Posts

Showing posts with the label security

Careful when signing messages in Ethereum Pectra

The Ethereum blockchain forked today for its Pectra code change and introduced a suite of new Features , upgrades, and vulnerabilities. However, within an hour of the changeover, concerned users were warning about a new threat vector: message signing. “Be careful what you sign… It is enough to drain all tokens,” posted one user to Telegram. Another Ethereum user echoed the warning, saying, “You only have to sign a message to get completely drained!” Many other warnings flagged similar risks . Ethereum’s Pectra upgrade included Ethereum Improvement Proposal (EIP) 3074, which has introduced new AUTH and AUTHCALL Ethereum operation codes. These opcodes allow the holder of an Ethereum private key to delegate authorization to a smart contract. Developers called it an important step in achieving account abstraction. However, critics say it has introduced new phishing attacks that allow theft of all assets in a user’s wallet once they delegate control of their keys. ...

The Foundations of a Sustainable DeFi Ecosystem

Decentralized Finance (DeFi) has taken the blockchain and cryptocurrency world by storm, promising a future of financial inclusion, transparency, and accessibility. Yet, with rapid growth comes critical challenges: scalability, security, and sustainability. For DeFi to evolve beyond a speculative trend into a robust financial infrastructure, it must adopt foundational principles that ensure long-term viability. This article explores the key components required to build a sustainable DeFi ecosystem. 1. Scalability Without Compromise One of the biggest hurdles for DeFi platforms is scalability. Networks like Ethereum, the backbone of many DeFi projects, have faced congestion issues, driving transaction fees to unsustainable levels. Layer-2 solutions like Optimistic Rollups and zk-rollups offer promising paths forward by enabling faster and cheaper transactions while preserving decentralization. Additionally, alternative blockchain networks like Solana, Avalanche, and Polkadot are gaining...

Cathay Securities debuts Taiwan’s first security token offering platform

Cathay Securities announced that it has obtained regulatory approval to launch Taiwan’s first Security Token Offering business.  Taiwan’s financial sector, Cathay Securities has become the island’s first brokerage firm authorized by the Financial Supervisory Commission to launch a Security Token Offering (STO) business. This pioneering move allows the brokerage to issue digital assets that represent investments, marking a significant milestone in the evolution of traditional finance and investment mechanisms in Taiwan. Cathay Securities’ inaugural STO will finance the parent company of Green Point Energy Creation, known for pioneering the renewable energy sector in Taiwan under the brand “Sunshine Volt Family.” The offering , dubbed “Sunshine Green Benefit Debt STO,” is structured as a six-year debt STO with a 3.5% annual interest rate, following an annual interest distribution and principal repayment upon maturity. The fundraising target is set at 30 mil...

Understanding the security measures in Coinbase’s multiparty computation implementation

Image
In the realm of digital asset management, the challenge of creating a secure and user-friendly wallet service has been a persistent hurdle. In response to this, Coinbase has developed a wallet as a service (WaaS) solution, which employs the advanced cryptographic method known as multiparty computation (MPC) to address key management issues in blockchain and cryptocurrency applications. This information is detailed in a whitepaper authored by Yehuda Lindell, a computer science professor at Bar-Ilan University (currently on leave) and the head of the cryptography team at Coinbase. Lindell’s extensive background in cryptography, both in academia and industry, lends significant credibility to this work. The whitepaper highlights how MPC allows for a web2-like experience within a web3 infrastructure. The Coinbase WaaS aims to make cryptocurrencies, blockchain, and web3 technology accessible to all. This necessitates that everyone has a wallet and that the private keys for thes...

Australian regulator ASIC to ramp up focus on digital scam

ASIC, Australia’s financial watchdog, has announced a new four-year plan prioritizing consumer protection against digital scams, including cryptocurrency-related frauds. ASIC, the Australian Securities and Investments Commission, has unveiled a new four-year strategy aimed at shielding consumers and businesses from digital scams, including those involving cryptocurrencies. Chair Joe Longo indicated that while ASIC has made strides since outlining its priorities last year, there’s ongoing work. The regulator is adapting to shifts in sustainable finance, the digital economy, and the challenges an aging population poses. You might also like: ASIC releases the top 10 ways to spot a crypto scam Longo also mentioned that ASIC closely monitors how emerging technologies like AI could impact businesses and consumers. Australia has been generally favorable toward digital currencies. The country has both embraced and regulated cryptocurrencies, most notably by exempt...

