The Blockchain Monitor

Home | The Blockchain Monitor

core/paragraph

<a href="#Financial">Financial Services Firms Expand Cryptocurrency Custody Services</a>

core/list-item

<a href="#IOSCO">IOSCO, BIS and CFTC Address DeFi and Digital Asset Markets</a>

<a href="#CFTC">CFTC Brings Wave of Enforcement Actions Against DeFi Market Actors</a>

<a href="#SEC">SEC Brings Second Enforcement Case Alleging NFTs Are Securities</a>

<a href="#FinCEN">FinCEN Issues Alert on ‘Pig Butchering’ Scams Involving Virtual Currencies</a>

<a href="#Lazarus">Lazarus Group Hacks Crypto for $41M and $55M; Wash Trading Data Published</a>

<a href="#alert">Client Alert: Digital Asset Broker Regulations Target DeFi Platforms and Payment Processors</a>

core/list

Financial Services Firms Expand Cryptocurrency Custody Services

By <a href="https://www.bakerlaw.com/ChristopherLamb">Christopher Lamb</a>

According to recent reports, the cryptocurrency custody arm of a major international bank has launched its institutional cryptocurrency custody services in Singapore, making it “the first entity that is owned by and partnered with banks to provide digital asset custody services for financial institutions in Singapore.” The cryptocurrency custody provider reportedly will offer its services to clients ranging from hedge funds and high-frequency traders to prime brokers, exchanges and asset managers. According to other recent reports, a German multinational investment bank and financial services company has partnered with a Swiss crypto firm to provide custody services to institutional clients’ cryptocurrencies and tokenized assets. This partnership will reportedly allow the multinational investment bank to hold a limited number of cryptocurrencies for its clients, as well as tokenized versions of traditional financial assets.

In a recent press release, Ripple announced that it has agreed to acquire Fortress Trust, “a financial institution that provides licensed Web3 financial, regulatory, and technology infrastructure for blockchain innovators,” including “critical infrastructure to address the growing enterprise crypto market.” According to the press release, “[w]ith this acquisition, Ripple’s growing portfolio of regulatory licenses expands, as Fortress Trust holds a Nevada Trust license” and adds to Ripple’s “more than 30 Money Transmitter Licenses across the U.S.” A few days prior to the acquisition, reports indicate, Fortress Trust incurred a security incident involving a third-party analytics vendor that resulted in the loss of approximately $12 million in bitcoin and other cryptocurrencies.

For more information, please refer to the following links:

<a href="https://www.cnbc.com/2023/09/11/standard-chartered-owned-crypto-firm-zodia-launches-in-singapore.html">Standard Chartered-owned crypto firm Zodia launches in Singapore</a>

<a href="https://www.reuters.com/business/finance/deutsche-bank-hold-crypto-institutional-clients-2023-09-14/">Deutsche Bank to hold crypto for institutional clients</a>

<a href="https://www.businesswire.com/news/home/20230907884721/en/Leading-Enterprise-Crypto-Company-Ripple-Acquires-Fortress-Trust">Leading Enterprise Crypto Company Ripple Acquires Fortress Trust</a>

<a href="https://cointelegraph.com/news/ripple-security-incident-accelerated-fortress-trust-acquisition">Ripple says security incident accelerated its acquisition of Fortress Trust</a>

<a href="https://www.coindesk.com/business/2023/09/13/phishing-attack-on-cloud-provider-with-fortune-500-clients-led-to-15m-crypto-theft-from-fortress-trust/">Phishing Attack on Cloud Provider With Fortune 500 Clients Led to $15M Crypto Theft From Fortress Trust</a>

IOSCO, BIS and CFTC Address DeFi and Digital Asset Markets

By <a href="https://www.bakerlaw.com/RobertAMusiala">Robert A. Musiala Jr.</a>

Various regulatory bodies recently addressed the decentralized finance (DeFi) market in new publications, as the DeFi market continues to expand. According to one recent report, spot trading volume on the leading decentralized exchange surpassed that of the largest U.S. cryptocurrency exchange by trading volume for the first time in Q1 of 2023.

