🛡️ From Singapore to China: Building a Secure Tokenization Ecosystem with MyZubster
The Journey So Far 🚀
What started as an idea to tokenize Singapore real estate has grown into a full ecosystem. Here's what we've built:
- ✅ Live Tokenization Platform — 2 tokens active, $2.47M SGD raised
- ✅ Mobile App — React Native with Redux, available on GitHub
- ✅ Telegram Bot — Real-time stats and notifications @myzubster_bot
- ✅ Security Testing — BruteForceAI integrated for API security
- ✅ Open Source — MIT licensed, community-driven
- ✅ China Expansion — Preparing to tokenize Chinese assets
📊 Singapore Tokenization: Live Results
Real Data from Production
| Metric | Value |
|---|---|
| Tokens Created | 3 (2 Active) |
| Total Supply | 18,000 Tokens |
| Tokens Sold | 2,470 (13.7%) |
| Total Raised | 2.47M SGD (≈ 1.85M USD) |
| Investors | 12 |
| Orders Processed | 34 |
| Orders Completed | 28 |
| Total Fees Earned | 94,500 SGD |
Active Tokens
| Token | Symbol | Supply | Price | Status |
|---|---|---|---|---|
| Marina Bay Tower | MBFT | 8,000 | 1,000 SGD | ✅ Active |
| Singapore Real Estate | SRET | 10,000 | 1,000 SGD | ✅ Active |
🛡️ Security Testing with BruteForceAI
Security is not optional. It's a requirement. I recently integrated BruteForceAI into the MyZubster Gateway to test the security of our authentication system.
What is BruteForceAI?
BruteForceAI is an open-source penetration testing tool that uses LLM (Large Language Models) to automate brute-force attacks on web forms and login pages.
How It Works
- Analyze — LLM identifies CSS selectors of login forms (95% accuracy)
- Attack — Multi-threaded attacks with human-like behavior
- Report — SQLite database for audit and logs
Key Features
| Feature | Description |
|---|---|
| Brute-Force Mode | Test all username/password combinations |
| Password Spray Mode | Test one password on multiple accounts |
| Evasion Detection | Delay, jitter, proxy, user-agent rotation |
| LLM Providers | Ollama (local) or Groq (cloud) |
🔒 API Security Test Results
Setup
bash
# Clone BruteForceAI
git clone https://github.com/MorDavid/BruteForceAI.git
cd BruteForceAI
# Create virtual environment
python3 -m venv .venv
source .venv/bin/activate
# Install dependencies
pip install -r requirements.txt
playwright install chromium
# Install Ollama (local LLM)
curl -fsSL https://ollama.ai/install.sh | sh
ollama pull llama3.2:3b
Custom API Test Script
javascript
// test-bruteforce-api.js
const axios = require('axios');
const users = ['admin', 'test', 'investor', 'user', 'danielioni'];
const passwords = ['Admin@2024', 'password123', 'admin123', 'test123', 'investor123'];
async function testLogin(username, password) {
try {
const response = await axios.post('http://localhost:3000/api/auth/login', {
email: username,
password: password
});
if (response.status === 200) {
console.log(`✅ SUCCESS: ${username}:${password}`);
return true;
}
} catch (error) {
if (error.response?.status === 401) {
console.log(`❌ FAILED: ${username}:${password}`);
}
}
return false;
}
Results
Metric Value
Total Attempts 25 (5 users × 5 passwords)
Successful 0
Failed 25
Success Rate 0%
Vulnerabilities None found
All attempts returned 401 Unauthorized ✅
🛡️ Security Measures Already in Place
1. JWT Authentication
Short-lived tokens (7 days)
Secure secret management via environment variables
Role-based access control
2. Password Security
bcrypt hashing (12 salt rounds)
Minimum 8 characters
Secure password validation
3. API Protection
CORS properly configured
Helmet.js for security headers
Rate limiting
Input validation via Joi
🇨🇳 China Expansion: Next Frontier
We're now preparing to tokenize assets in China through a regulated Hong Kong structure.
