Karsten Wenzlaff, Advisor
August 26th, 2025
Karsten Wenzlaff is a Crowdfunding and Fintech Expert from Germany. He is Secretary-General of Digit[...]
Category Archives: Cyber Security, Quantum, Hacks, Fraud Alerts, Risks, InsurTech
Kickstarter plans to move its crowdfunding platform to the blockchain
TechCrunch via Yahoo Finance | | Dec 8, 2021
Crowdfunding platform Kickstarter is making a big bet on the blockchain, announcing plans to create an open source protocol "that will essentially create a decentralized version of Kickstarter’s core functionality." The company says the goal is for multiple platforms to embrace the protocol, including, eventually, Kickstarter.com.
Kickstarter is launching a new organization called Kickstarter PBC, which will begin development of the protocol. Kickstarter is funding the project, appointing an initial board for the organization and committing to be one of the first platforms on the protocol, though no specific timelines were offered for when such a transition might take place.
See: FreeRossDAO: Another blueprint for peer to peer Crypto Crowdfunding
The company also announced that they're establishing an "independent governance lab," which will publish research and engage with the community on the topic of protocol governance.
It's an interesting path for Kickstarter, which already shares some philosophical DNA with blockchain products allowing consumers to support projects and build up a community around them while taking a stake in the success of those products. While the "stake" in Kickstarter's model has been a completed physical or digital product, newer blockchain crowdfunding platforms are upending that model by giving users tokens tied to the projects which can accrue in value as the product matures. Some of these efforts are questionably legal, but there are endless ways to obfuscate what exactly is being bought and sold by users.
See: 3 Trends in 2022 Predicted to Shape Investment Crowdfunding
For the time being it seems Kickstarter is aiming to proceed slowly in terms of how the protocol will impact the user experience.
"As a user, the Kickstarter experience you’re familiar with will stay the same. You won’t 'see' the protocol, but you will benefit from its improvements," a blog post from the company reads.
Continue to the full article --> here
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
 |  |  |
|---|---|---|
 |  |  |
Blockchain Vulnerabilities, Forensics And Legal Challenges
McCarthy Tetrault | | Nov 19, 2021
It is often assumed that blockchain based digital currencies and applications are safe and secure. In fact, blockchain ecosystems including cryptocurrencies such as bitcoin and Ether, smart contracts that power a plethora of transactions, and blockchain exchanges have many vulnerabilities.
Like many other financial systems, blockchain based systems are subject to all manner of hacks, frauds scams, and vulnerabilities. They happen at the speed and anonymity of the Internet.
There are, understandably, numerous legal challenges when it comes to obtaining civil remedies for these Internet based crimes. This is as true, and perhaps even more so, for blockchain hacks, scams, and frauds as it is for a whole host of other Internet crimes and wrongs.
Blockchain vulnerabilities, hacks, frauds and scams
There are trillions of dollars invested in blockchain based digital currencies. Bloomberg recently estimated that the cryptocurrency market is now worth more than U.S. $3 trillion. There are well recognized financial risks associated with cryptocurrencies volatility. But, this has not seemed to have dampened the market for these items.
See: Crypto fraud and breaches on pace to exceed $3 billion in 2021
While losses from hacks and vulnerabilities are hard to estimate, by one account hackers have stolen nearly $2 billion worth of cryptocurrencies in the two year period between 2017-2019. Some hacks are by lone hackers, but many are by sophisticated cybercrime organizations. According to a recent article In the MIT Security review, the hype that these assets are unhackable are “dead wrong”. According to the article:
In short, while blockchain technology has been long touted for its security, under certain conditions it can be quite vulnerable. Sometimes shoddy execution can be blamed, or unintentional software bugs. Other times it’s more of a gray area—the complicated result of interactions between the code, the economics of the blockchain, and human greed. That’s been known in theory since the technology’s beginning. Now that so many blockchains are out in the world, we are learning what it actually means—often the hard way. [ii]
As with every other financial system, there are opportunities for fraud. One vector is fraud associated with online marketplaces.
Private key security attacks are also a known means of allowing malicious actors to steal cryptocurrencies. A private key allows individuals to access funds and verify transactions. An attacker who has discovered a vulnerability in an elliptic curve digital signature algorithm, for example, can recover a user’s private key. If a private key is stolen, it is difficult to track any related criminal activity and recover the relevant blockchain asset.[viii]
See: Decentralized Finance—Risks, Regulation, and the Road Ahead
Hackers have also been known to steal the keys to cryptocurrency wallets.[ix]
Of course marketplaces, like almost every other organization in Canada are subject to data breaches from a myriad of sources.