In one new publication, the Board of the International Organization of Securities Commissions (IOSCO) issued a report titled Policy Recommendations for Decentralized Finance (DeFi) Consultation Report. The 128-page report “proposes nine policy recommendations that IOSCO plans to finalize by the end of 2023 to address market integrity and investor protection concerns arising from DeFi by supporting greater consistency of regulatory frameworks and oversight in member jurisdictions.” The recommendations are to (1) analyze DeFi products, services, arrangements and activities to assess regulatory responses; (2) identify responsible persons; (3) achieve common standards of regulatory outcomes; (4) require the identification and addressing conflicts of interest; (5) require the identification and addressing of material risks, including operational and technology risks; (6) require clear, accurate and comprehensive disclosures; (7) enforce applicable laws; (8) promote cross-border cooperation and information sharing; and (9) understand and assess interconnections among the DeFi market, the broader crypto-asset market and traditional financial markets.

In another publication, the Bank for International Settlements (BIS) recently issued a report titled The oracle problem and the future of DeFi that addresses DeFi’s use of “oracles” to “import real-world data into blockchain environments for use in smart contracts.” Among other things, the report explores “[w]hether oracles can truly adhere to the complete decentralisation ethos of crypto” when “striving for … decentralisation leads to complex consensus protocols that further erode blockchain efficiency.” The report finds that while “centralisation in oracles might boost efficiency, it also means adding trusted parties to a system designed to be trustless”; the report concludes that “[a]s a result, crypto-based DeFi is likely to remain the preserve of cryptoassets only, rather than being used for real-world assets.”

In a final related item, in a recent speech, a commissioner at the U.S. Commodity Futures Trading Commission (CFTC) proposed that the CFTC launch the first-ever U.S. pilot program for digital asset markets. Among other things, the commissioner recommended the CFTC “help the U.S. stay ahead of the curve by commencing a pilot initiative for digital asset markets … to test, gather data, and develop a pragmatic approach to digital assets and tokenization.”

<a href="https://thedefiant.io/uniswap-spot-volume-surpassed-coinbase-in-2023">Uniswap Spot Volume Surpassed Coinbase In 2023</a>

<a href="https://www.cftc.gov/PressRoom/SpeechesTestimony/opapham9">Remarks of CFTC Commissioner Caroline D. Pham Before the Cato Institute, Staying Ahead of the Curve: Crypto Regulation and Competitiveness</a>

<a href="https://www.iosco.org/library/pubdocs/pdf/IOSCOPD744.pdf">THE BOARD OF THE INTERNATIONAL ORGANIZATION OF SECURITIES COMMISSIONS: Policy Recommendations for Decentralized Finance (DeFi) Consultation Report</a>

<a href="https://www.bis.org/publ/bisbull76.htm">BIS: The oracle problem and the future of DeFi</a>

CFTC Brings Wave of Enforcement Actions Against DeFi Market Actors

By <a href="https://www.bakerlaw.com/RobertAMusiala">Robert A. Musiala Jr.</a><a href="https://www.bakerlaw.com/VeronicaReynolds"></a>

The U.S. Commodity Futures Trading Commission (CFTC) recently brought a wave of new enforcement actions in the decentralized finance (DeFi) and digital assets space. In a recent press release, the CFTC announced that it had issued orders simultaneously filing and settling charges against three DeFi market actors: <a>Opyn, ZeroEx and Deridex</a>. According to the press release, all three companies were “charged with illegally offering leveraged and margined retail commodity transactions in digital assets.” In addition, Deridex and Opyn were “charged with failing to register as a swap execution facility (SEF) or designated contract market (DCM), failing to register as a futures commission merchant (FCM), and failing to adopt a customer identification program as part of a Bank Secrecy Act compliance program, as required of FCMs.” The press release further notes that each company “engaged in these activities in connection with blockchain-based software protocols and smart contracts, commonly referred to as DeFi, that functioned similarly to trading platforms, and which purported to offer users the ability to engage in transactions in a decentralized environment.”

