blocksec: hong kong-owned stabilization currency hkdap contract has multiple security and compliance issues
Following a review by block chain security of the Hong Kong-owned Hong Kong dollar-fixed Hkdap ETA contract, it was stated that there were a number of security and compliance issues, including the cancellation logic of the KYC, the lack of physical verification of the KYC proof on the chain, and the concentration of some high-risk privileges. Blocksec notes that the operational components of the increased, frozen, suspended and forced destruction of hkdap can be performed by a single player and that the governance process lacks time-locks, and finds the design inconsistent with the Hong Kong Monetary Authority ' s regulatory guidelines on high-risk operations and segregation of duties. hkdap was launched by the association of Slags in Hong Kong, HKT and Animoca Brands, which was one of Hong Kong's first two licensed and stable currency issuers。
