Hong Kong Setting High Bar on Crypto Rules

The crypto space continues to suffer a disproportionate share of hacks and scams that were further exacerbated on Wednesday, with Malaysian crypto data aggregator the latest to succumb to a security breach. Serving as yet another stark reminder of the persistent threats plaguing the sector, a phishing scam targeted CoinGecko's X account, leading to a brief compromise that raised concerns about the safety of user information.Photo by GuerrillaBuzz on UnsplashPhishing scamDuring this incident, hackers posted a phishing link on CoinGecko's X account, falsely advertising a token airdrop for a cryptocurrency named GCKO. The deceptive post claimed that GCKO could be used for API services, including the cryptocurrency ANKR. Swift action by CoinGecko involved the removal of the fraudulent post and a public warning urging users to avoid interacting with any suspicious links or content. In an X post, CoinGecko wrote:”Our Twitter accounts @CoinGecko and @GeckoTerminal have been compromised. We're taking immediate steps to investigate the situation and secure our accounts. Please DO NOT click on any links or engage with suspicious content. Your security is our top priority.” Employee errorThe firm followed up with an update on Thursday, attributing the breach to a team member inadvertently clicking on a fraudulent Calendly link, granting unauthorized access to the hacker. Despite having two-factor authentication (2FA) enabled and employing robust security measures, CoinGecko emphasized that the inadvertent click allowed unauthorized access. The compromised accounts were then exploited to disseminate misleading information and potentially engage in malicious activities. CoinGecko expressed sincere apologies for any confusion or inconvenience caused by the incident. The company reiterated its commitment to platform security and continuous improvement of internal controls, assuring users that corrective measures were promptly implemented. SEC incompetenceCoinGecko's security incident occurred within 24 hours of a similar occurrence involving the U.S. Securities and Exchange Commission (SEC). The SEC's X account was compromised, with scammers posting a false message from Chair Gary Gensler about the approval of spot bitcoin exchange-traded funds (ETFs). While CoinGecko identified a vulnerability in its security regimen, the SEC later confirmed that the breach in its case was far more basic. It was not due to infrastructure attacks but rather the lack of 2-factor authentication (2FA) tied to the SEC's account, the most basic form of operations security. Gensler and the SEC have come in for major criticism from the crypto community in the U.S. due to a policy of regulation by enforcement that has been pursued. With that, the Commission came in for swift and harsh criticism in the immediate aftermath of its X account hack. Many pointed out the irony of Gensler advising consumers to secure their accounts back in October when the SEC itself had failed to do so. Others queried who would be responsible for what some interpreted as an episode of market manipulation, something that the SEC has perennially associated the crypto markets with. During the time that the account was compromised, millions of dollars of value were liquidated in short and long trading positions. CoinGecko's quick response serves as a valuable lesson in the importance of vigilance and proactive security measures amid the growing threats facing the cryptocurrency community.

Kyrgyzstani President Embraces Hydro-Powered Crypto MiningIn a move that signals the Republic of Kyrgyzstan’s growing interest in cryptocurrency mining, President Sadyr Japarov has given the green light to establish a crypto mining farm at a hydroelectric power plant within the Central Asian country.The ambitious project, set to be built at the Kambar-Ata-2 hydropower plant, has been allocated a budget of up to $20 million, as reported by Kyrgyzstan’s national news agency, Kabar, on Thursday.Photo by Collab Media on PexelsMore efficient use of powerThe primary motivation behind this endeavor is to address energy losses linked to non-utilized power from the Kambar-Ata-2 plant, which has been operational since 2010. According to President Japarov, approximately 6.8 billion kilowatt-hours (kWh) of energy have been wasted due to this issue. By harnessing the excess energy for cryptocurrency mining, the Kyrgyz government aims to optimize resource usage and bolster the country’s budget.President Japarov emphasized that the profits generated from the mining farm would directly benefit the people, particularly the power engineers who are responsible for the plant’s operations. He asserted that the earnings would be meticulously controlled and allocated, with complete automation and oversight.Energy grid challengesHowever, this recent decision appears to contradict the state of emergency announced by President Japarov in Kyrgyzstan’s energy sector on July 24. The emergency status, which will be in effect from August 1, 2023, until December 31, 2026, is attributed to climate challenges, insufficient water inflow into the Naryn River basin, and a lack of generating capacity due to escalating energy consumption.Despite these apparent contradictions, President Japarov affirmed that crypto mining at the hydro plant would be subject to the highest tariff in Kyrgyzstan, amounting to approximately 5 Kyrgyz soms ($0.057) per kW.As early as March 2022, Kyrgyz lawmaker Karim Khanjeza urged the government to legalize the cryptocurrency industry during a parliamentary committee meeting, citing the rapid expansion of the crypto space. Although Kyrgyzstan introduced some regulations for crypto exchanges in 2021, it has not yet enacted specific laws governing cryptocurrencies.The integration of hydro-powered crypto mining presents both opportunities and challenges for Kyrgyzstan. If executed strategically, the venture could harness underutilized energy to boost the national economy and provide benefits to the people.Learning from KazakhstanThat said, the Central Asian country would do well to pay heed to events that unfolded in neighboring Kazakhstan relative to crypto mining over the course of the last few years. Following a major crackdown on crypto mining activity in China, many miners upped and moved their operations to Kazakhstan. That sudden unplanned and unregulated upsurge destabilized the country’s power grid, forcing the government to crack down on mining. It has since regulated the activity in order to accommodate it without it having a detrimental effect on the energy grid.As developments unfold, Kyrgyzstan’s foray into cryptocurrency mining will undoubtedly be closely monitored by industry observers and stakeholders. President Japarov’s vision to distribute the earnings to ordinary citizens brings an element of promise to the project. Crypto mining can be a positive development for the country, leading to more efficient energy use, so long as the authorities plan accordingly.

