Cryptocurrency Security and Regulatory Compliance 4 — Questions and Answers
Question 1: What is 'rug pull' fraud in the context of DeFi?
- When validators pull out of a staking pool suddenly
- When developers abandon a project and abscond with investor funds after removing liquidity (Correct answer)
- A regulatory seizure of DeFi protocol assets
- When liquidity providers remove funds during a market crash
Correct answer: When developers abandon a project and abscond with investor funds after removing liquidity
A rug pull occurs when project developers suddenly withdraw all liquidity from a DeFi pool, leaving investors with worthless tokens and no recourse.
Question 2: Which security feature does multisig (multi-signature) provide for a cryptocurrency wallet?
- It encrypts the wallet with multiple passwords simultaneously
- It requires multiple private key signatures before a transaction can be executed (Correct answer)
- It verifies a transaction across multiple blockchains at once
- It generates new addresses for every transaction automatically
Correct answer: It requires multiple private key signatures before a transaction can be executed
Multisig wallets require M-of-N key holders to sign a transaction before it is broadcast, reducing single point of failure risk.
Question 3: What was the significance of the SEC v. Ripple (XRP) ruling for crypto regulation?
- It classified all cryptocurrencies as commodities under CFTC jurisdiction
- It provided partial clarity by distinguishing institutional sales (securities) from programmatic exchange sales (not securities) (Correct answer)
- It established that all crypto tokens are exempt from securities laws
- It mandated that all exchanges register as national securities exchanges
Correct answer: It provided partial clarity by distinguishing institutional sales (securities) from programmatic exchange sales (not securities)
The 2023 ruling found XRP sales to institutional investors were securities but programmatic sales on exchanges were not, creating a contested but notable regulatory distinction.
Question 4: What is 'social engineering' in the context of cryptocurrency theft?
- Using blockchain analytics to map social networks of criminals
- Manipulating people psychologically to reveal private keys or send crypto to fraudsters (Correct answer)
- Engineering a social token protocol for community governance
- Building a decentralized social media platform
Correct answer: Manipulating people psychologically to reveal private keys or send crypto to fraudsters
Social engineering exploits human psychology rather than technical vulnerabilities—attackers impersonate support staff, romantic partners, or investment advisors to steal crypto.
Question 5: What is the primary purpose of on-chain analytics tools like Chainalysis in regulatory compliance?
- To optimize transaction fees for exchanges
- To trace the flow of funds and identify illicit activity on public blockchains (Correct answer)
- To mine cryptocurrency more efficiently
- To generate audit reports for DeFi protocols
Correct answer: To trace the flow of funds and identify illicit activity on public blockchains
Blockchain analytics firms cluster wallet addresses and trace fund flows to help exchanges, regulators, and law enforcement identify money laundering, sanctions violations, and fraud.
Question 6: What does the term 'KYC' stand for and why is it required for crypto exchanges?
- Keep Your Cryptocurrency — a wallet security standard
- Know Your Customer — an identity verification requirement under AML regulations (Correct answer)
- Key Your Credentials — a two-factor authentication protocol
- Know Your Counterparty — a DeFi liquidity verification standard
Correct answer: Know Your Customer — an identity verification requirement under AML regulations
KYC (Know Your Customer) requires exchanges to verify user identities to prevent money laundering, terrorist financing, and sanctions evasion under the Bank Secrecy Act.
Question 7: What is a 'flash loan attack' in DeFi security?
- A rapid brute-force attack on wallet passwords
- Exploiting uncollateralized instant loans to manipulate prices and drain protocol funds in a single transaction (Correct answer)
- A phishing campaign using fake flash sale notifications
- Rapid liquidation of positions during extreme market volatility
Correct answer: Exploiting uncollateralized instant loans to manipulate prices and drain protocol funds in a single transaction
Flash loan attacks borrow large sums without collateral within a single transaction block to manipulate oracle prices or exploit protocol logic, repaying the loan in the same block.
Cryptocurrency Security and Regulatory Compliance 4
What is 'rug pull' fraud in the context of DeFi?