In a quote from the press release, the CFTC director of enforcement said, “The DeFi space may be novel, complex, and evolving, but the Division of Enforcement will continue to evolve with it and aggressively pursue those who operate unregistered platforms that allow U.S. persons to trade digital asset derivatives.” In a separate statement, CFTC Commissioner Summer K. Mersinger criticized the enforcement actions, stating in part that the CFTC “in these cases is taking another step down the path of bringing enforcement actions when we should be engaging with the public” and that the cases “are especially concerning in that they represent a significant shift in position on the merits of engagement with DeFi market participants.”

In another recent press release, the CFTC announced the entry of a consent order against Mirror Trading International Proprietary Limited (MTI) related to “an international multi-level marketing scheme by which they solicited and accepted nearly 30,000 bitcoin from at least 23,000 people located in the U.S. for participation in a commodity pool that purportedly traded retail foreign currency” but instead “misappropriated virtually all of the money.” And in yet another recent action, the CFTC announced that it had settled charges against a defendant, <a>Jacob R. Orvidas</a>, who allegedly “fraudulently solicited at least four pool participants to trade leveraged Bitcoin in a commodity pool” and failed to register as a commodity pool operator. The U.S. Securities and Exchange Commission (SEC) also settled a parallel enforcement action against Orvidas.

<a href="https://www.cftc.gov/PressRoom/PressReleases/8774-23">CFTC Issues Orders Against Operators of Three DeFi Protocols for Offering Illegal Digital Asset Derivatives Trading</a>

<a href="https://www.cftc.gov/PressRoom/SpeechesTestimony/mersingerstatement090723">Dissenting Statement of Commissioner Summer K. Mersinger Regarding Enforcement Actions Against: 1) Opyn, Inc.; 2) Deridex, Inc.; and 3) ZeroEx, Inc.</a>

<a href="https://www.cftc.gov/PressRoom/SpeechesTestimony/johnsonstatement090723">Statement of Commissioner Kristin N. Johnson Regarding CFTC Consent Order Imposing $1.7 Billion in Restitution against South African Commodity Pool Operator</a>

<a href="https://www.cftc.gov/media/9241/enfjacoborvidasorder090823/download">In the Matter of: Jacob Orvidas, CFTC Docket No. 23-43</a>

<a href="https://www.sec.gov/files/litigation/admin/2023/34-98323.pdf">In the Matter of&nbsp; JACOB R. ORVIDAS, SEC File No. 3-21630</a>

SEC Brings Second Enforcement Case Alleging NFTs Are Securities

By <a href="https://www.bakerlaw.com/professionals/teresa-goody-guillen/">Teresa Goody Guillén</a>

On Sept. 13, the U.S. Securities and Exchange Commission (SEC) settled charges against a company for allegedly selling non-fungible tokens (NFTs) that the SEC deems are securities in violation of the federal securities law registration requirements. The settlement order alleges that the company sold the NFTs for approximately $8.2 million to fund the production of an animated web series, touted the sales of NFTs in the secondary market, and tied success of the show to the value of the NFTs, which led investors to believe they would profit from the company’s efforts. The company agreed to pay a $1 million civil penalty, along with other undertakings, including destruction of the NFTs. Commissioners Hester Peirce and Mark Uyeda published a dissent, stating that “[t]he application of the Howey investment contract analysis in this matter lacks any meaningful limiting principle.” The dissent further analogized the NFT project as a digital update of the Star Wars collectibles, chastising the SEC that “[u]sing the analysis of today’s enforcement action, the SEC should have parachuted in to save those kids from Star Wars mania.” The dissent concluded by stating that the “application of the securities laws here makes little sense and discourages content creators from exploring ways to harness social networks to create and distribute content . . .&nbsp; [and] contributes to the legal ambiguity facing artists, writers, musicians, filmmakers, and others seeking to build a loyal, engaged following.”

