Top

Japan Tops Crypto Losses to North Korean Hackers

Policy & Regulation·May 16, 2023, 12:22 AM

Hackers affiliated with the North Korean regime have been responsible for the theft of $721 million in digital assets from Japan.

That’s the finding of a recent report by UK-based crypto compliance analysis firm Elliptic. Elliptic had produced the report on behalf of Japanese news media group, Nikkei. It leaves Japan at the top of the table when considering the distribution of digital asset losses suffered due to North Korean hackers on a country by country basis.

Photo by FLY:D on Unsplash

 

Increasing losses

Elliptic has the wherewithal to track and identify blockchain-based transfers. As part of its analysis, it grouped by region and by country those businesses that it identified as having cryptocurrency holdings that later were transferred to digital wallets held by the Lazarus Group, the most notorious hacker group connected with the North Korean government. It’s the first such analysis to break down crypto-related hacking losses on a country by country basis.

The study included a consideration of both hacking and ransomware attacks. The loss associated with Japanese-based entities represents in excess of 30% of the global recorded loss. This latest analysis follows a recent report submitted to the United Nations which found that North Korea stole more digital assets in 2022 than any other year. That report had been submitted to the 15 members of a North Korea sanctions committee, finding that between $630 million and $1 billion worth of digital assets had been stolen.

 

Lax security

Elliptic’s analysis and subsequent report point to lax security being employed within Vietnamese and Japanese cryptocurrency marketplaces. Nikkei referred to an unnamed source who asserts that at least three Japanese cryptocurrency exchanges had been compromised by hackers between 2018 and 2021.

One of those instances involved Zaif, a company that lost $51.4 million in 2018 and subsequently shut down operations. Overall, Elliptic estimates a global loss of $2.3 billion to hackers between 2017 and 2022 in digital assets, as suffered by crypto firms. It also estimates such losses suffered in the United States at $497 million, while Hong Kong-based losses have been calculated at $281 million.

 

International response

In April, the Office of Foreign Assets Control (OFAC) within the Department of the Treasury in the United States stated that it had sanctioned two Chinese nationals and a Hong Kong British national for allegedly having aided the North Korean government in crypto money laundering activities.

On Saturday, a joint statement was issued by the Group of Seven finance ministers and central bank governors, following a meeting in Japan, outlining the “growing threat from illicit activities by state actors.” It’s widely believed that the proceeds of these hacks are contributing towards the funding of North Korea’s missile program and other such activities that threaten stability within the region.

The Japan External Trade Organization (JETO) has estimated that the estimated $721 million stolen from Japan amounts to 8.8 times the value of North Korea’s exports in 2021.

More to Read
View All
Policy & Regulation·

May 26, 2023

Silence From Multichain’s Chinese Developers Stokes Fear

Silence From Multichain’s Chinese Developers Stokes FearA prolonged silence from the project leadership behind Multichain, a cross-chain routing network, is causing growing concern among the users of the cross-chain protocol. The network currently holds $1.5 billion in total value locked (TVL).The protocol has experienced five days of stuck transactions, and multiple cross-chain bridge pathways, including Kava, zkSync, and Polygon zkEVM are still offline. Initially, the project’s China-based team attributed the issues to an upgrade that was being fixed. That explanation was changed recently to an ambiguous “force majeure,” leaving users with more questions than answers.Photo by Santiago Lacarta on UnsplashPossible arrests in ChinaAdding to the uncertainty are rumors circulating on Twitter that the core leadership team may have been arrested in China. Although the rumors remain unconfirmed, they have contributed to the growing sense of unease within the community. DJ Qian, one of the co-founders of Multichain who is no longer involved with the project, took to Twitter to share his attempts to seek clarification. Qian mentioned reaching out to Multichain CEO Zhaojun and founding partner Xu Guochang for technical assistance. When asked about Zhaojun’s availability, Qian stated that he was “not available yet.”Users and investors eagerly await updates and clarity from Multichain’s leadership team. However, the team’s lack of communication extends across various forms of social media. In group Telegram messages with the Multichain team, there have been no responses from Zhaojun, and direct messages through the same app have gone unanswered as well. This silence has left the community members puzzled, with little information to rely on.$MULTI price plummetsMeanwhile, the price of Multichain’s native token, $MULTI, has continued to decline. It currently stands at $4.37, representing a 20% decrease over the past 24 hours. The lack of communication and uncertainty surrounding the project have likely contributed to this downward trend in token price. Over the course of the past seven days, the token has decreased in price by 45%.In response to the situation, layer 1 blockchain project Conflux Network has taken precautionary measures by suspending Multichain’s co-mint privileges. This move prevents Multichain from minting tokens on the Conflux blockchain. The Conflux Network has also assured users that it will work with them in case any losses arise due to the ongoing issues.Flight to safetyOther projects and individuals have also reacted to the silence from Multichain’s team. Hong Kong-based HashKey Group, a crypto investment firm, has transferred $250,000 to crypto exchange Gate.io as a precautionary measure. Tron founder Justin Sun has withdrawn 470,000 of the $USDD stablecoin from the Multichain protocol. These actions reflect a growing concern among stakeholders, representing their efforts to mitigate potential risks associated with the uncertainty surrounding Multichain.Furthermore, the Fantom Foundation has withdrawn $2.4 million in liquidity of the protocol’s native $MULTI tokens from the decentralized exchange SushiSwap. It later tweeted out an update stating that the Fantom-Multichain bridge was operating as normal. These withdrawals signal a loss of confidence in Multichain and its native token, as stakeholders seek to protect their investments.As the silence persists, users and investors remain anxious for updates and clarifications from Multichain’s leadership team. The lack of communication and the circulating rumors have cast a shadow of uncertainty over the project, leaving stakeholders in a state of limbo.

