News related to
breaches

The five-year acceleration in user activity reflects a maturing market that has gradually moved from speculative volatility toward widespread utility and integrated applications. Analysts link this exponential climb not only to rising asset prices but also to expanding real-world use cases and adoption in emerging markets where crypto offers alternatives to unstable fiat currencies or limited banking access.

Between 2020 and 2021, crypto markets experienced a spike in retail investor interest as Bitcoin and Ethereum reached new price highs. But the subsequent years saw a more diversified set of contributors to active user growth. These included Layer-2 solutions that reduced transaction costs, central bank scrutiny that validated digital assets as long-term economic factors, and increased capital flows into decentralised applications that are now used for lending, trading, and payments.

The upswing has also been aided by a shift in demographics. Users between the ages of 18 and 35 continue to dominate, but there is a discernible rise in users over 50 participating in digital asset portfolios through robo-advisors and automated wealth apps. Fintech platforms have played a central role in onboarding new users, offering wallet services directly within traditional mobile banking interfaces, especially in Southeast Asia, Latin America, and Sub-Saharan Africa.

Regulatory tailwinds have also contributed to this surge. After years of ambiguity, several governments began laying out clearer frameworks for crypto usage and taxation. The European Union’s Markets in Crypto-Assets regulation, now in force, has created greater legal clarity for wallet providers and stablecoin issuers. Meanwhile, jurisdictions such as Singapore, the UAE, and Hong Kong have developed regulatory sandboxes that attract developers without compromising on compliance. The clarity around Know-Your-Customer norms and licensing requirements has encouraged institutional custodians and payment processors to enter the space, further legitimising its growth.

Daily active wallet addresses, which measure unique addresses interacting with blockchain networks, are now being driven by utility rather than speculation. Decentralised social media platforms, blockchain-based gaming, and metaverse transactions contribute heavily to user engagement. On-chain metrics show that average wallet-to-wallet transactions have grown in both frequency and diversity, indicating a broader shift from holding digital assets to actively using them.

Stablecoins remain a major catalyst. With daily transaction volumes frequently surpassing those of major card networks, these tokens are increasingly used for remittances, salaries, and cross-border commerce. Businesses in Argentina, Nigeria, and the Philippines now routinely accept stablecoins to hedge against inflation and currency volatility. Dollar-pegged tokens such as USDT and USDC remain dominant, but a new wave of regionally anchored stablecoins linked to the euro, yen, and dirham are gaining traction.

This growth has coincided with new product launches by global crypto service providers. Coinbase, Binance, and OKX have all introduced wallet products tailored for mobile-first users, while decentralised apps like MetaMask and Trust Wallet have streamlined onboarding by integrating fiat-to-crypto gateways and social recovery features. Wallet-as-a-service solutions have also proliferated, allowing e-commerce platforms and loyalty programmes to integrate tokenised rewards and payments.

However, the expansion hasn’t been without setbacks. Security breaches and phishing attacks continue to pose significant threats, especially on mobile wallets lacking robust encryption or biometric safeguards. In 2024 alone, more than $600 million was reportedly lost to wallet-targeted hacks. This has forced wallet providers to enhance security protocols and increase user education around seed phrase storage and recovery mechanisms.

The surge in user activity also raises questions about scalability and environmental impact. Ethereum’s successful shift to a proof-of-stake consensus has alleviated some concerns, reducing energy consumption by over 99 percent, but congestion on other chains like Solana and BNB Smart Chain persists during peak usage periods. Developers are now turning to zero-knowledge rollups and modular chain architectures to manage the growing demand without compromising on decentralisation or throughput.

Investment in wallet infrastructure has sharply increased, with venture funding in crypto wallet startups exceeding $2.5 billion over the past year. Several firms are focusing on embedded crypto solutions that operate invisibly behind e-commerce and payment interfaces, enabling crypto usage without requiring users to understand blockchain mechanics. This backend integration has become crucial to onboarding the next 100 million users, according to fintech consultants.