<a href="https://www.sec.gov/news/press-release/2023-178?utm_medium=email&amp;utm_source=govdelivery">SEC Charges Creator of Stoner Cats Web Series for Unregistered Offering of NFTs</a>

<a href="https://www.sec.gov/news/statement/peirce-uyeda-statement-stonercats-091323?utm_medium=email&amp;utm_source=govdelivery">Collecting Enforcement Actions: Statement on Stoner Cats 2, LLC</a>

FinCEN Issues Alert on ‘Pig Butchering’ Scams Involving Virtual Currencies

The U.S. Financial Crimes Enforcement Network (FinCEN) recently published a FinCEN Alert (Alert) titled Prevalent Virtual Currency Investment Scam Commonly Known as “Pig Butchering” (FIN-2023-Alert0005). According to the Alert, “The victims in this situation are referred to as ‘pigs’ by the scammers who leverage fictitious identities, the guise of potential relationships, and elaborate storylines to ‘fatten up’ the victim into believing they are in trusted partnerships … then refer to ‘butchering’ or ‘slaughtering’ the victim after victim assets are stolen, causing the victims financial and emotional harm.”

The Alert notes that the “butchering” phase often involves convincing the victims to invest in virtual currency. According to the Alert, pig butchering scams “are largely perpetrated by criminal organizations based in Southeast Asia who use victims of labor trafficking to conduct outreach to millions of unsuspecting individuals around the world,” resulting in billions of dollars in losses to U.S. victims.

The Alert explains the pig butchering scam methodology and provides a list of 15 red flag indicators to assist in identifying and reporting related suspicious activity. The Alert instructs financial institutions to report suspicious activity involving pig butchering scams by filing suspicious activity reports (SARs) that reference the Alert. Specifically, financial institutions should “reference this alert in SAR field 2 (Filing Institution Note to FinCEN) and the narrative by including the key term ‘FIN-2023PIGBUTCHERING’ and selecting ‘Fraud-Other’ under SAR field 34(z) with the description ‘Pig Butchering.’”

<a href="https://www.fincen.gov/news/news-releases/fincen-issues-alert-prevalent-virtual-currency-investment-scam-commonly-known">FinCEN Issues Alert on Prevalent Virtual Currency Investment Scam Commonly Known as “Pig Butchering”</a>

<a href="https://www.fincen.gov/sites/default/files/shared/FinCEN_Alert_Pig_Butchering_FINAL_508c.pdf">FIN-2023-Alert005: FinCEN Alert on Prevalent Virtual Currency Investment Scam Commonly Known as “Pig Butchering”</a>

Lazarus Group Hacks Crypto for $41M and $55M; Wash Trading Data Published

The U.S. Federal Bureau of Investigation (FBI) recently published a press release “to warn the public regarding the theft of approximately $41 million in virtual currency from Stake.com, an online casino and betting platform.” According to the press release, the FBI “confirmed that this theft took place on or about September 4, 2023, and attributes it to the Lazarus Group,” a criminal organization associated with the government of North Korea. The FBI press release includes a list of cryptocurrency public keys that received the hacked funds. In a separate development, a cybersecurity firm recently reported that the Lazarus Group was responsible for the theft of approximately $55 million in cryptocurrencies stolen in a recent hack of the CoinEx cryptocurrency exchange.

According to another recent report, the social media profile of Ethereum co-founder <a>Vitalik Buterin </a>was hacked and subsequently used to promote a non-fungible token (NFT) scam that resulted in losses to victims of approximately $691,000. The scam was reportedly facilitated through a fraudulent social media post containing a malicious link. Victims who followed the link were prompted to connect their crypto wallets to receive an NFT, but instead the hackers gained access to and stole crypto from the wallets.