news
Web3 & Enterprise·

Nov 24, 2023

Wemade CEO to attend Abu Dhabi Finance Week and Fortune Global Forum next week

Wemade CEO to attend Abu Dhabi Finance Week and Fortune Global Forum next weekHenry Chang, CEO of South Korean blockchain gaming publisher Wemade, will be traveling to the United Arab Emirates to speak at the second annual Abu Dhabi Finance Week — one of the biggest financial and economic events in the Middle East and North Africa (MENA) region — scheduled for Nov. 27 to 30.Photo by Kevin JD on UnsplashExploring the future of financeTouting the theme “Investing in the Transition Era”, this year’s ADFW is organized by Sheikh Khalid Abu Dhabi, Crown Prince of Abu Dhabi and Head of the Abu Dhabi Executive Council. Several organizations such as the Abu Dhabi Global Market (ADGM) and the Abu Dhabi Department of Economic Development are also participating as official partners. More than 10,000 visitors from over 100 countries across the world are expected to attend.Chang will participate as a panelist on Nov. 29 in the “Convergence: Media, Culture and Fintech” panel at Fintech Abu Dhabi, the flagship event of ADFW. The panel will cover topics like the impact of blockchain and decentralized finance (DeFi) technologies on fintech — more specifically, digital payment trends and the future of digital assets and currencies.Wemade’s expansion in the UAEHe will also partake in the Fortune Global Forum 2023, a global conference for CEOs of major global conglomerates also set to be held in Abu Dhabi from Nov. 27 to 29. The forum has been hosted by American business magazine Fortune since 1995 as a platform for member companies of the Fortune Global 500 list to gather and share insights on global issues like innovation and stability and their impact on economic progress. They will also be joined by government officials from various sectors in the UAE, including artificial intelligence, cybersecurity, oil and gas, industrial automation, healthcare and telecommunications.Wemade has been making strides to expand WEMIX3.0, its borderless Web3 mega-ecosystem, in the MENA region. The company opened an office in Abu Dhabi earlier this year.

news
Policy & Regulation·

Jun 04, 2025

MAS sets deadline for unlicensed crypto firms serving clients overseas from Singapore

The Monetary Authority of Singapore (MAS), the city-state’s central bank and primary financial regulator, has set a deadline of June 30 for unlicensed digital token service providers (DTSPs) working out of Singapore to cease offering their services to clients in overseas markets.Photo by Hu Chen on UnsplashResponding to feedbackThe deadline emerged by way of a process MAS has followed as part of the Financial Services and Markets Act 2022 (FSM Act). Last October, the regulator invited feedback from stakeholders related to the authority’s approach to the regulation of DTSPs. MAS published its response to that feedback on May 30.  It stated:”DTSPs which are subject to a licensing requirement under section 137 of the FSM Act must suspend or cease carrying on a business of providing DT services outside Singapore by 30 June 2025.” It added that it was not including any transitional arrangement for DTSPs despite MAS receiving such a suggestion from a number of feedback respondents. Instead, unlicensed DTSPs will need to abide by the June 30 deadline and have acquired a license by then or cease unlicensed activity.The regulator defines DTSPs as individuals, partnerships or Singapore corporations operating from a place of business in Singapore, including those formed or incorporated in Singapore who offer digital token services outside Singapore. Those found in breach of the regulation could face up to three years in prison and fines of up to S$250,000 ($195,000). Companies who have already obtained licensing or those exempted by way of the Securities and Futures Act, Payment Services Act and the Financial Advisers Act are free to continue trading. Challenging licensing requirementsThose who wish to become compliant will have to satisfy some challenging requirements. For those granted a license, an annual license fee of S$10,000 ($7,780) applies. Small-scale DTSPs need to satisfy a $150,000 ($116,670) ongoing capital requirement, while larger, well-established DTSPs must comply with a S$250,000 ($195,000) capital requirement. Additionally, MAS has put in place competency requirements related to a DTSP's CEO, directors, partners and managers. Hagen Rooke, a partner at law firm Gibson, Dunn & Crutcher, outlined on LinkedIn that while it's possible for unlicensed operators to obtain licensing, it will be very difficult to get a license. In its feedback response document, the regulator stated: “MAS will approach the licensing of DTSPs in a prudent and cautious manner and there will be extremely limited circumstances under which MAS will consider granting an applicant a licence under section 138 of the FSM Act.” Rooke advised crypto companies that may be affected to act swiftly in order to derisk through an operational restructuring or removing the businesses' Singapore touchpoints. He suggested that firms need to consider if it has customers outside of Singapore or front-office functions located outside of the city-state to determine if they could be affected by this regulatory measure. A number of Asian countries have moved to take action against unlicensed foreign firms that have engaged with local investors, with Thailand becoming the latest country to do so recently. However, the Singaporean authorities have approached the issue from the opposite perspective, citing the potential reputational risk that unlicensed DTSPs pose for Singapore.

news
Loading