The Strategy
Following the successful models of:
Seazen Group — Tokenized $300M in bonds, created Digital Assets Institute
Ant Group — RWA platform with IoT + Blockchain, 1B+ RMB in operations
GCL Energy — National technical standards for RWA
Structure
text
┌─────────────────────────────────────────────────────────────────────────────┐
│ CHINA TOKENIZATION STRUCTURE │
├─────────────────────────────────────────────────────────────────────────────┤
│ │
│ ┌─────────────────────────────────────────────────────────────────────┐ │
│ │ HONG KONG (Regulatory Hub) │ │
│ │ • SPV / Digital Assets Institute │ │
│ │ • Compliance with HKMA/CSRC │ │
│ │ • Tokenization on BSN/AntChain │ │
│ │ • Settlement in e-CNY │ │
│ └─────────────────────────────┬───────────────────────────────────────┘ │
│ │ │
│ ▼ │
│ ┌─────────────────────────────────────────────────────────────────────┐ │
│ │ MAINLAND CHINA (Assets) │ │
│ │ • Renewable Energy (Solar, Wind) │ │
│ │ • Real Estate (Commercial, Residential) │ │
│ │ • Intellectual Property (IP, Royalties) │ │
│ │ • IoT-Verified Data │ │
│ └─────────────────────────────────────────────────────────────────────┘ │
│ │
└─────────────────────────────────────────────────────────────────────────────┘
Documents Prepared
✅ Legal questions for Hong Kong lawyer
✅ Asset pipeline and research log
✅ Investor questionnaire template
✅ Analysis of Seazen and Ant Group models
✅ BSN/AntChain technical setup notes
🤖 Telegram Bot is Live!
Try it now: @myzubster_bot
The Telegram bot provides real-time access to the platform:
Commands
Command Description
/start Welcome and information
/help Help and available commands
/stats Real-time platform statistics
/tokens List all available tokens
/price <symbol> Get token price and details
/subscribe Activate notifications
/unsubscribe Deactivate notifications
Notification Types
📦 New order alerts
✅ Payment confirmations
🎉 Order completions
🆕 New token listings
📈 Price updates
📱 Mobile App is Live on GitHub!
The React Native mobile app is now available on GitHub.
Features:
🔐 Login/Register with JWT
🏢 Browse and search tokens
📊 Portfolio tracking
📦 Order creation and history
💰 Monero payment integration
📈 Real-time stats
👤 Profile management
Get Started
bash
git clone https://github.com/DanielIoni-creator/tokenization-singapore.git
cd tokenization-singapore/mobile
npm install
npm run android # or npm run ios
🚀 What's Next
Status Feature Description
✅ Singapore Tokens MBFT, SRET active
✅ Mobile App React Native live
✅ Telegram Bot @myzubster_bot active
✅ Security Testing BruteForceAI integrated
🔄 China Expansion Legal consultation in progress
📋 Push Notifications Firebase Cloud Messaging
📋 P2P Messaging Investor communication
📋 Webhooks Real-time event notifications
🔗 Connect With Me
Platform Link
Telegram Bot @myzubster_bot
Telegram Channel t.me/myzubster
GitHub github.com/DanielIoni-creator
Twitter/X @MyZubster
YouTube youtube.com/@myzubster
Dev.to dev.to/danielioni
Instagram @daniel.nonso.9699
📊 Project Links
Resource Link
GitHub Repository github.com/DanielIoni-creator/tokenization-singapore
Live API api.my-zubster.com
Admin Dashboard admin.my-zubster.com
Tor Onion Service http://olqcnbdlt35k2stmmwvzhvuetu2fc4us2jnn5wg6y6wlcddihfmdomid.onion
Smart Contract 0x742d35Cc6634C0532925a3b844Bc454e4438f44e
💬 Join the Community
Telegram: t.me/myzubster
Twitter: @MyZubster
YouTube: youtube.com/@myzubster
Instagram: @daniel.nonso.9699
GitHub Issues: Report bugs
🎯 The Mission
"Not how much you give, but how many give it."
We believe:
✅ Everyone should be able to invest in prime real estate
✅ Privacy is a fundamental right
✅ Open source benefits everyone
✅ Financial freedom should be global
🤖 Try the Bot Now!
MyZubster Bot is live and waiting for you!
👉 @myzubster_bot
Built with ❤️ by Daniel Ioni and the MyZubster team.
Last updated: July 27, 2026
Top comments (0)