Aurora Mobile & VMS Group to invest in crypto

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

Ground X Teams Up with Oasys for Digital Wallet and SDK CollaborationGround X, the blockchain subsidiary of South Korean conglomerate Kakao, announced on Wednesday that it has entered a strategic partnership with Oasys, a Japanese blockchain gaming platform.Through this partnership, Ground X and Oasys aim to collaborate on multiple fronts and onboard each other’s respective Web3 ecosystems. Ground X said that it will participate as a partner company in Oasys’ Web3 ecosystem, collaborating with other Japanese blockchain and gaming firms.Photo by GuerrillaBuzz on UnsplashSDK sharingIn particular, Ground X also plans to provide a software development kit (SDK) that will enable game developers around the world to embed digital asset wallets into their services by leveraging the convenience and technical capabilities of Kakao’s digital wallet, Klip.“By providing the embedded SDK through this partnership, this will serve as an opportunity for Ground X to expand globally by attracting more Klip users,” said Kim Tae-geun, Head of the Business Group Division at Ground X.Dominic Jang, Head of Business Development at Oasys, expressed similar sentiments, stating, “This Klip wallet SDK will allow Oasys’ partners in the gaming industry to operate more smoothly, serving as valuable infrastructure.”NFT allianceOasys will also become a member of GRID — Ground X’s alliance of over 130 local companies aimed at popularizing and fostering non-fungible token (NFT) usage in Korea. Ground X will subsequently share with Oasys the expertise it has gained through success stories of various NFTs on Klip. Through a combination of all these efforts, the company’s goal is to expand the local NFT business ecosystem and increase opportunities for networking and joint marketing between Korean and Japanese companies.“Ground X is at the forefront of Kakao’s blockchain business and has accumulated a wealth of expertise in the blockchain field. Through our collaboration with them, the Oasys ecosystem gains a strong partner,” Jang emphasized.In addition, Ground X is participating as a partner company and panel judge in a blockchain hackathon organized by Oasys and XPLA.

Rotonda and Hancom Frontis Join Forces for Web3 Ecosystem GrowthRotonda, the subsidiary of Korean cryptocurrency exchange Bithumb and the operator of cryptocurrency wallet platform Burrito Wallet, has recently announced a memorandum of understanding (MOU) with Hancom Frontis. This strategic partnership is geared towards accelerating the growth of the Web3 ecosystem.Photo by Shubham’s Web3 on Unsplash3D metaverse platformIn April, Hancom Frontis officially launched a 3D metaverse platform known as a:rz META. This platform offers a wide array of services, including virtual meetings, online education, and telemedicine, all facilitated by the integration of blockchain-powered digital assets.With the introduction of a:rz META, Hancom Frontis has shifted its focus to Web3-based businesses. The company aims to expand its user base globally through a series of gradual updates.Fostering mutual growthThrough this partnership, both entities are set to embark on several collaborative initiatives aimed at fostering mutual growth. These efforts include sharing resources like personnel, materials, and information, as well as strengthening their business networks. They will jointly engage in research and development of blockchain-based services and work towards enhancing policies for these offerings.Shin Min-cheol, CEO of Burrito Wallet, expressed excitement about their collaboration, stating that their joint efforts would lead to the creation of an advanced blockchain environment that boasts enhanced technology and services. He also highlighted that Burrito Wallet’s ongoing partnerships with businesses across different sectors would solidify the company’s position in the market as a distinguished wallet provider that offers practical services.Recently, Burrito Wallet has taken a significant step towards its global expansion by signing a partnership with Japanese blockchain gaming platform Oasys. Meanwhile, the Korean wallet firm has also expanded its support to 11 mainnets, consistently implementing updates to enhance user-friendliness of the platform.