Top

Binance survey reveals evolving security habits of Asian platform users

Markets·May 09, 2025, 6:21 AM

Global crypto exchange Binance has carried out a survey which reveals that the security habits of Asian platform users are evolving positively.

https://asset.coinness.com/en/news/260ca4e27d6072376b88fad1d462b0ec.webp
Photo by Vadim Artyukhin on Unsplash

Users responding to more sophisticated scams

In a blog post published by the crypto exchange platform on May 6, Binance revealed that it had carried out a survey of nearly 30,000 platform users across Asia. The company’s takeaway following analysis of the survey data is that “scams are evolving — and so are crypto users.”

 

The firm suggested that users are “stepping up their security game,” with exchanges facing growing demand from their users for real-time protection and smarter security tools.

 

Increasing use of 2FA

The exchange platform found that 80.5% of survey respondents now use Binance two-factor authentication (2FA). While the use of 2FA is definitely a move in the right direction, it doesn’t guarantee the safety of a user’s digital assets. 

 

In an article published by Forbes last month Forbes Contributor Davey Winder warned that infostealer malware can compromise 2FA codes in as little as 10 seconds. In June of last year, an OKX user lost $2 million in crypto to a hacker who utilized AI despite the victim having used Google’s 2FA.

 

Double-checking transfers

The survey found that 73.3% of users double-check transfers before sending digital assets. Due to the nature of decentralized cryptocurrency, crypto transactions are not easily reversed and are usually irreversible. That puts a greater responsibility on crypto users to ensure that they are sending funds to the appropriate wallet address.

 

Double-checking transfer addresses is not only necessary due to human error. Malware is also used by hackers to spoof such addresses, tricking the sender into sending the digital assets to their address rather than the one that was originally intended.

 

It emerged in May 2024 that a Bitcoin trader had lost more than $70 million in Bitcoin in an “address poisoning” scam. Binance itself had warned users last September that “clipper malware,” which intercepts clipboard data on a user’s phone or desktop, replacing copied wallet addresses with alternative addresses under the hacker’s control, is increasingly being employed in hacking attempts.

 

While the survey has revealed a positive evolution in the security habits of Asian platform users, there’s still room for further improvement. Just 17.6% of survey respondents utilize address whitelisting, a measure that restricts account user access to a safe list of pre-defined trusted addresses.

 

Only 21.5% of survey respondents use anti-phishing codes as a security mechanism. The objective of phishing is to steal data, install malware on a user’s device or otherwise gain account access. An anti-phishing code aids the user in verifying the authenticity of emails and texts from a specific service.

 

Security remains a major issue within crypto. Last month, hackers employed social engineering tactics to steal $330 million in Bitcoin from an elderly American victim.

Exchange platforms themselves continue to struggle to safeguard user funds. Earlier this year, Binance competitor, Dubai-headquartered Bybit, suffered a $1.5 billion hack believed to have been perpetrated by North Korea’s Lazarus Group. Lazarus is also thought to have been behind a $235 million crypto theft at Indian crypto exchange WazirX in July 2024.

More to Read
View All
Policy & Regulation·

Dec 11, 2023

South Korean FSC updates definition of virtual assets and VASP regulations for Virtual Asset User…

South Korean FSC updates definition of virtual assets and VASP regulations for Virtual Asset User Protection ActThe South Korean Financial Services Commission (FSC) on Monday (local time) published a new enforcement decree and supervisory regulations for the Virtual Asset User Protection Act, under which non-fungible tokens (NFTs) and deposit tokens are excluded from the definition of virtual assets. The act serves to protect customer assets, prevent unfair trading practices, and enforce penalties.“The enforcement decree and supervisory regulations provide detailed standards and methods to safeguard users’ assets and establish stability in the market,” the FSC said.Photo by Tingey Injury Law Firm on UnsplashDefining virtual assetsThe agency explained that it decided to exclude NFTs because they are mainly bought and sold for collection purposes, posing low risks to holders and the financial system. However, NFTs that can be used as a means of payment for purchasing certain goods and services are considered virtual assets. On the other hand, deposit tokens — which will be managed by the Bank of Korea’s central bank digital currency network — are regarded as a legitimate form of monetary deposit and are subject to relevant regulations instead of the User Protection Act. Other “electronic certificates of economic value,” such as mobile vouchers and electronic bonds, are also excluded from the definition of virtual assets.Enhancing security and transparencyFollowing the clarified definition of virtual assets, the updated regulations underline conduct measures that virtual asset service providers (VASPs) must comply with. For example, VASPs must calculate the total value of their customers’ crypto assets every month and store at least 80% in a cold wallet to prevent infringements like hacks — a boost from the current 70 percent. Cold wallets are deemed more secure than hot wallets because they keep crypto keys offline instead of staying connected to the internet.VASPs are also not allowed to arbitrarily block deposits and withdrawals of user assets without prior notice and a justifiable reason like internal system failure or hacks as well as requests from courts, investigative bodies, the National Tax Service and financial authorities. User deposits must be stored in banks, which can invest them only in safe assets such as government bonds.The act is set to take effect on July 19 next year after a legislative review scheduled for next month.