On the macroeconomic front, crypto wallets are increasingly being viewed as components of digital identity. National digital currency trials in countries like Brazil and India are exploring hybrid models that link sovereign wallets to decentralised ones, potentially enabling programmable money systems that maintain user agency while complying with monetary policy.

As blockchain integration deepens across sectors, from healthcare to real estate, wallet functionality is expanding beyond currency storage. New generations of wallets offer token-gated access, voting rights in decentralised autonomous organisations, and certification for digital credentials. These features are pushing crypto adoption beyond financial speculation into everyday life.

The UAE Football Association has imposed substantial sanctions on Sharjah FC’s Khalid Al Dhanhani and Shabab Al Ahli’s Sultan Adil, levying fines of Dh500,000 each and domestic bans spanning five matches. Both clubs have expressed full support for the association’s decision and announced plans to initiate internal reviews into the conduct of the players involved.

The disciplinary measures follow an investigation into conduct deemed inappropriate during recent fixtures in the UAE Pro League. The Football Association’s decision signals a firm stance on maintaining discipline and sportsmanship standards in the country’s top-tier football competitions. Sharjah and Shabab Al Ahli, two of the UAE’s most prominent clubs, have publicly committed to cooperation with the governing body’s directives and have vowed to undertake rigorous internal probes aimed at preventing future breaches.

Officials from Sharjah FC described the imposed sanctions as “just and necessary,” underscoring the club’s zero-tolerance policy towards behaviour that undermines the integrity of the sport. Similarly, Shabab Al Ahli representatives reiterated their support for the Football Association’s rulings, stressing the importance of upholding the reputation of UAE football on domestic and regional stages.

The cases against Al Dhanhani and Adil reportedly involved incidents that breached the association’s code of conduct, though specific details about the nature of the violations have been withheld from public disclosure to protect all parties involved. Observers note that the magnitude of the fines and bans reflects the association’s increased commitment to enforcing discipline and deterring misconduct in a league that continues to grow in regional prominence.

This move aligns with broader efforts by the UAE Football Association to professionalise the sport locally and align with international standards of governance and fairness. The recent enforcement of hefty penalties on high-profile players sends a message to the football community that violations, irrespective of player status, will attract stringent consequences.

Inside the clubs, internal investigations are expected to scrutinise not only the incidents leading to the penalties but also the systemic factors that may have contributed to the lapses in conduct. Sharjah and Shabab Al Ahli’s initiatives aim to reinforce codes of behaviour, improve player education regarding sportsmanship, and implement monitoring mechanisms to prevent recurrence.

The UAE Pro League, which features many international talents alongside local stars, has seen increased scrutiny over player behaviour and match officiating standards in recent seasons. The Football Association’s disciplinary committee has stepped up its vigilance to safeguard the league’s competitive integrity and enhance its appeal to sponsors and fans alike.

Football experts within the region have welcomed the decisive action taken by the association, noting that maintaining discipline is crucial as UAE clubs seek to compete more effectively in continental competitions such as the AFC Champions League. The implementation of fair play principles is viewed as integral to sustaining the sport’s development and nurturing young talent under professional frameworks.

While the penalties levied are severe, they also serve as an opportunity for the players to reflect on their professional conduct and align with the expectations set by their clubs and governing bodies. Both Al Dhanhani and Adil remain key figures within their teams, and their return following suspension will likely come with an emphasis on exemplary behaviour.

The financial fines represent a significant deterrent, especially in a league where clubs are increasingly investing in player welfare and development. The sanctions highlight the balance sought between disciplinary action and the need to foster a positive competitive environment that encourages respect among players, coaches, and officials.

The Football Association’s handling of this matter has been consistent with international best practices, reflecting a growing maturity in sports governance within the UAE. Clubs across the league are anticipated to reinforce internal policies and promote awareness to ensure alignment with the standards enforced by the governing body.