Despite all the security features blockchain offers, individuals and organizations are still susceptible to phishing attacks.
SIM swap attacks are also not uncommon.
Hackers have also been known to exploit technical weaknesses in blockchain systems.
Hackers can also engage in Routing Attacks. Blockchains rely on real-time, large data transfers. Hackers can intercept real-time large data transfers such as by hijacking IP prefixes or dropping connections momentarily, preventing the system from reaching consensus.
See:
Crypto scams, DeFi hacks, and rug pulls: Why the crypto industry needs insurtech
CipherTrace August 2021 Crypto Crime Report: Crypto Fraud Dips as DeFi Hacks Grow
Other examples of technical weaknesses were a cryptographic flaw in the cryptocurency Zcash that could have been exploited to make unlimited counterfeit Zcash and in bitcoin’s main client, Bitcoin Core, that had a flaw that could have let attackers mint more bitcoins than the system was supposed to allow. [xviii]
Research shows that there are also many other security vulnerabilities associated with in smart contracts. [xxi] Other types of attacks include the “Balance Attack” and “Sybil Attacks”. [xxii]
Continue to the full article --> here
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Current cyber insurance model is broken and ripe for data-driven change
InsurTech Insights | Dec 5, 2021
As the cyber risk environment evolves from occasional data theft to rampant extortion, cybersecurity experts believe that the current cyber insurance model – where policies are easily accessible – is ripe for a change.
This comes as several insurance providers have decreased coverage and pushed up rates in recent years as a surge in ransomware attacks have left them smarting from hefty payouts.
See: Here is why InsurTech is heating up as an investment category
One of these insurers, Lloyd’s of London, which accounts for almost a fifth of the global cyber insurance market, has reportedly discouraged its syndicate from taking cyber business next year, according to Reuters.
“Cyber insurance was only ever meant to be for a novel, an unforeseen catastrophic event,” Jess Burn, senior analyst at advisory firm Forrester, told SC Magazine. “When things like ransomware were limited to someone’s grandmother on their old PC, that was a license to print money. But now that music has absolutely stopped and they’re reeling from those losses.”
Data from market intelligence firm S&P Global has shown that the loss ratio from cyber insurance has risen in recent years. From 43 cent for every dollar in 2016, the figure has jumped to 73 cents per dollar in 2020.
Industry insiders that SC Magazine interviewed said that the cybersecurity sector responded by “trying to consolidate data aggregation to create a more sustainable industry.” This led to the formation of CyberAccuView, a data-sharing service aimed at creating a more standard practice.
See: Synthetic Media and Deepfakes: An insurance industry threat
However, the experts still predict that policies will be dependent on “higher base security standards offering lower maximum payouts.”
They added that “a new breed” of fintech firms that are placing emphasis on data-driven security policies, including the use of network monitoring software, can help create a sustainable model for cyber insurance.
“We see a positive trend in the cyber insurance market where organisations embrace the risk assessment process required by insurers as an opportunity to justify and accelerate cybersecurity initiatives,” Chris Reese, head of insurance at Cowbell Cyber, told SC Magazine. “Many businesses welcome the resources provided by cyber insurance providers to help them achieve insurability.”
Continue to the full article --> here
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Technology Due Diligence Process and Cyber Risks for Fintech Start-ups
Forward Security Inc. | Farshad Abasi | Nov 17, 2021
Picture this. You are the CEO of a large financial services company and are looking to acquire a smaller fintech company to expand your business. Everything within the company’s infrastructure looks normal.
Turns out, technology and security of the company wasn’t thoroughly tested, and after acquiring the company, you inherit a major security breach along with it, costing you millions of dollars. Believe it or not, this is exactly what happened to Paypal, when it acquired TIO Networks and they are not alone.
Paypal’s example proves the importance of incorporating thorough technology due diligence into the acquisition process of a company.
What Does the Due Diligence Process Entail?
