BC Card Launches Innovative Card Payment NFT Service

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

Almost 60K Korean Crypto-Holding Households Owe $389M in Unpaid Social Insurance PremiumsThe National Health Insurance Service (NHIS) in South Korea is intensifying its efforts to collect overdue premiums. Many high-income individuals who can afford to pay premiums for social insurance, including health insurance, have been neglecting their dues.Photo by Hush Naidoo Jade Photography on UnsplashVirtual assets for seizureAccording to the documents submitted on October 18 by the NHIS to lawmaker Jung Choun-sook, a member of the National Assembly’s Health and Welfare Committee, the NHIS is actively identifying a range of assets, including copyrights and virtual assets, that can be seized from these individuals. The NHIS aims to recover overdue premiums through stringent measures such as confiscation and government auctions. This move is designed to deter high-income earners from neglecting their obligations, ensuring fairness for those who consistently pay their premiums.Almost 60,000 crypto-holding householdsThis year, the NHIS discovered that 59,513 households, despite owning virtual assets, had outstanding social insurance premiums amounting to KRW 525 billion ($389 million). The NHIS has initiated collection efforts. In 2021, the insurance agency identified 5,336 households with virtual assets that had unpaid social insurance premiums totaling KRW 62.2 billion. Of this, the NHIS successfully collected KRW 6.92 billion, representing 11.13% of the total arrears.On this matter, lawmaker Jung highlighted that the government should strive to bolster the NHIS’s financial health. She underscored the importance of identifying concealed income sources or assets, like cryptocurrency holdings, of premium defaulters to ensure the collection of their overdue premiums.

3AC Co-Founder Disputes US Jurisdiction Citing Singaporean CitizenshipKyle Davies, the Co-Founder of the failed Singaporean crypto hedge fund Three Arrows Capital (3AC), has asserted that he is solely a citizen of Singapore and not of the United States.Photo by Towfiqu barbhuiya on PexelsEvading pursuit of damagesThe assertion may have relevance as it may mean that Davies can evade actions taken against him in a US court on the basis of a lack of jurisdiction. In a recent filing with the US Bankruptcy Court for the Southern District of New York (SDNY), Davies presented documents demonstrating that he had renounced his US citizenship in December 2020. He emphasized that he obtained citizenship in Singapore after being issued a passport in early 2021 and that he does not subject himself to the jurisdiction of US courts.$3.5 billion owedIn June it emerged that liquidators appointed for 3AC were seeking to recover $1.3 billion from the fund’s co-founders, Davies and Su Zhu. The firm reportedly owes creditors a staggering $3.5 billion.In the midst of public criticism surrounding the events leading to 3AC’s collapse, Zhu and Davies launched a platform called Open Exchange (OPNX), allowing trading claims against bankrupt crypto firms. Despite a deficit of goodwill for the duo in the crypto sector, they have been putting all their energies into the new venture.Last month, they outlined that they would donate future earnings from OPNX to 3AC creditors. It’s difficult to reconcile that claim when with this action, Davies is trying to evade contributing to creditors via the 3AC bankruptcy process and this legal action taken by the liquidator.Renounced citizenshipAccording to court documents, Davies officially renounced his US citizenship at the US Embassy in Singapore, citing his decision to reside in the country on a long-term basis. He revealed that he got married to a Singaporean national in 2017 and subsequently gained permanent residency in Singapore. Because Singapore does not permit dual nationality, Davies chose to renounce his US citizenship to establish himself fully as a Singaporean citizen.The submission of these documents came after 3AC’s liquidators requested a subpoena to gather information on the crypto hedge fund’s collapse. Both Kyle Davies and Zhu, were subpoenaed on Twitter, as their whereabouts were unknown. However, while Zhu, being a Singaporean national, might not be subject to the subpoena while residing outside the United States, Davies’ refusal to comply with the order led to discussions about holding him in contempt of court.In response to the subpoena controversy, Davies’ legal representatives claimed that he cannot be validly served with process as a non-party in the case, as he has not been a US citizen or resident since well before the case was initiated. They stated that the court lacks personal jurisdiction over him due to his renunciation of US citizenship. Accordingly, they requested that the Service Order and Compel Order, which were based on the assumption that Davies was a US citizen, be vacated.