The disciplinary episode involving Al Dhanhani and Adil has also drawn attention to the broader cultural and professional expectations within UAE football, emphasising accountability and ethical behaviour as non-negotiable elements of athlete performance. As clubs prepare for the next stages of the season, the message from the association and participating teams is clear: professionalism and discipline will be upheld at all costs.

Elon Musk has announced the rollout of XChat, a new messaging feature on the X platform, integrating end-to-end encryption, vanishing messages, and support for various file types. Developed in Rust, XChat also offers audio and video calling capabilities without requiring a phone number, marking a significant shift in the platform’s communication tools.

The introduction of XChat follows the discontinuation of X’s previous encrypted direct messaging system, which had been available to paid subscribers for two years. The new system is gradually being made accessible to premium users, with broader availability expected in the coming weeks.

Central to XChat’s security is its “Bitcoin-style” encryption, a term Musk uses to describe the platform’s adoption of elliptic curve cryptography . This method, also employed in Bitcoin transactions, provides robust security with smaller key sizes, enhancing performance and reducing resource consumption. While specific details about the encryption implementation remain undisclosed, the approach suggests a focus on decentralized and secure communication.

The choice of Rust as the programming language for XChat underscores a commitment to safety and performance. Rust’s emphasis on memory safety helps mitigate vulnerabilities common in other languages, such as memory corruption, which has been a significant source of security issues in software development.

XChat’s features extend beyond encryption. Users can send messages that automatically disappear after a set period, enhancing privacy. The platform supports the transfer of various file types, catering to diverse communication needs. Notably, audio and video calls can be made without linking to a phone number, allowing for greater anonymity and flexibility across devices.

This development aligns with Musk’s broader vision of transforming X into a comprehensive “everything app,” akin to China’s WeChat. By integrating messaging, calling, and file-sharing functionalities, X aims to become a central hub for users’ digital interactions. Plans are also underway to introduce X Money, a digital wallet service developed in partnership with Visa, enabling peer-to-peer payments and further expanding the platform’s ecosystem.

As XChat enters the competitive messaging landscape, it positions itself against established players like Signal and Telegram. While these platforms have long prioritized user privacy and security, XChat’s integration into the broader X platform offers a unique proposition. However, experts advise caution, noting that XChat has yet to undergo independent security audits, a standard practice for verifying the robustness of encryption protocols.

The move towards enhanced privacy features reflects a growing demand among users for secure communication channels. With increasing concerns over data breaches and surveillance, platforms that prioritize user confidentiality are gaining traction. XChat’s emphasis on encryption and user control over messages indicates an awareness of these concerns and a response to the evolving digital landscape.

Companies handling sensitive customer data are increasingly adopting SOC 2 audit readiness as a strategic imperative, not merely a compliance checkbox. This proactive approach is becoming essential for businesses aiming to secure partnerships, streamline operations, and fortify their reputations in a competitive digital landscape.

SOC 2, developed by the American Institute of Certified Public Accountants , evaluates an organisation’s controls related to security, availability, processing integrity, confidentiality, and privacy. Achieving SOC 2 compliance demonstrates a company’s commitment to data protection and operational excellence.

A SOC 2 readiness assessment serves as a preliminary evaluation to identify and address potential gaps in an organisation’s control environment before undergoing the formal audit. This process involves a thorough review of policies, procedures, and systems to ensure they align with the Trust Services Criteria. By conducting this assessment, companies can proactively mitigate risks and enhance their security posture.

The benefits of SOC 2 readiness extend beyond compliance. Organisations that complete the assessment often experience increased efficiency in their audit processes, reduced time and resources spent on remediation, and improved confidence among stakeholders. Furthermore, a successful SOC 2 audit can serve as a competitive differentiator, signalling to clients and partners that the company prioritises data security and integrity.

In sectors where data breaches can have significant financial and reputational consequences, SOC 2 readiness is particularly valuable. It enables companies to identify vulnerabilities, implement robust controls, and establish a culture of continuous improvement in their security practices. This proactive stance not only safeguards sensitive information but also positions organisations as trustworthy and reliable partners.