To gauge what the due diligence process entails, let’s consider the example of a VC or a CEO of a fintech company who is interested in preparing their company for acquisition. After taking the first step to hire an investment banker to show the company to investors, there are three main stages of the Due Diligence Process. The first round of bids includes a high-level company evaluation, addressing the condition of the business, financials, and management team. A handful of bids progress to the second round of bids, which takes a deeper dive into the business. The interested party then submits a Letter of Intent (LOI) to indicate interest in acquiring the company.
See: OFSI Publishes Draft Guidelines on Technology and Cyber Risk Management
At the LOI stage, things could go awry if issues are found while evaluating the health of a company during the due diligence process (including legal diligence, accounting diligence, customer diligence, and technology/cybersecurity due diligence). After the LOI stage, if the investor is still interested in the company, the deal moves to the closing stage.
Why is Security Important in the Due Diligence Process?
In any investment, buyers are clearly looking for no problems with the company, as this could cost them millions in the future.
A buyer’s priority is to minimize risks and solve for sustainability and scalability through assessing three aspects of the company: people, process, and technology. Risks surrounding people could involve code development and knowledge distribution, while risks around the process typically entail sustainability and scalability. Risks surrounding technology often involve security issues and documentation surrounding open-source code. If you think your company will need to embark on the due diligence process in the next 6-12 months, it’s crucial to be thorough with documentation regarding all aspects of due diligence.
See: Crypto scams, DeFi hacks, and rug pulls: Why the crypto industry needs insurtech
To prove that a company doesn’t have issues, it’s important to provide the correct documentation and engage security from the beginning of the development process and have it ready for the due diligence process. Engaging security from the start leads to strong foundations in governance and policy as well as in the applications themselves. Consistent and diligent documentation from the start of the process also strengthens the validity of the company’s security posture.
Regarding the technology and security aspect of due diligence, it’s important to note that doing a risk assessment shows buyers that a company is truly worth the investment. It’s also crucial to know where your security issues lie by having a 3rd party look at the code to find loopholes. It assesses business impact and how likely a security breach is to occur, making it more valuable than security gaps or vulnerabilities. If any security issues are found, it’s key to have a plan of action for the investor or show progress on the issues that were found. Where open-source software is used, keeping thorough documentation on what is used will help tell the company’s story while preventing it from being put on the defensive.
Going forward, sellers should expect more scrutiny for technology and security aspects of the company. Therefore, any preparation on this front would be valuable. Buyers are also becoming more aware of what breaches exist and will ask sellers how they’ve prepared themselves. Buyers need to be able to ensure these breaches aren’t impacting them, as they don’t want to inherit liabilities.
What Are the Next Steps?
In short, add security early in the development process and document your controls to cover your bases. Apply security best practices while building your company and applications. Though it may seem more efficient in the short run, refrain from cutting corners, and get professionals to support you during the due diligence process. Spending money on a 3rd party assessment to find potential security loopholes is valuable, as this could save millions in transaction value. Remember, investing in security initially to ensure a strong security posture will only save millions of dollars in the long-term.
See: Fintech & Cybersecurity: Key Risks and Solutions
If you’re looking to learn more about what to do to secure your company including your products and infrastructure, check out the Security 4 Startups (S4S) framework: https://www.security4startups.com/. S4S was designed by a group of investors and small, mid, and large-corporation CISOs to help startups combat their biggest security risks in a balanced manner. If you’re looking for an in-depth security consultation, Forward Security and RiskAware are always here to help, so get in touch: contactus@fwdsec.com.
Authored by:
Farshad Abasi, Founder, Chief Security Officer at Forward Security Inc.
At Forward Security we are all about doing application, cloud, and information security better. Our team tackles security using a systematic approach, leveraging standards based and repeatable processes. We are incredibly passionate about delivering the best security solutions, and are driven to help our clients achieve the highest level of security to enable business growth. https://forwardsecurity.com/
Michael Castro, Founder, Risk Executive at RiskAware
RiskAware was incorporated in 2018 to help address the gap with organizations utilizing part-time or fractional CISO and to offer executive leadership services. We serve organizations of all sizes and specialize in small and mid-size businesses (SMBs) in all verticals, including Not-For-Profits and Startups. https://riskaware.io/
This article is featured in NCFA's digital magazine, Fintech Confidential (Issue 4 Oct 2021). Click to read the latest thought leadership, insights and trends about Fintech in Canada:
Checkout NCFA's digital magazine, Fintech Confidential (Issue 4) --> here
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
Landmark Jury Verdict Finds Digital-Asset Products Linked to Cryptocurrency Mining Are Not Securities
Winston & Strawn LLP | Michael Tomasulo | Nov 8, 2021
On November 2, a Connecticut jury found that a series of digital-asset products linked to a cryptocurrency mining operation did not count as securities. The landmark jury verdict is among the first to decide whether cryptocurrency assets and products may count as securities.
