Tag: CyberSecurity

Kiffmeister’s #Fintech Daily Digest (20230912)*

~ kiffmeister ~ Leave a comment

BIS and Israel and HK central banks examine security, privacy and accessibility in CBDC design

Project Sela, a joint experiment conducted by the Bank for International Settlements (BIS) and the Israeli and Hong Kong central banks, showed that a retail central bank digital currency (CBDC) ecosystem can combine accessibility, competition and preventative cyber security, while retaining key advantages of physical cash. In Sela, the retail CBDC ledger is operated by the central bank without compromising end user privacy as personal identifiers are obfuscated. Retail payments are therefore settled directly on the central bank’s balance sheet in a privacy-preserving manner, meaning instant finality for transactions. [Read more at the BIS]

PayPal introduces on and off ramps for Web3 payments

U.S.-based PayPal users can now seamlessly convert their crypto into USD with its new off-ramp service. The company had already been operating an on-ramp service for its customers, allowing them to purchase crypto-assets. Currently, the new service is available to decentralized applications (dApps), wallets, and non-fungible token (NFT) marketplaces and is also available to users on MetaMask. Also Web3 merchants can integrate the new off-ramp service and connect to robust security controls and tools for fraud management, disputes, and chargebacks. [Read more at PayPal]

There are now two types of PayPal dollars, and one is better than the other

Interestingly, JP Koning shows that of the two types of US dollar digital currencies now offered by Pay Pal, its PayPal USD (PYUSD) stablecoins are actually safer than its the traditional account offering. Better quality assets back PYUSD, they are ranked more senior to other creditors if PayPal goes kaput in most states, and they are disclosed more transparently. Notably, PayPal’s regular accounts are regulated piecemeal under each U.S. states’ own peculiar version of a money transmitter license, that can almost always be legally backed by riskier assets, and typically do not require that they be held in trust solely for the benefit of customers. [Read more at Moneyness and the Cornell Law Review]

NIST stablecoin report highlights security and stability concerns

The US National Institute of Standards and Technology (NIST) published a report on stablecoin security considerations. These include unauthorized or arbitrary minting; vulnerability in smart contract codes leading to the theft of the stablecoin’s on-blockchain reserves, the malicious hacking or updating of smart contract codes, denial-of-service attacks on the data oracles that provide the smart contracts with off-blockchain information, and attacks on the underlying blockchain. The stability and trust issues the report identifies vary based upon the stablecoin use case, as well as the kind of marketplace that the stablecoins are traded upon. [Read more at NIST]

*For those interested in intra-day updates, check out my searchable Diigo Fintech developments database, which is also a good place to go to query for past developments: https://www.diigo.com/user/kiffmeister/ART.

Kiffmeister’s central bank digital currency monthly monitor

Just a reminder that I produce a monthly digest of central bank digital currency (CBDC) developments exclusively for the official sector. So (only) if you work at a central bank, ministry of finance or international financial institution (e.g., the BIS, IMF, OECD, World Bank) and who would like to receive it by email on the first business day of every month, please DM me on LinkedIn or email me at chronicles@kiffmeister.com.

The Sovereign Official Digital Association (SODA) is a technology-agnostic firm offering advisory services at the intersection of central banking, digital finance and the web3 industry, aiming to make public digital money a reality. SODA believes institutions in the existing financial ecosystem should have access to the tools and resources they need to move from discussion to action. SODA offers ‘real life’ use cases to help test digital money and drive adoption as central banks and other public institutions explore the future of a more financially inclusive world powered by interoperable blockchain-based networks. SODA would love you to join us on this journey – please get in touch (chris@sodapublicmoney.org).