Scammers operating in the UAE have increasingly exploited WhatsApp’s business platform to impersonate trusted contacts, aiming to extract sensitive personal and financial information from unsuspecting users. This surge in fraudulent activity has prompted Meta, WhatsApp’s parent company, to initiate a targeted public awareness campaign by directly messaging users in the UAE with detailed guidelines to distinguish legitimate business profiles from fake ones.

These deceptive practices often involve scammers creating profiles that mimic reputable companies or individuals, using official logos and business names to gain credibility. The impersonators then contact users, requesting confidential details such as passwords, banking information, or verification codes under various pretexts, including prize claims, urgent payments, or account verification. Such tactics prey on the trust that users place in familiar or official-seeming contacts, making it crucial to understand the warning signs of fraudulent profiles.

Meta’s communication emphasises several practical steps for users to verify the authenticity of business accounts on WhatsApp. Genuine business profiles typically feature a green checkmark badge, signifying that WhatsApp has verified the account’s authenticity. Additionally, the FAQ highlights that official business accounts often provide clear contact information, including physical addresses and email IDs, which can be cross-checked independently. Users are advised to be cautious of unsolicited messages from accounts lacking these markers, especially if they request personal or financial information.

The prevalence of such scams in the UAE reflects a broader global trend where digital fraudsters exploit popular communication platforms. The UAE’s rapidly expanding digital economy and high smartphone penetration have made it an attractive target for cybercriminals. Reports indicate that these scams have led to significant financial losses and identity theft cases, affecting both individuals and businesses. Authorities in the region have responded by increasing collaboration with technology firms and law enforcement agencies to identify, disrupt, and prosecute offenders.

Cybersecurity experts underscore the importance of user vigilance and education alongside technological safeguards. They advise that users should not share one-time passwords , verification codes, or bank details via messaging apps. Moreover, any unsolicited requests for payments or personal data should be treated with scepticism. Experts also recommend reporting suspicious profiles directly to WhatsApp and local cybercrime units to aid in swift action against scammers.

WhatsApp has implemented several backend security measures to combat such misuse, including automated detection of suspicious accounts and the ability for users to block and report fraudulent profiles easily. However, the dynamic nature of scams means that fraudsters continuously evolve their methods to bypass safeguards, making user awareness a critical line of defence.

The UAE government has been proactive in addressing cybercrime through legal and regulatory frameworks. The Federal Law No. 5 of 2012 on Combatting Cybercrimes stipulates stringent penalties for offences involving electronic fraud, impersonation, and data breaches. These laws are complemented by public education initiatives and partnerships with the private sector to enhance digital literacy and security awareness across the community.

Telecommunications providers in the UAE have also joined efforts to strengthen network security and raise awareness about phishing and social engineering attacks. Campaigns targeting both consumers and corporate clients aim to provide up-to-date information on the latest threats and prevention strategies. These initiatives are crucial as social messaging platforms like WhatsApp remain primary communication channels for many residents and businesses in the country.

Despite these efforts, challenges remain due to the anonymous and borderless nature of cybercrime. Fraudsters often operate from outside the UAE, complicating jurisdictional enforcement. International cooperation and intelligence-sharing between countries have become essential components of the global response to digital fraud schemes. UAE authorities participate actively in such cooperative frameworks, seeking to enhance their capacity to track and dismantle scam networks.

Users are increasingly urged to adopt best practices for online security, including enabling two-step verification on WhatsApp accounts, regularly updating app software, and avoiding clicking on suspicious links. Businesses are encouraged to educate their customers about official communication channels and verify any unusual requests through direct contact.

Addverb Technologies, a prominent player in industrial automation, has joined forces with Infineon Technologies to introduce Bluetooth Low Energy -based safety systems for warehouse robots, marking a significant step forward in industrial automation safety and reliability. The partnership aims to enhance operational efficiency and safety in increasingly automated warehouse environments by leveraging Infineon’s expertise in semiconductor technology and Addverb’s robotics solutions.

