New Zealand's financial regulator has designated a local currency-pegged stablecoin, NZDD, as not a financial product—a distinction that a leading law firm says could sharpen regulatory clarity for stablecoins and fintech pilots. The Financial Markets Authority (FMA) published the designation in a designations notice tied to its fintech sandbox initiative. The authority stressed that NZDD's economic substance is that it is not a debt security, not an investment, and that holders do not receive income, interest, or other gains. While the move is product-specific, it signals a pragmatic approach to financial innovation that seeks to balance market access with investor protections. Key takeaways The designation confirms NZDD is not treated as a debt security or an investment under current rules, setting a clearer expectation for issuers and users of currency-pegged stablecoins in New Zealand. The ruling stems from the FMA's fintech sandbox, illustrating how live testing o...
Security researchers have uncovered a flaw in MediaTek’s mobile chipsets that could enable attackers to harvest crypto seed phrases from vulnerable devices simply by connecting a phone to a computer via USB. The vulnerability targets the secure boot chain, a layer designed to boot devices only with authorized software, and was disclosed by Ledger’s white-hat security team, Donjon. A patch was rolled out by MediaTek on January 5, but users who have not updated their devices remain exposed to potential attacks. In practical terms, an assailant with physical access could bypass a device’s protections and access sensitive wallet data without needing to unlock the device, underscoring how far security gaps in consumer hardware can reach in the crypto era. Ledger notes that roughly a quarter of Android devices rely on MediaTek processors paired with the Trustonic Trusted Execution Environment (TEE), a combination the research found to be particularly exploitable. Donjon demonstrated the proo...