JPEX Exchange Scandal Sees Crypto Regulation Under Scrutiny in Hong Kong

Socket, a cross-chain infrastructure protocol, and its interoperability bridging platform, Bungee, have restarted operations following a temporary pause prompted by an exploit that led to the apparent theft of $3.3 million.Photo by Anna Tarazevich on PexelsSecurity incidentTaking to the company’s Discord, Socket team hospitality lead Taylor Melvin clarified that it had “experienced a security incident which affected wallets with infinite approvals to Socket contracts.” The incident, which occurred on Tuesday, involved an unknown attacker draining millions worth of stablecoins and other tokens from the Bungee bridging aggregator. The attackers targeted wallets with infinite approvals to Socket contracts, exploiting authorizations for blockchain-based tools that allow applications to access tokens in a user's wallet. Security researcher "@speekaway" was the first to flag the exploit on Tuesday. The attacker's wallet, connected to the exploit, held nearly $3 million in ether (ETH) and $300,000 worth of other tokens. By 2:47 p.m. ET, the attack seemed to have ceased, with the researcher recommending users to revoke approvals for Socket to safeguard their assets. Pausing contractsIn response to the security breach, Socket announced the pause of affected contracts on Tuesday at 3:15 p.m. ET. The project's team promptly identified and addressed the issue, taking swift action to mitigate the exploit's impact. @speekaway chimed back in once contracts had been paused, writing:”Think this pause fixed it, very likely no more attacks are possible. So if you are currently freaking out about revoking you can probably relax.” Normal service returnsAs Socket paused activity during the incident, preventing further propagation of the attack, developers worked to fix the issue. Early Wednesday, Socket developers announced that the problem had been resolved, and normal activities had resumed. The team also stated that plans for compensation were in progress. Cross-chain bridges, like Socket's Bungee, facilitate token transfers between different blockchains but remain susceptible to exploitation. Blockchain security and data analytics company PeckShield confirmed that at least $3.3 million had been lost, highlighting the need for enhanced security measures in the rapidly evolving blockchain ecosystem. The exploit involved the exploitation of a recently added route, which has since been disabled. The attacker targeted users who had over-approved Socket, draining funds up to the limit of their approval. This incident follows the $81 million hack of Orbit Chain, a cross-chain bridge connecting Ethereum to other networks, earlier in January. Cross-chain tools' complexity contributes to the frequency of such attacks, emphasizing the importance of understanding the security measures in place when utilizing these bridges. In a message to CoinDesk, Sergey Nazarov, co-founder of Chainlink, emphasized the need for users to scrutinize the security of their chosen bridge, considering the various levels of cross-chain security. With the complexities involved, users are encouraged to be vigilant and informed about the security spectrum of the bridges they employ. Socket was founded by Indian duo Rishabh Khurana and Vaibhav Chellani. In September, the company raised $5 million, with funding coming from Framework Ventures and Coinbase Ventures. 

The CEO of Japanese hotel operator turned Bitcoin treasury company, Metaplanet, has suggested that the firm may consider acquiring a digital bank in the future. Simon Gerovich, the firm’s CEO and a former Goldman Sachs banker, told the Financial Times that part of the second stage of its overall strategy may involve “acquiring a digital bank in Japan and providing digital banking services that are superior to the services which retail now is getting.”Photo by Kanchanara on UnsplashBitcoin gold rushGerovich explained that phase one of Metaplanet’s plan involves participating in what he considers to be “a bitcoin gold rush.” He added: “We need to accumulate as much bitcoin as we can . . . to get to a point where we’ve reached escape velocity and it just makes it very difficult for others to catch up.” Other firms are jumping on the bandwagon, as within a very short timeframe, 140 companies around the world have adopted a Bitcoin treasury strategy. Metaplanet currently weighs in as the fifth-largest corporate holder of Bitcoin globally. Right now, the company holds 15,555 BTC. Its target is a holding of 210,000 BTC, which equates to around 1% of the total Bitcoin supply. Based on current pricing, such a holding would be worth in the region of $23 billion. Acquiring cash-generating businessesOnce the company has accomplished its Bitcoin accumulation goals, it plans to move on to phase two, acquiring cash-generating businesses while leveraging its Bitcoin holdings in order to do so. Using Bitcoin as collateral, Gerovich said that Metaplanet will “get cash that we can use to buy profitable businesses.”  While inroads are being made with regard to the acceptance of Bitcoin as a corporate reserve asset, it is earlier days still for its acceptance as collateral. Last month, the Federal Housing Finance Agency (FHFA) in the United States, ordered Fannie Mae and Freddie Mac, key government-sponsored players in the American mortgage market, to explore the treatment of Bitcoin as eligible collateral for mortgages. Standard Chartered and crypto exchange OKX launched a pilot program earlier this year geared towards the use of crypto for collateral purposes. Gerovich talks in terms of Metaplanet’s phase two plan playing out at a time “when bitcoin, like securities or government bonds, can be deposited with banks and then they’ll provide very attractive financing against that asset.” The Metaplanet CEO stated that he expects the Bitcoin accumulation phase of the plan to play out over a period of between four and six years. The Tokyo-listed firm started accumulating Bitcoin in 2024. Some market participants are backing Metaplanet’s strategy with their own money. Global investment management firm Capital Group recently became Metaplanet’s second-largest investor. Bitcoin treasury criticsHowever, the emergence of Bitcoin treasury firms has also drawn quite a few detractors. Some critics point out that many of these companies have a negative operating income. Market analyst Caleb Franzen asserted that even after buying Bitcoin, they’re still junk companies. Others point out that too many firms have jumped on the Bitcoin treasury bandwagon, making the prospect no longer attractive. Fakhul Miah, managing director of GoMining Institutional, is also concerned about copycats. He told Cointelegraph that ”if these smaller firms crash, we could see a ripple effect that hurts Bitcoin’s image.”