Warehouse automation has surged worldwide as e-commerce and supply chain demands intensify. Robots navigating complex warehouse layouts must adhere to stringent safety protocols while maintaining seamless communication with control systems. Addressing this, Addverb and Infineon have developed a BLE-enabled safety system designed to deliver real-time monitoring and remote power management for automated guided vehicles and autonomous mobile robots .

This collaboration integrates Infineon’s advanced semiconductor solutions, including microcontrollers and sensor technologies, with Addverb’s proprietary robotics platforms. The BLE technology facilitates low-latency, reliable wireless communication critical to safety compliance. It allows continuous exchange of safety signals between robots and central control units, ensuring immediate response to any irregularities or hazards within warehouse operations.

The system is designed to remotely control power supply to the robots, enabling emergency shutdowns or power cycling without physical intervention. This capability not only reduces downtime but also enhances worker safety by allowing rapid isolation of malfunctioning units from the fleet. Moreover, the BLE safety infrastructure supports real-time diagnostics and predictive maintenance, allowing operators to preempt potential failures before they escalate.

Addverb has been pushing the boundaries of warehouse robotics with a portfolio ranging from material handling robots to complex automation systems tailored for sectors such as e-commerce, retail, and manufacturing. Integrating BLE safety measures elevates the reliability of these systems by ensuring that automated machines operate within strict safety parameters while maintaining agility in operations.

Infineon’s role in this venture capitalises on its leadership in power management and sensor technology. The company’s robust BLE chipsets and microcontrollers form the backbone of the wireless communication system, optimised for low power consumption and high security, crucial in sensitive industrial environments. Their solutions are designed to withstand electromagnetic interference and physical wear and tear common in industrial settings.

The strategic alliance arrives amid growing regulatory and industry focus on enhancing safety standards in automated environments. Warehouse robots often operate alongside human workers, making fail-safe communication protocols a top priority. The BLE-based system introduced by Addverb and Infineon addresses this need by ensuring that safety signals are transmitted reliably and instantaneously, thereby preventing accidents and equipment damage.

Experts highlight that BLE technology offers a unique combination of low power consumption and sufficient range to cover extensive warehouse floors, making it well suited for large-scale automation systems. The technology’s inherent security features also mitigate risks associated with wireless communication, such as hacking or data breaches, thereby safeguarding operational integrity.

The deployment of BLE safety systems is expected to improve automation scalability in warehouses. Facilities can add or reconfigure robots without extensive rewiring or additional hardware installation, reducing costs and increasing flexibility. The wireless nature of the system also facilitates rapid integration with existing warehouse management systems and industrial Internet of Things platforms.

Addverb and Infineon’s partnership exemplifies the growing trend of collaboration between robotics firms and semiconductor companies to address the evolving challenges of industrial automation. By combining domain expertise, the companies are pioneering solutions that not only boost productivity but also uphold the highest safety standards in demanding environments.

Industry analysts view the integration of BLE-based safety systems as a critical advancement that will likely set a new benchmark for warehouse automation safety protocols globally. The move aligns with broader trends towards digitisation and smarter factories, where connectivity, automation, and safety coalesce to drive operational excellence.

The focus on remote power control also reflects an industry-wide shift towards more intelligent energy management in automation. Robots consume significant amounts of energy, and their efficient power regulation reduces operational costs and environmental impact. By enabling precise remote power management, the Addverb-Infineon system contributes to sustainable automation practices.

South Korea has deferred the enforcement of the Credit Information Act on cryptocurrency exchanges until 1 December 2025, providing a grace period during which penalties will not be imposed unless violations involve intent or gross negligence. The Act mandates that crypto exchanges treat user transaction records as sensitive credit information, aligning them with traditional financial institutions in terms of data handling and protection.

This postponement allows exchanges additional time to adapt their systems and processes to comply with the stringent requirements of the Act. The Financial Services Commission has indicated that during this grace period, it will focus on guiding exchanges towards compliance rather than penalising them, unless there is clear evidence of deliberate or grossly negligent misconduct.

