SlowMist Confirms FomoPeek IOS App Store Poisoning Risk

SlowMist and OKX security teams said FomoPeek iOS versions 1.1 and 1.2 embedded malicious apptrace modules capable of remote control, privilege escalation, sandbox escape, and Keychain data exposure. Wallet and exchange compliance teams should treat affected seed phrases and private keys as compromised.

High impact🌐 GlobalAMLExchangeBTCETHSlowMistOKX

APAC FINSTAB analysis

Although this is outside core APAC, it is relevant because global market-structure, enforcement, and stablecoin precedents often shape licensing expectations for APAC exchanges, issuers, custodians, and DeFi teams. Protocols/assets in scope: BTC, ETH. Named institutions or platforms: SlowMist, OKX. Teams should monitor the original source, map the change to licensing, custody, disclosure, and market-access obligations, and update their jurisdiction playbooks before the next compliance review.

Compliance read-through: map this event to entity licensing, market-access, custody, disclosure, token listing, and operational-risk obligations before expanding or marketing in the affected jurisdiction.

View related AML tracker page →

Related policy events

September 21, 2026

Bank Of Russia Proposes One Percent Bank Crypto Capital Cap

The Bank of Russia proposed a 1% capital cap for banks' own crypto and foreign digital instrument exposures while carving out qualifying client custody positions. The proposal separates proprietary balance-sheet risk from segregated custody and would constrain bank-group crypto capacity.

High impact🇷🇺 RussiaRegulationBankingCustodyAMLBTCETH

APAC FINSTAB analysis → Original source ↗

September 21, 2026

Binance Wallet Opens Tokenized Pre IPO Access Through PancakeSwap

Binance Wallet launched a Pre-Access route via PancakeSwap that offers indirect tokenized exposure to potential pre-IPO companies, with allocations tied to Alpha Points, bStocks activity, and wallet holdings. The product raises compliance questions around investor eligibility, transfer restrictions, underlying rights, and disclosure for self-custody users.

High impact🌐 GlobalTokenizationRegulationExchangeLicensingBNB

APAC FINSTAB analysis → Original source ↗

September 21, 2026

SingularityNET Exploit Mints Unauthorized AGIX And WMTX Supply

PeckShield-linked monitoring reported that an attacker exploited SingularityNET-related bridge contracts to mint 260 million AGIX and 53.83 million WMTX on Ethereum. The incident forces exchanges and liquidity venues to reassess deposit controls, contaminated liquidity, and token-supply integrity.

High impact🌐 GlobalAMLDeFiEnforcementAGIXWMTXETH

APAC FINSTAB analysis → Original source ↗

September 20, 2026

Costa Rica Court Sentences Two Men In 5Dimes Bitcoin Ransom Laundering Case

A Costa Rican criminal court sentenced two men to 12 years in prison for laundering Bitcoin ransom proceeds tied to the 2018 5Dimes kidnapping case. The judgment shows that old BTC flows can remain traceable through cross-border investigations, exchange records and long-cycle asset-laundering prosecutions.

Medium impact🌐 CREnforcementAMLBTC

APAC FINSTAB analysis → Original source ↗