Satoshi Capital Advisors is a New York-based, global advisory firm that works with central banks, governments, and the private sector to architect, implement, and operate varying initiatives. Satoshi Capital Advisors’ central bank work revolves around CBDC architecture and implementation, providing advisory services from research phase through to growth phase. Utilizing a product-market fit and technology agnostic approach to CBDC architecture and implementation enables Satoshi Capital Advisors to build tailored solutions, bespoke to local financial system nuances. Satoshi Capital Advisors welcomes requests from central bank officials for virtual and in-person CBDC workshops. [Click here for more information]

WhisperCash offers the first fully offline digital currency platform that has the same properties as physical cash. It can perform secure consecutive offline payments without compromising on security, privacy or accessibility. WhisperCash allows direct person to person offline payments without any server infrastructure or internet connectivity. It comes in various form factors including the self-contained credit card-sized “Pro” that sports an eInk screen and capacitive keyboard, and lasts for two weeks between recharges assuming a few transactions per day. [Click here for more information]

Kiffmeister’s #Fintech Daily Digest (20230906)*

~ kiffmeister ~ Leave a comment

Blockchain privacy and regulatory compliance: towards a practical equilibrium

Ethereum’s Vitalik Buterin has co-authored a paper on a smart contract-based protocol designed to reconcile financial privacy with regulatory compliance. The core idea is to allow users to publish a zero-knowledge proof, demonstrating that their funds (do not) originate from known (un-)lawful sources, without publicly revealing their entire transaction transaction history. This is achieved by proving membership in custom association sets (“privacy pools”) that satisfy certain properties, required by regulation or social consensus.  [Read more on SSRN]

Bank of Canada explores impact of quantum computing on CBDCs

The Bank of Canada has engaged evolutionQ for a research project involving quantum-safe cybersecurity technologies for greenfield digital currencies. The Bank of Canada is exploring technologies and technical ecosystems that may inform decisions relating to the development of a potential digital loonie. The evolutionQ research will explore the impact of integrating quantum-safe encryption methods and crypto-agility as design goals for central bank digital currency (CBDC). The code developed during the research will be released as open source to give developers and researchers the opportunity to explore the new cryptographic methods.  [Read more at evolutionQ]

*For those interested in intra-day updates, check out my searchable Diigo Fintech developments database, which is also a good place to go to query for past developments: https://www.diigo.com/user/kiffmeister/ART.

Kiffmeister’s central bank digital currency monthly monitor

Just a reminder that I produce a monthly digest of central bank digital currency (CBDC) developments exclusively for the official sector. So (only) if you work at a central bank, ministry of finance or international financial institution (e.g., the BIS, IMF, OECD, World Bank) and who would like to receive it by email on the first business day of every month, please DM me on LinkedIn or email me at chronicles@kiffmeister.com.

The Sovereign Official Digital Association (SODA) is a technology-agnostic firm offering advisory services at the intersection of central banking, digital finance and the web3 industry, aiming to make public digital money a reality. SODA believes institutions in the existing financial ecosystem should have access to the tools and resources they need to move from discussion to action. SODA offers ‘real life’ use cases to help test digital money and drive adoption as central banks and other public institutions explore the future of a more financially inclusive world powered by interoperable blockchain-based networks. SODA would love you to join us on this journey – please get in touch (chris@sodapublicmoney.org).

Satoshi Capital Advisors is a New York-based, global advisory firm that works with central banks, governments, and the private sector to architect, implement, and operate varying initiatives. Satoshi Capital Advisors’ central bank work revolves around CBDC architecture and implementation, providing advisory services from research phase through to growth phase. Utilizing a product-market fit and technology agnostic approach to CBDC architecture and implementation enables Satoshi Capital Advisors to build tailored solutions, bespoke to local financial system nuances. Satoshi Capital Advisors welcomes requests from central bank officials for virtual and in-person CBDC workshops. [Click here for more information]

WhisperCash offers the first fully offline digital currency platform that has the same properties as physical cash. It can perform secure consecutive offline payments without compromising on security, privacy or accessibility. WhisperCash allows direct person to person offline payments without any server infrastructure or internet connectivity. It comes in various form factors including the self-contained credit card-sized “Pro” that sports an eInk screen and capacitive keyboard, and lasts for two weeks between recharges assuming a few transactions per day. [Click here for more information]