The Credit Information Act’s application to the crypto sector is part of South Korea’s broader initiative to regulate digital assets more comprehensively. The Act’s provisions require exchanges to implement robust data protection measures, including the secure storage of user data and the establishment of protocols to prevent data breaches. These measures are intended to enhance user trust and align the crypto industry’s practices with those of the traditional financial sector.

In the interim, the Virtual Asset User Protection Act, which came into effect on 19 July 2024, continues to govern the crypto industry. This Act mandates that exchanges store at least 80% of user deposits in cold storage, separate from their own funds, and entrust users’ cash deposits to licensed local banks. Additionally, exchanges are required to maintain cryptocurrency reserves matching customer deposits and to have insurance or reserve funds to cover potential losses from hacks or liquidity issues.

Malta’s Financial Intelligence Analysis Unit has levied a €1.1 million fine against cryptocurrency exchange OKX’s local subsidiary for significant breaches of anti-money laundering regulations. The penalty follows an onsite compliance examination conducted in April 2023, which uncovered several failures deemed “serious and systematic” by the FIAU.

The FIAU’s investigation revealed that OKX’s business risk assessment failed to adequately evaluate potential money laundering risks associated with the products it offered. This deficiency impaired the company’s ability to implement effective measures to mitigate such risks.

In response to the FIAU’s findings, OKX has reportedly taken steps to address the identified shortcomings. The company has implemented remedial measures to enhance its AML compliance framework, aiming to prevent future violations.

On 21 February 2025, Bybit, one of the world’s leading cryptocurrency exchanges, suffered a monumental security breach resulting in the theft of approximately 400,000 Ether tokens, valued at $1.5 billion. This incident has been identified as the largest cryptocurrency heist to date, surpassing previous records and sending shockwaves throughout the digital asset community.

The breach occurred during a routine transfer from Bybit’s cold wallet to a warm wallet—a standard procedure intended to ensure liquidity for daily operations. Attackers exploited this process by intercepting the transfer, redirecting the substantial sum to unknown addresses. Initial investigations have traced the hack to the Lazarus Group, a cybercrime organization associated with North Korea, notorious for orchestrating similar high-profile cyberattacks in the past.

In the immediate aftermath, Bybit’s market share plummeted from nearly 20% to a mere 5% by 2 March 2025, as users and traders sought more secure platforms. Binance emerged as a primary beneficiary during this period, with its market dominance soaring to 62% as traders migrated their assets. Other major exchanges, such as OKX and Coinbase, also experienced minor increases in market share, reflecting a broader redistribution of trading activity.

Bybit’s swift crisis response played a crucial role in stabilizing the situation. Unlike many exchanges that suspend withdrawals during security breaches, Bybit maintained operational status, allowing users to access their funds. This decision, coupled with consistent updates, helped maintain confidence and prevent mass withdrawals. The exchange also secured emergency funding from firms including Galaxy Digital, FalconX, and Wintermute, replenishing its reserves within 72 hours. By 9 March 2025, Bybit’s market share had rebounded to 9.04%. However, the exchange still faces significant reputational damage and lingering trust issues, raising doubts about its ability to fully regain its pre-hack position.

The incident has sparked discussions about the inherent vulnerabilities within the cryptocurrency ecosystem. While technological defenses continue to advance, this breach underscores that human error remains a critical weak point. INSEAD’s Ben Charoenwong emphasized that human failings, rather than technical glitches, are often the most significant factors in such incidents. He highlighted that a barrier to effective security is the reluctance to acknowledge ownership and responsibility for vulnerable systems.

The Bybit hack serves as a stark reminder of the importance of robust security protocols and the need for continuous vigilance in the rapidly evolving digital asset landscape. As the industry grapples with the implications of this unprecedented breach, stakeholders are urged to reassess their security measures, prioritize transparency, and foster a culture of accountability to safeguard against future threats.