📰 Key Takeaways

After Binance suffered a $6.3 billion hack, South Korea’s Financial Services Commission (FSC) urged domestic crypto exchanges to raise the share of assets held in cold wallets. The FSC held an emergency meeting with other regulators, security agencies, and crypto service providers to review exchanges’ IT access controls, wallet withdrawal approval and signing procedures, and admin permissions. That said, Korean rules already require exchanges to keep at least 80% of user crypto assets in cold storage. Upbit’s cold wallet ratio is 99.17%, Bithumb’s is 94.76%, and Coinone’s is 85%. The Bank of Korea also surveyed 31 financial institutions, asking how a major exchange outage, a prolonged crypto market slump, or a big crypto-related loss at another institution would affect each one’s operations. One scenario was the exchange with the largest market share temporarily shutting down after a major hack. North Korea denied involvement in the $6.3 billion Binance attack. Kim Yo Jong said the US Federal Bureau of Investigation (FBI) wants to paint North Korea as a “cybercrime state,” called the US claims absurd, and hinted that Americans might be behind it. Separately, the South Korean government supports delaying the tax on crypto gains by another two years, to 2029. Crypto.com will end its consumer app service in Hong Kong on February 1, 2027. Customers have been notified in advance and will get instructions for closing accounts and withdrawing funds, while the company keeps pursuing regulatory approval for an institutional exchange. Its local entity has been waiting on a license for nearly three years and is currently in a transitional “deemed licensed” status. Meanwhile, Hong Kong-based Animoca Brands received approval in Abu Dhabi to manage investment funds for non-retail clients. See the original article for more details.

💬 JudyAI Lab Take

After the $6.3 billion hack at Binance, South Korean regulators are zeroing in on cold wallet ratios and internal access controls. This story matters because it shows how one overseas incident can immediately push regulators in other countries to re-examine their own systems.

For AI builders, the lesson here is that risk often lives in the process, not just in the technology. The FSC is reviewing wallet withdrawal approval and signing procedures and admin permissions, and all of that comes down to one design question: who can move assets, and under what conditions. Korean exchanges already have very high cold wallet ratios, with Upbit at 99.17% and Bithumb at 94.76%, yet regulators still want another check. Hitting a single metric isn’t enough. Layered permissions and multi-step approvals are what count. The Bank of Korea even simulated a scenario where “the exchange with the largest market share temporarily shuts down after a hack.” That habit of assuming the worst case first, then working backward to the impact, applies just as well to the automation systems and AI agents we build.

My suggestion for this week: list which operations in your AI tools can use keys, make payments, or delete data without human confirmation, then add a second approval step to the most sensitive one.

📅 Original Article Info

🔗 Further Reading