news
Web3 & Enterprise·

Sep 28, 2023

Gemini to Invest $24M as Part of India Expansion Plans

Gemini to Invest $24M as Part of India Expansion PlansUS-headquartered crypto exchange platform Gemini is exploring further operational expansion abroad, turning its attention specifically right now to India.The company first forayed into the world’s most populous country back in April with the announcement of the imminent launch of an engineering center.Having tested the waters in the South Asian country, the crypto exchange has decided to broaden its presence in the nation, according to a blog post published to the firm’s website on Tuesday. With a capital influx of Rs. 200 crore ($24 million), the exchange will be growing its development center in Gurgaon, a city that serves as an integral part of India’s National Capital Region (NCR).Photo by Naveed Ahmed on Unsplash70-member Gurgaon teamGemini has already onboarded over 70 staff members to its Gurgaon team. The company is actively hiring for more roles to fill its internal verticals, including tech development, finance, and compliance. In the next two years, the exchange plans to invest up to Rs. 200 crore ($24 million) in its Gurgaon facility, demonstrating a significant commitment where the Indian market is concerned.In an official statement, the company stated:“India has long been regarded as a hub for bar-raising talent by the world’s top technology companies, and we are thrilled to share that we are deepening our investment in the country. We are delighted to build on that announcement and reveal that we have opened our office within the Cyber Hub at Campus Cyber Greens.”The business is looking to tap into India’s rich pool of engineering talent to bolster its ecosystem with fresh Web3 solutions, inclusive of resource allocation towards optimized platform security.Singapore expansionPravjit Tiwana had previously been welcomed on board as the CEO of Gemini’s Asia-Pacific (APAC) operations earlier this year. He was previously the global chief technology officer (CTO) at the crypto exchange. Alongside this expansion, the company’s previous announcement in June to expand operations in Singapore is a task that also falls within Tiwana’s remit. At the time, the firm expressed the view that the APAC market will be crucial in securing the next phase of growth for the enterprise.Gemini signaled back in June that it intended to expand its reach in the Middle East also by pursuing a trading license in the United Arab Emirates.“India is undoubtedly a leading global hub for entrepreneurship and technological development. We are thrilled to build Gemini’s presence in India as we continue on our mission to unlock the next era of financial, creative, and personal freedom with crypto and Web3 innovation,” Gemini’s blog added, praising the ‘Startup India’ initiative.Growing interest in Indian marketPreviously, other crypto platforms like Coinbase and Algorand have also shown interest in onboarding software talent from India onto their teams. Amid the backdrop of India coming closer to possibly getting a concrete set of crypto rules around December this year, other crypto firms have also stepped into the market.In June, Gibraltar-based crypto-friendly bank Xapo announced its entrance into the Indian market. The OKX crypto exchange based in Seychelles is also scheduling a full-fledged expansion into the country.

news
Web3 & Enterprise·

Feb 26, 2024

Com2uS Holdings’ XPLA partners with SOOHO.IO for easier DeFi access

Korean mobile game company Com2uS Holdings’ blockchain mainnet XPLA has announced today that it entered a partnership with SOOHO.IO, a Seoul-based security services provider for smart contracts. This news was reported by the local online media iNews24. The partnership aims to enhance blockchain security and facilitate public access to decentralized finance (DeFi). Photo by GuerrillaBuzz on UnsplashXPLA’s further push into the Japanese marketEstablished by local security experts in 2018, SOOHO.IO is currently providing smart contract technologies to approximately 200 big companies and validation institutions. Furthermore, SOOHO.IO is a developer and operator of Tealswap, the sole decentralized exchange on the Oasy network that specializes in blockchain games.  An insider from XPLA expressed excitement about this partnership, stating that the collaboration with SOOHO.IO will enable the game company to strengthen its position in the Japanese Web3 gaming market.  Smart contract-powered securityXPLA, already closely partnered with Oasys, promises to provide financial solutions equipped with safe and convenient smart contract security to Web2 users by strengthening collaboration with SOOHO.IO.  Paul Kim, the head of XPLA team, said this partnership will revolutionize the Web3 games and entertainment industry, with the company’s plans to introduce easy-to-access DeFi services and “GameFi,” a concept that combines game and finance.  Park Ji-su, CEO of SOOHO.IO., expressed his excitement about partnering with the global mainnet XPLA, which he thinks will bring substantial synergy effects for both companies through the sharing of key technologies. 

news
Loading