India Launches Crypto-Enabled Web Browser InitiativeIn a further leap into the digital frontier, the Indian Ministry of Electronics and Information Technology (MeitY) has unveiled the Indian Web Browser Development Challenge (IWBDC), signaling a significant move towards reducing the nation’s reliance on foreign technology.Photo by Julian Yu on UnsplashIndigenous web browserCentral to this ambitious initiative is the creation of an indigenous web browser with an innovative twist — the integration of cryptographic features for digitally signing documents. This advancement is poised to heighten the security and efficiency of online transactions, elevating India’s digital landscape.The launch event for the challenge took place at the India Habitat Centre and showcased a collaborative endeavor involving MeitY, Controller of Certifying Authorities (CCA), and the Centre for Development of Advanced Computing (C-DAC).Harnessing blockchain technologyAt its core, this initiative aims to bridge the traditional internet framework with the burgeoning potential of blockchain technology. A press release published by MeitY on Wednesday clarified that the web browser will boast an embedded CCA India root certificate, bolstering the browser’s security framework and upholding the sanctity of data privacy.Sunita Verma, Research & Development Group Coordinator at MeitY, underscored the profound significance of this initiative in India’s digital narrative. She conveyed the message from Alkesh Kumar Sharma, MeitY’s Secretary, emphasizing that this challenge embodies a pivotal stride toward realizing the vision of an “Aatmanirbhar Bharat” or self-reliant India.Further echoing this sentiment, Verma stated:“Digital India has orchestrated a transformative shift in our nation’s operational fabric. As we journey forward, the convergence of technology and homegrown innovation stands as a critical waypoint. More than just a browser, this is a symbol of a self-sufficient, digitally empowered India.”Progressive use caseIn line with the drive towards digital sovereignty, Arvind Kumar, MeitY’s CCA, illuminated the paramount significance of trustworthiness and security in the realm of digital interactions. He expressed his confidence that the forthcoming browser, fortified with the India Root Certificate, will render the nation more resilient against internet vulnerabilities, ultimately curbing dependence on foreign technology players.The IWBDC extends an open invitation to innovators across diverse domains, encompassing academia, industry, startups, and individuals, to contribute their ingenuity to this groundbreaking venture. The challenge brings with it a substantial prize pool of Rs. 3.41 crore ($0.4 million), offering not only financial incentives but also a chance to shape the trajectory of India’s digital future.While establishment agencies in India have largely been opposed to the legalization of cryptocurrencies, this initiative demonstrates that others are looking to exploit the blockchain and cryptocurrency innovation.While the Indian government has been active in calling for global crypto regulation, the country itself has not as yet finalized any such legislation relative to Web3 and cryptocurrency. Initiatives like this one help to showcase the possibilities that this innovation can bring about. That should serve to steer regulation in India towards a set of rules that enable the further development of that innovation.As the curtains rise on the Indian Web Browser Development Challenge, the world’s most populous nation is taking a decisive stride towards asserting its tech self-reliance, intertwining innovation with security, and laying the foundation for a digitally progressive India.