The case presented the novel issue of whether the digital assets of GAW Miners LLC, a virtual mining company, were considered investment contracts.
The company originally sold physical mining equipment but began to offer a series of digital assets to customers. These assets included “hashlets,” or portions of the supposed computing power the company owned, “Hashpoints,” which could be converted into GAW’s “Paycoin” currency, and “Hashtakers” for storing Paycoin.
In a class-action suit, customers stated that these digital assets were unregistered securities being sold to defraud customers because GAW did not have the physical equipment they purported to sell. Ultimately, the jury found that the products were not unregistered securities, despite contrary findings by the SEC in a related action.
Continue to the full article --> here
Law360 | Elise Hansen | Nov 2, 2021
Crypto Mining-Linked Products Weren't Securities, Jury Finds
Law360 (November 2, 2021, 6:03 PM EDT) -- A series of digital-asset products linked to a cryptocurrency mining operation do not count as securities, a Connecticut jury found Monday in what a defense lawyer called a first-of-its-kind verdict.
The jury on Monday cleared Stuart Fraser of liability for GAW Miners LLC's alleged misconduct and found the products in question, which included a virtual currency and a digital wallet, were not investment contracts. Whether certain crypto-related products are securities has been a hot-button question among regulators and in the cryptocurrency industry.
See: Top US regulator tells crypto exchanges they need to ‘come in and talk to us’
"It's the first case that we know of where a jury addressed whether cryptocurrency products were securities"
Daniel Weiner of Hughes Hubbard & Reed LLP told Law360 on Tuesday. Weiner helped represent Fraser.
The case, which dates back to 2016, centers around cryptocurrency mining operations, which refers to the use of computing power to verify cryptocurrency transactions.
GAW Miners LLC initially sold physical mining equipment to customers but, along with a company called ZenMiner LLC, began offering remote management software that purportedly allowed customers to control their mining hardware online, according to the class of customers bringing the action.
The customers alleged GAW and ZenMiner never actually had as much equipment as they claimed. GAW Miners and ZenMiner were found in default earlier in the case, court filings show.
Faced with potential demands to send customers equipment they didn't have, the companies turned to selling "hashlets," which gave purchasers a portion of the computing power the companies purportedly owned without receiving the physical hardware, according to the suit.
See: As regulators circle above, how should the DeFi industry respond?
The plaintiffs alleged that even with the "hashlets," the companies did not have as much computing power as claimed and instead used the money from new customers to pay off older customers.
GAW Miners and ZenMiner also sold so-called "Hashpoints," which the purchasers described as promissory notes that could be converted into the companies' virtual currency, Paycoin. "Hashstakers" were virtual wallets for storing Paycoin.
Homero Joshua Garza, the companies' co-founder, pled guilty to wire fraud in a related criminal action in 2017 and agreed to pay damages in a case brought by the U.S. Securities and Exchange Commission. He was dropped from the customers' case in 2016.
That left Fraser, a 41% investor in GAW Miners, as the sole remaining defendant in the trial.
The customers alleged all four of the products — Hashlets, Hashpoints, Paycoin and HashStakers — were unregistered securities, and that Fraser was liable for the sales because his role at the companies was comparable to that of a partner or director.
But the jury disagreed, finding none of the products were securities, not even Hashlets, which the SEC described as a security in its case against Garza. Weiner said the defense had argued, apparently convincingly, that Hashlets were not a passive investment and that customers actively controlled their investment.
Continue to the full article --> here
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
OFSI Publishes Draft Guidelines on Technology and Cyber Risk Management
OFSI | Nov 11, 2021
Purpose and Scope
This Guideline establishes OSFI’s expectations related to technology and cyber risk management and applies to all federally regulated financial institutions (FRFIs). These expectations aim to support FRFIs in developing greater resilience to technology and cyber risks.
