest Fund filesHarvest Fund (HFM), a major asset manager based in China, has taken the lead by filing for a spot bitcoin ETF with the Hong Kong Securities and Futures Commission (SFA), as reported by Tencent News. While details on the Harvest Fund bitcoin ETF remain limited, the company is hoping for its debut on or after the Lunar New Year holiday, which lands on Feb. 10. Reports suggest that Hong Kong's regulatory body may follow a path similar to the U.S. SEC, approving multiple spot bitcoin ETF applications to ensure fair market access. Although Harvest Fund was the first to apply, other regional financial institutions have expressed interest in launching similar products within the year. Livio Weng, Chief Operating Officer of crypto exchange HashKey, revealed that approximately ten asset management firms are developing spot crypto ETFs for Hong Kong, with applications already submitted to the Hong Kong Securities Regulatory Commission. Earlier this month, Venture Smart Financial Holdings (VSFG) announced its plan to launch a spot bitcoin ETF within the first quarter of this year, contributing to the growing momentum. Stablecoin interestIn tandem with the push for spot crypto ETFs, there is a rising interest in stablecoins. Multiple Hong Kong companies, including Harvest Global Investments, RD Technologies and VSFG, are reportedly engaging in discussions with the Hong Kong Monetary Authority (HKMA) about potential stablecoin trials. These trials aim to explore use cases ahead of anticipated stablecoin regulations in Hong Kong. The HKMA's December consultation paper outlined licensing requirements for fiat-pegged stablecoins, positioning them as a bridge between traditional finance and crypto markets. Sean Lee, senior advisor and head of stablecoin at VSFG, told The Block that it is committed to applying for sandbox inclusion, along with consortium partners, to showcase the potential of programmable digital money while meeting prudential requirements. An HKMA spokesperson confirmed ongoing preparations for the imminent launch of the stablecoin sandbox arrangement. The key criterion for applicants is a demonstrated commitment to a reasonable plan for issuing fiat-reference stablecoins (FRS) in Hong Kong. FRS refers to fiat-reference stablecoins pegged to the value of a fiat currency and backed by a government-issued currency, aligning with the most common stablecoin model. Eddie Yue, CEO of the HKMA, highlighted the potential of stablecoins, stating they could serve as the interface between traditional finance and the virtual asset market. The parallel development of spot crypto ETFs and stablecoin regulations underscores Hong Kong's commitment to fostering digital assets while ensuring investor protection through effective market oversight. Crypto ETFs offer expanded access, while stablecoin trials enable controlled experimentation, establishing gateways between traditional finance and the emerging crypto sectors.