Zipmex Thailand halts crypto trading citing SEC complianceTroubled cryptocurrency exchange Zipmex Thailand has recently announced the temporary suspension of digital asset trading until early next year.Photo by Anh Tuan To on UnsplashTrading and deposits suspendedThe decision, outlined by the firm in a Facebook post on Saturday, is attributed to the platform’s efforts in ensuring full compliance with the standards set by Thailand’s Securities and Exchange Commission (SEC).In the Facebook post, Zipmex Limited addressed its customers, stating:“Dear customers, Zipmex Limited would like to ensure the proper and compliant conduct of the company’s business operations in accordance with the criteria set by Thailand’s Securities and Exchange Commission (SEC).”The suspension of digital asset trading and deposits of all types became effective from Nov. 25.Withdrawals remain openDespite the suspension, customers will retain the ability to withdraw Thai baht and digital assets from their Trade Wallet through the website and mobile application until Jan. 31, 2024. However, for digital assets categorized as “Trade Only,” customers are instructed to contact Customer Support for withdrawal. Beyond Jan. 31, 2024, when the withdrawal feature through the website and mobile application is suspended, customers will need to seek assistance from Customer Support.Zipmex Thailand also emphasized that the withdrawal process for digital assets may take between seven to 14 days, requiring customers to provide supporting documents for identity and account ownership verification.As a cryptocurrency exchange headquartered in Singapore and operating in multiple countries, including Thailand, Australia and Indonesia, Zipmex has already fallen foul of Thailand’s SEC. Earlier this year, it was hit with penalties related to allegations of improper use of a digital asset custodian service and the redirection of customers to the Singapore-based exchange, Zipmex Pte, creating a conflict of interest.Financial difficultiesThe exchange has faced financial challenges, including difficulties in repaying creditors after losses incurred from exposure to crypto lenders Babel Finance and Genesis in 2022. A planned $100 million buyout earlier in the year fell through when the buyer, reportedly V Ventures, withdrew from the purchase.Zipmex’s troubles date back to last summer when the exchange halted withdrawals due to volatile market conditions and a liquidity crunch resulting from exposure to the troubled crypto lender Babel Finance. Despite facing financial difficulties, the exchange expressed its commitment to maintaining the integrity of its platform.In August of the same year, Bloomberg reported that Zipmex intended to meet with potential investors and Thailand’s financial regulator to discuss a recovery plan. By November, the platform was in advanced discussions with venture capital fund V Ventures for the sale of a majority stake.Earlier this year, the Thai Securities and Exchange Commission announced an investigation into whether Zipmex breached local rules in its offering of certain digital-asset products. In April, the company filed a request to extend the moratorium period to enable the firm to work towards restructuring. Later that month, it appeared that the V Ventures investment deal had fallen through. By July, the beleaguered firm had sued the investor for breach of contract.The ongoing challenges faced by Zipmex underscore the complex landscape and regulatory scrutiny surrounding cryptocurrency exchanges in various jurisdictions.