See: Decentralized Finance—Risks, Regulation, and the Road Ahead
FRFIs should implement the expectations in this Guideline commensurate with its size; the nature, scope and complexity of its operations; and risk profile. OSFI’s expectations are technology-neutral, anticipating the need for FRFIs to compete effectively and take full advantage of digital innovation while maintaining a sound technology posture.
Structure
A.2.1 This Guideline is organized into five domains. Each sets out key components of sound technology and cyber risk management.
- Governance and Risk Management – Sets OSFI’s expectations for the formal accountability, leadership, organizational structure and framework used to support risk management and oversight of technology and cyber security.
- Technology Operations – Sets OSFI’s expectations for management and oversight of risks related to the design, implementation and management of technology assets and services.
- Cyber Security – Sets OSFI’s expectations for management and oversight of cyber risk.
- Third-Party Provider Technology and Cyber Risk – Expanding on OSFI’s existing guidance for outsourcing and third-party risk, sets expectations for FRFIs that engage with third-party providers to obtain technology and cyber services and/or other services that give rise to cyber and/or technology risk.
- Technology Resilience – Sets OSFI’s expectations for capabilities to deliver technology services through operational disruption.
See: Cyber Risk is the New Threat to Financial Stability
Desired outcomes
- Technology and cyber risks are governed through clear accountabilities and structures, and comprehensive strategies and frameworks.
- A technology environment that is stable, scalable and resilient. The environment is kept current and supported by robust and sustainable technology operating processes.
- A secure technology posture that maintains the confidentiality, integrity and availability of the FRFI’s technology assets.
- Reliable and secure technology and cyber operations from third-party providers.
- Technology services are delivered, as expected, through disruption.
Continue to the full article --> here
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
U.S. State Department offers $10M to hunt Darkside cyber group
CNN | | Nov 4, 2021
The US State Department is offering up to $10 million for information leading to the identification or location of senior members of a Russian-speaking ransomware gang that forced major US fuel operator Colonial Pipeline to shut down in May.
The announcement Thursday from State Department spokesperson Ned Price also included an offer of $5 million for information leading to the arrest or conviction of anyone who conspires to participate in a hack involving so-called DarkSide ransomware, which was used in the Colonial Pipeline incident.
It's the latest effort by the Biden administration to put pressure on cybercriminals that have extorted millions of dollars from US companies and threatened critical infrastructure. President Joe Biden in June appealed to Russian President Vladimir Putin to take action against ransomware groups operating from Russia, but it remains to be seen if that will happen.
See: World Economic Forum (WEF) Warns of Cyberattack that will Collapse Existing Financial System
It's not the first time the State Department has offered big money to try to catch foreign hackers.
Ahead of the 2020 election, the department said it would pay up to $10 million for information on the identity or location of anyone using "certain illegal cyber activities" to interfere with the vote at the behest of a foreign government.
"We need to use all the tools we have, and this is a good and hopefully effective one," Christopher Painter, a former top State Department cybersecurity envoy, told CNN.
The Colonial Pipeline incident shut down fuel deliveries to the East Coast of the US for days, prompting long lines at gas pumps in multiple states. It also put ransomware higher on the national security agency for the Biden administration, which since the incident has issued multiple cybersecurity policy directives.
See: Chelsea Manning Is Hacking Again, This Time For A Bitcoin-Based Privacy Startup
The pipeline company, which delivers an estimated 45% of fuel consumed on the East Coast, paid the hackers $4.4 million to unlock the computers. The Justice Department was able to recover $2.3 million of that money by seizing cryptocurrency assets. As the Biden administration pressures Russia to curb cybercriminal activity, US law enforcement and their international partners are pursuing suspects outside of Russia.
Continue to the full article --> here
The National Crowdfunding & Fintech Association (NCFA Canada) is a financial innovation ecosystem that provides education, market intelligence, industry stewardship, networking and funding opportunities and services to thousands of community members and works closely with industry, government, partners and affiliates to create a vibrant and innovative fintech and funding industry in Canada. Decentralized and distributed, NCFA is engaged with global stakeholders and helps incubate projects and investment in fintech, alternative finance, crowdfunding, peer-to-peer finance, payments, digital assets and tokens, blockchain, cryptocurrency, regtech, and insurtech sectors. Join Canada's Fintech & Funding Community today FREE! Or become a contributing member and get perks. For more information, please visit: www.ncfacanada.org
| | |
|---|---|---|
| | |