This tokenization platform aims to bridge the gap between traditional assets and crypto

Image
As tokenization is gaining traction, it presents a compelling opportunity to transform global financial markets, making trading cheaper, more liquid and highly automated. Tokenization is one of the biggest trends in blockchain, following decentralized finance (DeFi) or nonfungible token s (NFTs). The transition of real-world assets to the blockchain, including equity and debt, can change financial markets by bringing more liquidity and making the trading process cheaper and more automated. A recent report released by the Global Financial Markets Association (GFMA) and Boston Consulting Group estimates that the global value of tokenized illiquid assets will grow from about $0.3 trillion today to about $16 trillion by 2030. Tokenization is not just a fad for crypto enthusiasts. It’s attracting major players in traditional finance. In May 2023, BlackRock chairman Larry Fink said that tokenization could make capital markets more efficient. The head of the world’s largest asset manager, w...

South Korean crypto exchange GDAC hacked for nearly $14M

The exchange said that all deposits and and withdrawals are temporarily suspended as it performs emergency server maintenance. South Korean crypto exchange GDAC has been hacked for approximately $13.9 million worth of crypto. The exchange has halted all deposits and withdrawals and is performing emergency server maintenance in response to the attack, according to an April 10 announcement from GDAC CEO Han Seunghwan. Notice on #GDAC Exchange Hack Alert️ GDAC Exchange has officially announced that it has experienced a security breach Please refer to the official announcements made by the Exchange ️GDAC Announcement: https://t.co/SNRFZTMEYg WEMIX Medium: https://t.co/7UIwyua72K — WEMIX (@WemixNetwork) April 10, 2023 According to the announcement, the attacker gained control of some of the exchange’s hot wallets on the morning of April 9, and at 7 a.m. Korean Standard Time began moving crypto into wallets under the attacker's control. Around 61 Bitcoin (BTC), 350.5 Ether (ETH), 1...

Top 7 cybersecurity jobs in high demand

Discover the top seven cybersecurity jobs in high demand: from security analyst to information security manager and more. In today’s digital age, cybersecurity has become a critical aspect of almost every business. Cyber threats are increasing daily, and businesses must take proactive measures to protect their networks and data. As a result, the demand for cybersecurity professionals has skyrocketed. Little Friday humour #meme # cyber security @hackurityio pic.twitter.com/MArEpCh03k — Harold De Vries (@devries_harold) February 17, 2023 In this article, we will discuss the top seven cybersecurity jobs that are in high demand. Cybersecurity analyst A cybersecurity analyst is responsible for identifying and mitigating cyber threats to an organization’s network and data. They examine system logs and network traffic to find and fix security holes. Additionally, they create and implement security policies and processes to defend the company against future cyberattacks. Cybersecurity...

Crypto derivatives boom during crypto winter — Q&A with Eightcap

Image
Find out how crypto derivatives trading can limit potential risks of loss in a bear market. This year saw the crypto market rocked by numerous crises while the bearish climate was a constant presence. Considering this, many traders have lost confidence in traditional CEX trading and are looking to diversify their strategies. Turning to alternative Trading patterns and products is a way to minimize risk and reduce losses. Cointelegraph’s interview with Eightcap contains more about Derivatives Trading in the crypto space. Q: FTX has become one of the biggest crypto disasters lately. What could have been done to avoid that? The collapse of FTX has taught investors and crypto providers major lessons about security, transparency and trust. FTX was one of the largest crypto exchanges in the world. It is evident they lacked a number of controls across the board, but one thing is certain: The exchange should never have used its customer funds to pay for its own expenses, debts and loans to...

How can crypto staking improve in light of the FTX crash

Image
Flexibility in the face of the highly volatile crypto space has pushed for the introduction of new staking mechanics. The FTX collapse shook up the crypto market, and billions of dollars are currently locked up in the now-defunct crypto exchange. On top of that, FTX was such a big player that the contagion spread to other crypto players, including several trading powerhouses, popular DeFi protocols, and decentralized exchanges. Trust in the crypto ecosystem is at its lowest level. Investors are withdrawing funds from major centralized exchanges while the sales of cold wallets are up. Despite an overall gloomy mood in crypto space, one form of crypto investment remains at the height of popularity, and this is staking. Staking is similar to bank deposits. You agree to lock up your funds for a period of time and, in return, earn interest on them. Of course, staking providers are not immune to financial troubles. Many investors are still recovering from the crash of the Terra ecosystem. I...