In a final notable item, a recent report from a decentralized finance (DeFi) trade surveillance and risk monitoring software firm provided findings on wash trading in the DeFi market. According to the report, “liquidity providers (LPs) on Ethereum-based decentralized exchanges (DEXs) have wash-traded at least $2 billion worth of cryptocurrency, manipulating the prices and volumes of more than 20,000 tokens.” The report also found that of the almost 30,000 DEX liquidity pools sampled, LPs have executed wash trades in 67% of the pools and wash trading has constituted 13% of the total trading volumes.

<a href="https://www.fbi.gov/news/press-releases/fbi-identifies-lazarus-group-cyber-actors-as-responsible-for-theft-of-41-million-from-stakecom">FBI Identifies Lazarus Group Cyber Actors as Responsible for Theft of $41 Million from Stake.com</a>

<a href="https://cointelegraph.com/news/coinex-north-korea-s-lazarus-group-responsible-for-55-m-coin-ex-hack-report">North Korea’s Lazarus Group responsible for $55M CoinEx hack: Report</a>

<a href="https://cointelegraph.com/news/ethereum-vitalik-buterin-x-hackers-drain">Vitalik Buterin’s X account hacked, over $691K drained from victims’ wallets</a>

<a href="https://www.soliduslabs.com/reports/crypto-wash-trading">Decentralized Exchange Liquidity Providers Have Wash Traded More Than $2 Billion to Date</a>

Digital Assets Client Alert: Sept. 14, 2023

By: <a href="https://www.bakerlaw.com/professionals/elizabeth-ann-smith/" target="_blank" rel="noreferrer noopener">Elizabeth Ann Smith</a>, <a href="https://www.bakerlaw.com/professionals/nicholas-c-mowbray/" target="_blank" rel="noreferrer noopener">Nicholas C. Mowbray</a>, <a href="https://www.bakerlaw.com/professionals/robert-a-musiala/" target="_blank" rel="noreferrer noopener">Robert A. Musiala Jr.</a>, <a href="https://www.bakerlaw.com/professionals/christina-o-gotsis/" target="_blank" rel="noreferrer noopener">Christina Gotsis</a> and <a href="https://www.bakerlaw.com/professionals/naomi-meisels/" target="_blank" rel="noreferrer noopener">Naomi Meisels</a>

The Internal Revenue Service (IRS) and the Department of the Treasury issued a 282-page notice of proposed rulemaking regarding digital assets and broker reporting on Aug. 26 (the Proposed Regulations), nearly two years after the enactment of the Infrastructure Investment and Jobs Act that expanded the broker reporting rules to include brokers of digital assets.&nbsp;The digital asset broker reporting rules were originally scheduled to take effect on Jan. 1, 2024, but the IRS announced on Dec. 23, 2022, that digital asset brokers would not need to report digital asset transactions until regulations implementing the provisions were finalized.&nbsp;The Proposed Regulations require brokers to (i) report gross proceeds from sales of digital assets occurring on or after Jan. 1, 2025, and (ii) report the adjusted basis and character of any gain or loss from the sale of digital assets occurring on or after Jan. 1, 2026. Below is a brief discussion of some of the key aspects of the Proposed Regulations.

For more information, please refer to the following link:

<a href="https://www.bakerlaw.com/insights/digital-asset-broker-regulations-target-defi-platforms-and-payment-processors/" target="_blank" rel="noreferrer noopener">Digital Asset Broker Regulations Target DeFi Platforms and Payment Processors</a>

Washington, D.C.

San Francisco

Partner

Teresa Goody Guillén

Chicago

Robert A. Musiala Jr.

Crypto Custody Services Expand; CFTC Enforcement Targets DeFi, SEC Targets NFTs; FinCEN Warns of Crypto Scams; Major Hacks Steal $41M and $55M; *Client Alert*