Kiffmeister’s #Fintech Daily Digest (20230902)*

~ kiffmeister ~ Leave a comment

I’ve updated my tabulation of retail central bank digital currency (#CBDC) explorers. There are now 95 with the addition of Mauritania. FYI my 95 is less than the Atlantic Council CBDC Tracker’s 130 mostly because I don’t “double count” currency zone countries: https://kiffmeister.com/2023/09/02/jurisdictions-where-retail-cbdc-is-being-explored-2/

Recent central bank digital currency developments in Asia and their implications

The Asian Development Bank (ADB) published a paper that analyzes the evolution of central bank digital currencies (CBDCs) in Asia and the Pacific, assesses their potential risks and technical challenges, and shows their potential to improve cross-border payments and financial inclusion. It details various models and explores how China, Singapore, and Thailand are taking the lead. Outlining global developments and emerging trends, it shows why a robust digital infrastructure, strong public–private collaboration, and Fintech literacy are central to ensuring CBDCs help drive the transition to a digital economy. [Read more at the ADB]

Functional consistency across retail CBDC and commercial bank money

Three Barclays staffers circulated a paper on how functional consistency could mitigate the risk of retail CBDCs fragmenting payments markets and retail deposits. In the context of the Bank of England’s digital pound platform model, they identify the common operational characteristics and design options to achieve this based on their provision by the central bank, payment interface providers, technical service providers (TSPs) or a financial market infrastructure (FMI). They conclude that a complete solution would need to combine the suitable design option(s) for each key capability and include common ecosystem services provided by an FMI and TSPs. [Read more at arXiv]

How does post-quantum cryptography affect central bank digital currency?

Lars Hupel (G+D) and Makan Rafiee (secunet) circulated a paper that provides insight into the future of cryptography as it applies to CBDC. They first give an overview of classical cryptographic algorithms and what they are used for in the CBDC context. Then, they introduce the threats that quantum computing poses, as well as post-quantum algorithms that address those threats. Equipped with this, they can then examine the cryptography in use for CBDC implementations and match them to appropriate algorithms. Finally, they propose an opinionated framework for rolling updates, i.e., to put the earlier insights into practice. [Read more at arXiv]

From clicks to claims: emerging trends and risks of big techs’ foray into insurance

The BIS published an overview of Bigtech involvement in insurance in 14 jurisdictions, analyzing their involvement from three main perspectives according to the activity they perform: as risk carriers, intermediaries or service providers. Currently, Bigtech’s regulated insurance activities as risk carriers or insurance intermediaries are limited, but that could change due to their potential to rapidly scale. The insurance activities of big techs are covered under existing insurance regulatory requirements, though none are specific to Bigtechs. Hence, regulatory frameworks based on suitable international standards that encompass all these activities and the risks they entail, including those beyond the remit of sectoral regulations, may be required. [Read more at the BIS]

*For those interested in intra-day updates, check out my searchable Diigo Fintech developments database, which is also a good place to go to query for past developments: https://www.diigo.com/user/kiffmeister/ART.

Kiffmeister’s central bank digital currency monthly monitor

Just a reminder that I produce a monthly digest of central bank digital currency (CBDC) developments exclusively for the official sector. So (only) if you work at a central bank, ministry of finance or international financial institution (e.g., the BIS, IMF, OECD, World Bank) and who would like to receive it by email on the first business day of every month, please DM me on LinkedIn or email me at chronicles@kiffmeister.com.

The Sovereign Official Digital Association (SODA) is a technology-agnostic firm offering advisory services at the intersection of central banking, digital finance and the web3 industry, aiming to make public digital money a reality. SODA believes institutions in the existing financial ecosystem should have access to the tools and resources they need to move from discussion to action. SODA offers ‘real life’ use cases to help test digital money and drive adoption as central banks and other public institutions explore the future of a more financially inclusive world powered by interoperable blockchain-based networks. SODA would love you to join us on this journey – please get in touch (chris@sodapublicmoney.org).

