Crypto Regulation and Compliance Updates

Baltimore City has filed a lawsuit against Elon Musk’s X Corporation and its AI tool Grok, alleging that they generated sexualized images without consent and involved content involving minors, violating the Consumer Protection Law. This case marks progress in local government efforts to advance AI regulation in the absence of federal legislation, and may impact future legal liability for AI companies.

Backpack official on 3/25 revealed that external traders manipulated the BP price upward through the spot market to profit from bets on "BP FDV exceeding $200 million" on Polymarket. The investigation confirmed the operators were not insiders. The official emphasized zero tolerance for market manipulation, while Polymarket updated rules to prohibit related manipulation. The BP token declined over 25% since its 3/23 TGE.

As virtual currency investment trends rise, Taiwan's Legislative Yuan is focusing on whether "crypto teachers" and signal-calling behavior mislead investors. The Financial Supervisory Commission plans to regulate such conduct under the Consumer Protection Act for Financial Consumers, including KOL advertising and promotions. The Citizens Party has proposed requiring virtual asset service providers to disclose information and ban misleading advertisements, while the industry faces practical implementation challenges and is establishing self-regulatory mechanisms to ensure compliance.

Gate News reported that on March 25, CZ posted a warning on the X platform stating that anyone claiming to help projects get listed on a certain CEX can be considered a liar, especially those claiming to know CZ or have a close relationship with him. CZ stated that in 99.999% of cases, he does not know these people, and if he actually does know them, he will blacklist them. He also reminded users to stay vigilant and beware of such scam activities.

Changpeng Zhao (CZ) warned on the X platform that "listing facilitation" services in the crypto industry are mostly scams, and intermediaries claiming they can help projects get listed through connections should be viewed as high-risk. The listing process requires strict review and cannot be influenced by personal relationships. CZ called on projects to enhance compliance capabilities through official channels and reduce fraud risks.

OpenAI member Karpathy has pointed out that the LiteLLM development tool suffered a supply chain attack, resulting in the theft of sensitive information such as user SSH keys. The compromised version has been removed from PyPI, and the malicious code could cause widespread data leaks through simple installation. The attack persisted for approximately 1 hour after being exposed. The development team has taken measures to prevent recurrence.

Jump Trading has responded to a lawsuit filed by Terraform Labs bankruptcy trustee Todd Snyder, alleging market manipulation and investor fraud, with demands for $4 billion in compensation. Jump Trading claims the lawsuit consists of false allegations made by Snyder to evade SEC penalties and states that it lacks critical details, requesting dismissal of the case.

The U.S. Commodity Futures Trading Commission (CFTC) has established an "Innovation Task Force" aimed at integrating regulation of AI, crypto assets, and prediction markets, while coordinating asset classification with the Securities and Exchange Commission (SEC). The task force will establish clear regulatory pathways, reduce compliance costs for enterprises, enhance regulatory predictability, and address challenges in the rapidly growing digital financial market.

Backpack officially stated that a certain trader holds large open positions on Polymarket, believing that the BP token's FDV will exceed $200 million one day after TGE, and attempted to push the price above $0.2. After investigation, these traders are unrelated to Backpack, and the company maintains zero tolerance for insider trading.

US senators announced a bipartisan agreement on the principles of the CLARITY Act between cryptocurrency businesses and banking industry, establishing boundaries on what stablecoin yield mechanisms are prohibited versus permitted—banning passive income while allowing activity-based rewards tied to user behavior. This measure aims to protect traditional deposit operations while preserving innovation space for crypto platforms. Regulators' definition of "activity" is expected to become the main point of contention, with specific rules anticipated within one year.

On March 25, Slowmist Chief Information Security Officer 23pds revealed that attackers exploited the LiteLLM vulnerability to steal approximately 300GB of data and 500,000 credentials. He advised cryptocurrency developers to immediately check and rotate relevant keys to prevent losses. LiteLLM had previously suffered supply chain attacks with severe impact.