KT and Iron Mountain Forge Alliance to Propel Blockchain-Powered E-Document Ecosystem

Singapore’s UniPass Plays Role in ERC-4337 Vulnerability FixSmart contract wallet provider UniPass and crypto infrastructure firm Fireblocks have successfully addressed a significant vulnerability in the Ethereum ecosystem.Photo by Nenad Novaković on UnsplashAccount abstraction vulnerabilityThis vulnerability, identified as the ERC-4337 account abstraction vulnerability, posed a critical security risk to hundreds of mainnet wallets. The joint effort between Fireblocks and UniPass was detailed in a blog post published to the Fireblocks website on Thursday.This vulnerability, if exploited, could have enabled a malicious actor to execute a complete takeover of the UniPass Wallet by manipulating Ethereum’s account abstraction process. The vulnerability represented a substantial threat to the security of smart contract wallets, as it could lead to unauthorized access and fund drainage.Improving user experienceAccount abstraction, as dealt with via ERC-4337, is a mechanism that introduces a novel way of processing transactions and interacting with smart contracts on the Ethereum blockchain. It allows for a more flexible and efficient handling of transactions, transcending the traditional distinction between externally owned accounts (EOAs) and contract accounts.EOAs are controlled by private keys and can initiate transactions, while contract accounts are governed by the code of a smart contract. When an EOA initiates a transaction with a contract account, it triggers the execution of the contract’s code. Account abstraction introduces the notion of abstracted accounts, which are not tied to a specific private key and can initiate transactions and interact with smart contracts, similar to EOAs.In the context of ERC-4337, an account executing an action relies on the EntryPoint contract to ensure that only signed transactions are executed. Typically, these accounts trust a single audited EntryPoint contract to validate user operations before executing commands. However, the vulnerability resided in the fact that a malicious or buggy EntryPoint contract could potentially skip the validation step and directly call the execution function, bypassing essential security measures.This vulnerability, identified by the two firms, had allowed attackers to seize control of UniPass wallets by replacing the trusted EntryPoint of the wallet. Once this takeover was completed, the attacker could access the wallet and drain its funds.It’s worth noting that the vulnerability posed a threat to several hundred users who had activated the ERC-4337 module in their wallets, making them susceptible to exploitation by any actor on the blockchain. Fortunately, the wallets affected by this vulnerability contained only small amounts of funds, and swift mitigation efforts were successful in preventing further harm.Company mergerEarlier this year, Singapore’s UniPass merged with Chinese wallet provider Keystone to form Account Labs, a company which has been incorporated in Singapore. At the time, Keystone founder Liu Lixin outlined that further developing account abstraction-derived products was the objective of the creation of Account Labs. He stated:“We are on the cusp of a Web3 Account Abstraction revolution. Together, we’ll drive rapid transformation, making the transition from Web2 to Web3 effortless for users. Our goal is to ensure everyone can securely and smoothly manage a decentralized account. We welcome partners to join us in advancing the Web3 account domain.”In furthering that objective, Account Labs announced on Thursday that it had raised $7.7 million in a funding round led by Amber Group, MixMarvel DAO Ventures, and Qiming Ventures.

South Korea’s second-largest cryptocurrency exchange Bithumb held a ceremony on Monday at the Bithumb Customer Center in Seoul to celebrate the commencement of the exchange’s supporter group, Thumbs Up, according to an article published by local news site Digital Daily on Tuesday (KST). The group consists of 20 university students interested in crypto and crypto exchanges who were recruited after a two-week application period starting on Dec. 13.Photo by charlesdeluvio on UnsplashPushing towards advancements in crypto"The open-mindedness and unconventional outlook of Bithumb's college student supporters will have a positive impact on Bithumb and the blockchain industry," said Kim Young-jin, Head of Business Support at Bithumb. "We look forward to the Thumbs Up supporters and Bithumb working together to create great projects." Cultivating young innovative mindsThe supporters will have a total of three months until the deadline on April 29 to propose ideas for improving Bithumb and create social media content related to the exchange's services and companies. Bithumb stated that it would award prizes of KRW 5 million and KRW 2 million to one team and five individuals, respectively, based on their dedication and performance. The winners will also get the opportunity to become interns or official Bithumb ambassadors.

Korea’s Chungcheongbuk-do to Foster Regional Blockchain EcosystemChungcheongbuk-do, a South Korean province located 117km south of Seoul, has entered into a partnership with the Korea Internet and Security Agency (KISA) to launch a regional blockchain initiative. The province won the bid for this initiative, proposed by the Ministry of Science and ICT, with the goal of fostering a thriving blockchain ecosystem within the region. Spearheading this project will be the Chungbuk Innovation Institute of Science and Technology (CBIST).Photo by Suzi Kim on UnsplashComprehensive supportWith a budget of 1.4 billion KRW ($1.07 million), CBIST will spearhead the initiative by providing support to startups and creating a business-friendly environment. The province of Chungcheongbuk-do will offer consulting services to assist startups in exploring innovative blockchain solutions. They will also provide comprehensive support, including accommodations, infrastructure, equipment, and access to cloud computing platforms.Blockchain into other industriesFurthermore, Chungcheongbuk-do will extend funding opportunities and implement educational programs to nurture skilled individuals and develop a self-sustaining blockchain sector within the province. The goal is to catalyze the emergence of innovative business models that incorporate blockchain technology into various industries such as storage batteries, semiconductors, and parts and materials. This initiative is expected to boost the region’s economy and enhance its competitive advantage.Since the establishment of the Chungbuk Blockchain Promotion Center at CBIST in 2018, the provincial government has been actively involved in discovering and planning various blockchain projects and raising awareness. With the current blockchain initiative, Chungcheongbuk-do aims to build a comprehensive support system that will facilitate the growth of the regional blockchain sector.Kim Jin-hyung, Chief of the Science and Talent Bureau of the Chungcheongbuk-do government, expressed that this blockchain initiative aligns with the strategic vision of the elected local government to establish a high-tech region. The provincial government is dedicated to identifying software-focused projects that can strengthen startup ecosystems and empower young entrepreneurs.