Singapore proposes additional rules to safeguard retail crypto investors

The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an advisory to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks. The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users' wallets without proper authorization.Photo by Junrui Wu on UnsplashDrainer-as-a-service threatOf particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider. The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers. Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim's system, enabling hackers to withdraw funds without additional authorization. MS Drainer and Inferno DrainerWhile no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023. Last month, Singapore-based cyber security firm Group-IB produced a report concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November. In December, the Pink Drainer hacking group notched up another victim, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer reported that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days. Hardware walletsTo counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers. In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem. As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.  

Solomon Islands partners with Soramitsu on CBDC pilotCentral bank digital currency (CBDC) development has been ongoing globally at a brisk pace in 2023 and smaller nations, like the Solomon Islands with a population of over 700,000, are no exception when it comes to that process with the introduction of Bokolo Cash.Photo by Gilly Tanabose on UnsplashIntroducing Bokolo CashSolomon Islands Central Bank (CBSI) has officially unveiled the proof-of-concept for its CBDC named Bokolo Cash, with support from Japanese blockchain firm Soramitsu. Bokolo Cash is pegged to the value of one Solomon Islands dollar.The proof-of-concept pilot was launched on Tuesday by way of a keynote speech given by Manasseh Sogavare, the prime minister of the archipelago. In that speech, Sogavare highlighted that the CBDC would lead to reduced transaction costs for citizens and businesses. Users can rely on transactions to be both secure and transparent, given that the network will be blockchain-based.The prime minister also articulated that the CBDC pilot project would be a catalyst for financial inclusion relative to the Island nation’s remotest communities.Pilot scheme use casesParticipants in the project will have the opportunity to use it in various scenarios. From retail transactions in the capital city, Honiara, to person-to-person transfers, the CBDC aims to demonstrate its versatility. The proof-of-concept will also assess wholesale transfers between commercial banks, simulate cross-border payments and examine remittances. To ensure security and compliance, users will undergo a “two-step” Know Your Customer (KYC) verification process, as outlined by Soramitsu.Operating on a customized blockchain based on Hyperledger’s Iroha, Bokolo Cash is designed for local use. However, it will also integrate with Soramitsu’s public Sora blockchain. This connectivity will enable users to engage in transfers using QR codes and the self-custody Fearless Wallet, a creation of Soramitsu.Legislative changeAlthough the project commenced at the beginning of November, the official announcement was made earlier this week. The legislation required to enable the CBSI to issue the CBDC — CBSI (Amendment) Act 2023 — was enacted on Nov. 3.The Solomon Islands, a collection of over 900 islands situated west of Papua New Guinea, now joins a group of island nations, including the Marshall Islands and Mauritius, actively experimenting with CBDC. Palau collaborated with Ripple Labs back in July to introduce the Palau Stablecoin (PSC). Interestingly, Tonga has contemplated adopting Bitcoin as legal tender, while Vanuatu hosts Satoshi Island, known for its Bitcoin-friendly environment. Meanwhile, Eastern Caribbean countries have already implemented an official CBDC called DCash.Soramitsu has been active in collaborating with central banks relative to the introduction of CBDCs, particularly in Asia. It has played a key role in facilitating the issuance of the Cambodian Bakong and the Lao DLak in Laos. Furthermore, it has initiated a project for regional cross-border payments using the Bakong and a stablecoin.In 2022, Soramitsu completed CBDC-related feasibility studies in conjunction with the relevant authorities in Vietnam and the Philippines. The Japanese fintech company has also participated with the Asian Development Bank and Tokyo-based global information technology solutions firm Fujitsu on a Web3 development project.

India is strategically navigating the development of its digital rupee, with the Reserve Bank (RBI) actively addressing privacy concerns through technological solutions in its central bank digital currency (CBDC) pilot programs. According to a recent report by CoinDesk, a senior official with insights into these initiatives revealed that while progress is evident, the RBI is proactively exploring ways to ensure privacy in the use of the digital rupee.Photo by Julian Yu on UnsplashPursuing mechanisms to maintain anonymityThe RBI has introduced a new dimension to the discourse on privacy concerns associated with CBDC usage. The central bank official suggested that the RBI may seek legal backing from India’s finance ministry to enact legislation allowing customers to delete transactions for the purpose of maintaining anonymity. New-found urgencyPublic statements from the RBI suggested a lack of urgency in implementing a full-scale retail CBDC, coupled with a reluctance to provide a specific timeline. However, recent events indicate that an underlying sense of urgency may be emerging. In the past month, the retail CBDC achieved a notable milestone, processing one million transactions in a single day, with support from various banks. Several banks, including HDFC Bank, Kotak Mahindra Bank, Axis Bank, Canara Bank, IDFC First Bank and Union Bank of India, reportedly encouraged their employees to deposit funds in CBDC instead of fiat currency, contributing to this achievement. The official overseeing the CBDC development emphasized the necessity for experimentation and substantial efforts to ensure the security of the digital currency. While the settlement aspect is considered straightforward, addressing latency remains a priority for the RBI. No mandate on taxThe RBI, historically known for its opposition to crypto both domestically and globally, clarified that crypto taxation is not within its mandate. This clarification suggests that the RBI might not object if the Indian government decides to reduce the stringent taxes currently imposed on cryptocurrencies. The central bank clarified that it lacks the mandate to express a viewpoint on reducing a contentious tax that has stirred debate within the crypto industry. The RBI has been a driving force behind the adoption of wholesale and retail CBDC since late 2022 when it initiated pilot programs. The official emphasized that taxation matters fall under the government’s purview, reinforcing the RBI’s focus on its designated responsibilities. Similarly, the country’s judiciary recently turned down a plea to have it formulate a crypto regulatory framework, outlining that this too is up to the government to address. The central bank has a historical context of attempting to ban cryptocurrencies, with effective prohibitions in place between 2018 and 2020 until a Supreme Court order overturned the ban. Since then, the RBI has consistently expressed concerns about cryptocurrencies in various forums, including the Group of 20, where India played a leading role in coordinating global regulation in the crypto space. Recent utterances from the RBI governor, Shaktikanta Das, suggest that the regulator is disinterested in seeing the offering of spot crypto exchange-traded funds (ETFs) in India despite that eventuality coming to pass last month in the United States. Das also spoke positively recently about the tokenization of real-world assets using blockchain technology.