Satoshi Capital Advisors is a New York-based, global advisory firm that works with central banks, governments, and the private sector to architect, implement, and operate varying initiatives. Satoshi Capital Advisors’ central bank work revolves around CBDC architecture and implementation, providing advisory services from research phase through to growth phase. Utilizing a product-market fit and technology agnostic approach to CBDC architecture and implementation enables Satoshi Capital Advisors to build tailored solutions, bespoke to local financial system nuances. Satoshi Capital Advisors welcomes requests from central bank officials for virtual and in-person CBDC workshops. [Click here for more information]

WhisperCash offers the first fully offline digital currency platform that has the same properties as physical cash. It can perform secure consecutive offline payments without compromising on security, privacy or accessibility. WhisperCash allows direct person to person offline payments without any server infrastructure or internet connectivity. It comes in various form factors including the self-contained credit card-sized “Pro” that sports an eInk screen and capacitive keyboard, and lasts for two weeks between recharges assuming a few transactions per day. [Click here for more information]

Kiffmeister’s #Fintech Daily Digest (20230707)*

~ kiffmeister

CBDCTracker.org June 2023 global CBDC developments update

Atakan Kavuklu published a summary of key central bank digital currency (CBDC) developments reflected in the end-June CBDCTracker.org database update. [Read more at Medium]

NY Fed completes PoC for regulated digital asset settlement

The Federal Reserve Bank of New York’s New York Innovation Center (NYIC), in collaboration with members of the U.S. financial services sector, published the findings of a proof of concept (PoC) that explored the feasibility of an interoperable network for wholesale payments operating on a shared multi-entity distributed ledger. The research project, undertaken jointly with private sector organizations, experimented with the concept of a regulated liability network (RLN), a theoretical payment infrastructure designed to support the exchange and settlement of regulated digital assets. The experiment successfully simulated both the domestic and cross-border scenarios, identifying shared ledger technology as a potential solution to support payment innovation. [Read more at the NY Fed NYIC]

Project Polaris: closing the CBDC cyber threat modelling gaps

The BIS Innovation Hub (BISIH) published a report on Part II of its Project Polaris which focused on the risk and resilience aspects of CBDCs built on distributed ledger technology (DLT) based platforms. It analyses several notable DLT attacks in the decentralized finance (DeFi) domain, revealing that there are gaps in existing threat modelling techniques that may not adequately address the threats and associated security controls to properly protect CBDCs that make use of novel technology (e.g., DLT, smart contracts) from the tactics, techniques and procedures (TTPs) used by threat actors in the DeFi space. Additionally, the “mean time to attack” (based on the DLT attacks studied in this analysis) is around 10 months from the launch of a DeFi implementation and the successful compromise. Hence, CBDC issuers must be positioned to monitor and repel both well understood and novel TTPs. [Read more at the BISIH]

MAS amendments to restrictions on e-money personal payment accounts

Following a public consultation, the Monetary Authority of Singapore (MAS) is going to raise the caps on e-wallets during the second half of 2023. The maximum amount of funds that can be held at any given time (“stock cap”) in each e-wallet, is being raised from $5,000 to $20,000, and the maximum total outflow over a rolling 12-month period (“flow cap”) from each e-wallet, is being raised from $30,000 to $100,000. [Read more at the MAS]

Namibia passed bill to regulate crypto and digital assets

On June 22, Namibia’s lower house of parliament passed legislation to regulate digital assets, cryptocurrencies and virtual asset service providers (VASPs) in the country. It aims to establish a framework for licensing and regulating VASPs, and appoint a regulatory authority responsible for supervising these providers and their activities. The bill is now awaiting official publication before coming into effect. [Read More at CoinTelegraph]