South Korean Financial Regulator Says U.S. Bitcoin ETFs May Violate Local Law

CoinDeskPolicy2024-01-11 tarihinde yayınlandı2024-01-12 tarihinde güncellendi

Özet

Further review and consideration regarding crypto ETFs is planned, the regulator says.

South Korea’s Financial Services Commission (FSC), the nation’s financial regulator, said in a statement that recently-listed U.S. bitcoin ETFs may violate Korean law.

The regulator says that domestic brokerage of a U.S.-listed bitcoin spot ETF by Korean securities firms may potentially conflict with the country’s Virtual Asset User Protection Act and the Capital Markets Act without elaborating.

In 2017, The Bank of Korea’s governor, Lee Ju-yeol, stated that cryptocurrencies are commodities, not legal tender, and emphasized the need for regulation in this area.

Advertisement
Advertisement

The FSC said in its notice that further review is coming. SEC chair Gary Gensler is scheduled to meet his Korean counterpart sometime this month in Washington, DC.

Recently, authorities in South Korea said they were planning on creating regulations that would make officials’ crypto holdings public.

In the U.S., Vanguard has decided not to offer spot bitcoin ETFs, including BlackRock’s iShares Bitcoin Trust (IBIT) and Grayscale Bitcoin Trust (GBTC), on its platform, citing what it calls a misalignment with the company’s investment portfolio strategy.

Edited by Parikshit Mishra.


İlgili Okumalar

Access to Active Sessions Instead of Databases: How the Shadow Market in Russia Has Changed

The Russian cybercriminal underground is shifting from selling massive, stolen corporate databases to trading active, short-term access to user accounts, according to a 2026 report. The value of information intercepted directly from infected devices by malware has risen nearly 13% in a year. Attackers now sell packets containing active session tokens (bypassing passwords and two-factor authentication), live email credentials, VPN and cloud storage logins, and corporate network access. A subscription for a steady stream of fresh data costs $250-$300 per month, far exceeding the value of outdated archives. While Russian regulators have successfully penalized companies for data leaks from centralized storage—with no repeat violations recorded after imposing turnover fines—this framework fails against the new threat model. Malware now steals data *after* it leaves the corporate perimeter and is on a user's personal device, a legal grey area. In 2026, 60% of studied web attacks aimed to steal keys for infiltrating corporate infrastructure. The situation mirrors global trends, akin to the Genesis Market shutdown in 2023, and highlights a structural risk: the demand for "fresh" data incentivizes botnet operators to maintain long-term control of infected devices for recurring revenue. This creates a persistent vulnerability layer between personal devices and corporate networks, currently outside the reach of existing regulatory protections.

cryptonews.ru1 saat önce

Access to Active Sessions Instead of Databases: How the Shadow Market in Russia Has Changed

cryptonews.ru1 saat önce

SlowMist Flags Fake Qwen 3.8 27B GitHub Repository Concealing StealC Information

SlowMist has identified a fake GitHub repository impersonating Alibaba's Qwen 3.8 27B AI model, which contains an information-stealing virus. The repository, created in August 2026, offered a download file of only 487 KB, far smaller than a legitimate 27-billion-parameter model (over 16 GB). The malicious ZIP file contained a Lua-based script disguised as a certificate, which deploys the StealC malware. Once executed, StealC harvests system data, takes screenshots, and steals browser credentials, cryptocurrency wallet information, and more, sending it to attacker-controlled servers. The malware also includes a backup system that can read new server addresses from the Polygon blockchain if the primary server is taken down. This incident is part of a broader campaign called FakeGit, active since March 2025, which has created thousands of malicious repositories. Approximately 800 of these specifically target AI tools using a method called AgentBaiting, sometimes tricking AI assistants into recommending them. Separate reports detail hundreds of other fake GitHub repositories spreading malware like BoryptGrab and campaigns like Megalodon that generate thousands of clones rapidly. Attackers copy legitimate projects, create convincing documentation, and even list them on public AI registries to appear trustworthy. The fake repositories exploit the high demand for open-source AI capabilities, putting users who run models locally at significant risk of data theft.

cryptonews.ru1 saat önce

SlowMist Flags Fake Qwen 3.8 27B GitHub Repository Concealing StealC Information

cryptonews.ru1 saat önce

İşlemler

Spot
活动图片