Iran acts to regulate crypto to counter sanctions

Hyperithm, a digital asset management firm based in Tokyo and Seoul, has invested in JPYC Inc., the issuer of JPY Coin (JPYC), the first stablecoin pegged 1:1 to the Japanese yen. First launched in January 2021, JPYC is a legal Prepaid Payment Instrument in Japan that is issued on various blockchains, including Ethereum and Polygon. The total figure for the investment was not disclosed by either party.Photo by Precondo CA on UnsplashInsights from industry leaders"We believe that stablecoins linked to fiat currencies are essential to expanding the cryptocurrency ecosystem. Japan became one of the first countries to officially issue stablecoins after the revision of the Payment Services Act in June," said Lloyd Lee, CEO of Hyperithm. "We expect that the widespread adoption of JPYC will increase the inflow of Japanese capital into the cryptocurrency ecosystem." Noritaka Okabe, CEO of JPYC Inc., explained that the firm aims to create more connections between crypto and everyday life, forging an environment where everyone can participate in innovation and capital liquidity. JPYC Inc.'s strategic evolutionAlthough it is currently issued as a third-party Prepaid Payment Instrument, JPYC Inc. plans to acquire a license to conduct transactions including money transfers and electronic payments in accordance with the revision of the Payment Services Act, which took effect in June 2023. This will serve to strengthen the stablecoin’s trust structure and remove limits on remittances. After acquiring the license, Mitsubishi UFJ Financial Group, a bank holding and financial services company based in Tokyo, will be responsible for JPYC's fiat currency reserves. Pioneering crypto financeFounded in January 2018, Hyperithm provides crypto corporate finance services to institutional and upper-class investors. It is one of South Korea’s 29 companies that are licensed by the Financial Intelligence Unit (FIU) to operate as a Virtual Asset Service Provider (VASP). Notably, it raised $11 million in a series B funding round in 2021, which was led by former clients Hashed and Wemade Tree. The company’s CEO, Lee, was also listed on Forbes’ 30 Under 30 Asia under the Finance and Venture Capital category. 

Hong Kong and Israel Collaborate to Expand CBDC Access Beyond BanksIn a collaborative effort, the Hong Kong Monetary Authority (HKMA), the Bank of Israel (BoI), and the Bank of International Settlements (BIS) Innovation Hub have jointly released a comprehensive report on Project Sela, a central bank digital currency (CBDC) initiative.Photo by POURIA 🦋 on UnsplashBroadening the role of intermediariesThe report was published to the BIS website on Tuesday. In keeping with the trend of many CBDC projects, Project Sela is characterized by a robust public-private partnership. However, its particular focus lies in broadening the spectrum of intermediaries, aiming to offer retail CBDC services through a more diverse array of service providers, thereby reducing dependency on traditional banks and major payment providers.Andrew Abir, Deputy Governor of the Bank of Israel, emphasized the importance of fostering a dynamic and open ecosystem with a wide variety of service providers. He stated:“Competition and innovation require a flourishing and open ecosystem with many different types of service providers. This was our initial goal in Project Sela as a proof-of-concept, and the project proved the feasibility of the model we had in mind.”Involving retail banksIn a previous model explored through Hong Kong’s Project Aurum, retail banks were entrusted with customer-facing tasks while maintaining the central bank’s operation of the wholesale ledger for the eHKD. In contrast, Project Sela introduces a novel approach where the central bank operates the retail ledger — a model akin to Israel’s digital shekel.The primary actors in Project Sela, known as Access Enablers (AEs), notably do not have control over CBDC balances, distinguishing them from conventional payment providers. Moreover, AEs are not required to maintain liquidity to support CBDC services. Their role encompasses facilitating user onboarding and CBDC access, fulfilling know-your-customer (KYC) and compliance obligations, and routing payments. The role of banks and other “funding institutions” primarily revolves around enabling the conversion of cash and deposits into CBDC.The rationale behind this approach is rooted in the emergence of technological advancements in open banking and DeFi, which have demonstrated the potential to disentangle financial services by granting users greater access to their financial data and control over their own funds.Enabling participation among the unbankedProject Sela envisions the unbanked population utilizing ATMs to convert cash into CBDC. A similar approach has recently been taken by the Chinese authorities. In the resort city of Sanya, authorities have introduced e-CNY ATMs in order to enable e-CNY access for foreign tourists.However, it is noteworthy that in many countries, the primary function of ATMs is to dispense cash rather than accept it. Consequently, the inclusion of AEs could pose challenges to traditional banking institutions, as CBDC adoption could potentially impact bank deposits.Privacy and cybersecurity considerations are implicated within Project Sela. As the central bank operates the retail ledger, ensuring the confidentiality of personal information becomes imperative. To safeguard privacy, AEs employ a hashing mechanism to obfuscate personal identifiers, although the report does not delve into the subject in detail.While Bank of Israel Governor Amir Yaron admitted that a CBDC can never be anonymous, he claimed that “if we choose to issue a digital cash shekel, it will provide at least as much privacy as other digital means of payment.”

OKX shores up App security following bug discoveryCryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.User data and asset vulnerabilityThe flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.Taking to the X social media platform on Tuesday, CertiK wrote:”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”Photo by FLY:D on UnsplashPrompt responseRecognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”Ongoing exploitsThis security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.Industry collaborationThe collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.