Trust, Tokens, and Threats: Building Security in the Digital Asset Era
Our Speakers:
- Ivan McAdam
- Co-Founder : VIVOS
- Ray Tay
- Co-Founder : VIVOS
- Amelia Tan
- Counsel, Carey Olsen, Singapore
- V. Kumar Sharma
- Partner, Eldan Law LLP
- Michael Lew
- Co-Founder, AEGIS Digital
Why This Conversation Matters
Crypto has matured into a multi-trillion-dollar market—but for every opportunity, there is an equal measure of risk. From token collapses and ransomware to regulatory overhauls and asset recovery challenges, the digital asset space requires more nuanced strategies.
This roundtable goes beyond the hype. It’s a practical deep dive into:
- How regulators from Singapore to BVI are keeping pace?
- Why fraud prevention starts with people, not code?
- The new frontier of tokenisation and AI–blockchain convergence
- What businesses must do in the first hour of a crisis?
Insights You Can’t Ignore
1. Singapore as a Legal Anchor
With the SFA, Payment Services Act, and FSM Act, Singapore has built a clear—if complex—regulatory regime.
Kumar Sharma: “Two threshold questions dominate—does your token qualify as a digital payment token, and do you fall within licensing obligations? Businesses are structuring around those questions.”
2. Offshore Jurisdictions: Head Start in Flexibility
Amelia Tan : “BVI and Cayman were among the first to put together frameworks like the Virtual Asset Service Provider Act. The aim isn’t to stifle activity, but to encourage players while ensuring there’s supervision when fraud or misappropriation happens.”
3. Fraud Is Human, Not Just Technical
Michael Lew: “Most cases start with phishing or social engineering. Scams start with people, not code—and awareness is the first firewall.”
4. The First Hour Matters Most
When assets are compromised, every second counts.
Amelia Tan: “Even a single log-in attempt may be decisive in tracing assets. Preserve everything before it’s deleted.”
Michael Lew: “Don’t treat it as a tech issue—treat it as a governance issue. Escalate to management and legal immediately.”
5. Contracts as a First Line of Defence
The legal characterisation of crypto assets defines whether you’re a creditor or a valid owner in a dispute.
Kumar Sharma: “Your contracts decide whether you’re a creditor—or a true owner—when things go wrong.”
Amelia Tan: “Segregation, custody terms, and trust arrangements must be clear in contracts—otherwise you risk being lumped with general creditors in an insolvency.”
Emerging Trends to Watch
- Stablecoins in Corporate Payments – Driving adoption due to reduced volatility.
- Tokenisation of Bonds & Securities – Real-time payouts, secondary markets.
- AI + Blockchain Convergence – Decentralised ownership meets automated governance.
From Defense to Offense
The experts agreed: Prevention is cheaper than litigation.
- Use institutional custodians that can mirror assets and provide recourse.
- Secure cyber + professional indemnity insurance.
- Negotiate contracts that allocate risk before disaster strikes.
And if the worst happens? Explore not just chasing hackers, but also holding intermediaries accountable—exchanges, apps, or even issuers via “burn and reissue” remedies.
Who Should Tune In?
- Business Leaders & Family Offices managing digital assets
- Legal & Compliance Teams drafting risk frameworks
- Cybersecurity Professionals are preventing fraud before it strikes
- Investors & Policymakers tracking regulatory maturity across jurisdictions
Closing Thought
“It’s not as lonely a space as you might think. Frameworks, remedies, and experts exist—you just need to engage them early.” — Ivan McAdam O’Connell.
The roundtable made one thing clear: digital assets are no longer a lawless frontier. With Singapore’s evolving regulations, offshore frameworks like VASP, and growing recovery tools, businesses have real avenues for protection.
Still, prevention is the best defence—clear contracts, institutional custodianship, and proactive governance reduce the cost and chaos of crisis. Fraud may begin with people, but awareness and structure end it.
In short: crypto’s future can be secure, but only if businesses act early—before risk becomes reality.
Frequently Asked Questions
Which laws regulate digital assets in Singapore?
Singapore regulates digital assets mainly through the Securities and Futures Act (SFA), the Payment Services Act and the Financial Services and Markets Act (FSM Act). In this VIVOS roundtable, V. Kumar Sharma, Partner at Eldan Law LLP, said two threshold questions dominate: whether a token qualifies as a digital payment token, and whether the business falls within licensing obligations.
What should a business do in the first hour after a crypto hack or fraud?
Preserve evidence and escalate at once. Amelia Tan, Counsel at Carey Olsen Singapore, warned that even a single log-in attempt can be decisive in tracing assets, so keep every record before it is deleted. Michael Lew, Co-Founder of AEGIS Digital, said to treat the incident as a governance issue, not a tech issue, and bring in management and legal immediately.
How do most crypto fraud cases start?
With people, not code. Michael Lew of AEGIS Digital said most cases start with phishing or social engineering, so staff awareness is the first line of defence against digital asset fraud.
How can contracts protect a company’s crypto assets?
Contracts decide whether you are the true owner of crypto assets or just a creditor when something goes wrong. Amelia Tan said segregation, custody terms and trust arrangements must be clear in the contract; otherwise you risk being treated as a general creditor in an insolvency.
How can businesses reduce digital asset risk before a crisis?
Prevention is cheaper than litigation, the panel agreed. Use institutional custodians that can mirror assets and provide recourse, buy cyber and professional indemnity insurance, and negotiate contracts that allocate risk in advance. If assets are still lost, look beyond the hackers to intermediaries such as exchanges, apps or issuers, including “burn and reissue” remedies.
