Upbit Launches Campaign for Recovery of Mistakenly Transferred Assets

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

Sejong Telecom and Hyosung TNS to Collaborate on Real Estate Security TokensSejong Telecom said Tuesday that it has signed a business deal with Hyosung TNS, the infrastructure and finance arm of South Korean conglomerate Hyosung Group, to boost the profitability of its real estate investment service BBRIC and collaborate in security token offering (STO) services.Photo by Tierra Mallorca on UnsplashIntegrated servicesUnder the deal, Sejong Telecom will integrate the BBRIC platform into NFTtown — Hyosung TNS’ portal service dedicated to providing information, news, and educational content on non-fungible tokens (NFTs). BBRIC aims to expand its user base and modes of marketing by promoting its investment products, events, and services within NFTtown’s fractional real estate investment channel.Furthermore, users can conduct their transactions in a secure and convenient manner through BBRIC without paying intermediary fees. This promotion strategy is expected to ultimately increase profitability, BBRIC said.“Through this deal, we will create an ecosystem where anyone can readily find and compare information on fractional investments and invest accordingly,” said Park Hyo-jin, Head of Sejong Telecom’s blockchain division. “BBRIC will diversify its promotional and sales channels to create real estate financial investment products that are not only stable and reliable but also accessible to a wide range of customers.”Hyosung TNS’ venturesHyosung TNS is a leading player in the automated teller machine (ATM) market both in Korea and overseas. It operates in 46 countries, supplying a variety of financial automation solutions. NFTtown is part of the company’s blockchain endeavors, through which it plans to provide information about various security tokens, including real estate.

Research Center Highlights Overvaluation in Overseas Crypto Holdings Reported to Korean Tax AgencyThe Korbit Research Center, affiliated with one of South Korea’s leading cryptocurrency exchanges, Korbit, has raised questions about the size of overseas cryptocurrency holdings reported by Korean individuals and businesses to the National Tax Service.Photo by REDioACTIVE on PixabayThe issue of market-making activitiesThe center noted that following the 2017 initial coin offering (ICO) boom, many enterprises that issued cryptocurrencies through offshore entities might still be holding onto their native tokens. This would have resulted from their inability to distribute these tokens to the market after the speculative bubble burst. The center believes these reported values could have been influenced by the issuers’ market-making activities, possibly inflating their worth.According to the National Tax Service, Korean individuals and corporations hold a total of KRW 130.8 trillion (around $98 billion) in overseas crypto accounts. Notably, 73% (KRW 120 trillion) of this sum is held by 73 corporate entities.Highlighting a critical aspect of cryptocurrency valuation, the Korbit Research Center pointed out that when tokens are priced based on market-making activities, they may be overvalued. They further underscored that even if the true value of overseas holdings by these entities is only a tenth of the reported sum, a figure like KRW 12 trillion is still substantial.Retail investors seeking overseas optionsFurthermore, the center touched on retail investors, noting that the KRW 10 trillion in their offshore accounts indicates a gap in services offered by Korean crypto enterprises. It suggests that individual investors might be exploring foreign markets due to domestic limitations like the absence of derivatives and lending options.Given the borderless nature of the crypto industry, Korean individuals readily turn to overseas services that cater to their needs. The Korbit Research Center estimates a KRW 10 trillion unmet demand in the domestic crypto sector, suggesting that stringent local regulations might be driving capital outflows.