Japan’s GMO Coin Announces Special SGB Airdrop for XRP Holders

The crypto space continues to suffer a disproportionate share of hacks and scams that were further exacerbated on Wednesday, with Malaysian crypto data aggregator the latest to succumb to a security breach. Serving as yet another stark reminder of the persistent threats plaguing the sector, a phishing scam targeted CoinGecko's X account, leading to a brief compromise that raised concerns about the safety of user information.Photo by GuerrillaBuzz on UnsplashPhishing scamDuring this incident, hackers posted a phishing link on CoinGecko's X account, falsely advertising a token airdrop for a cryptocurrency named GCKO. The deceptive post claimed that GCKO could be used for API services, including the cryptocurrency ANKR. Swift action by CoinGecko involved the removal of the fraudulent post and a public warning urging users to avoid interacting with any suspicious links or content. In an X post, CoinGecko wrote:”Our Twitter accounts @CoinGecko and @GeckoTerminal have been compromised. We're taking immediate steps to investigate the situation and secure our accounts. Please DO NOT click on any links or engage with suspicious content. Your security is our top priority.” Employee errorThe firm followed up with an update on Thursday, attributing the breach to a team member inadvertently clicking on a fraudulent Calendly link, granting unauthorized access to the hacker. Despite having two-factor authentication (2FA) enabled and employing robust security measures, CoinGecko emphasized that the inadvertent click allowed unauthorized access. The compromised accounts were then exploited to disseminate misleading information and potentially engage in malicious activities. CoinGecko expressed sincere apologies for any confusion or inconvenience caused by the incident. The company reiterated its commitment to platform security and continuous improvement of internal controls, assuring users that corrective measures were promptly implemented. SEC incompetenceCoinGecko's security incident occurred within 24 hours of a similar occurrence involving the U.S. Securities and Exchange Commission (SEC). The SEC's X account was compromised, with scammers posting a false message from Chair Gary Gensler about the approval of spot bitcoin exchange-traded funds (ETFs). While CoinGecko identified a vulnerability in its security regimen, the SEC later confirmed that the breach in its case was far more basic. It was not due to infrastructure attacks but rather the lack of 2-factor authentication (2FA) tied to the SEC's account, the most basic form of operations security. Gensler and the SEC have come in for major criticism from the crypto community in the U.S. due to a policy of regulation by enforcement that has been pursued. With that, the Commission came in for swift and harsh criticism in the immediate aftermath of its X account hack. Many pointed out the irony of Gensler advising consumers to secure their accounts back in October when the SEC itself had failed to do so. Others queried who would be responsible for what some interpreted as an episode of market manipulation, something that the SEC has perennially associated the crypto markets with. During the time that the account was compromised, millions of dollars of value were liquidated in short and long trading positions. CoinGecko's quick response serves as a valuable lesson in the importance of vigilance and proactive security measures amid the growing threats facing the cryptocurrency community.

Thailand's government has recently secured approval for a $14 billion digital handout program as part of its economic recovery strategy. The program hasn’t come about without considerable debate and a backdrop of concerns expressed about the Southeast Asian nation's sluggish economic growth. According to Reuters, the decision was confirmed by Deputy Finance Minister Julapun Amornvivat, who stated that the Office of the Council of State, an advisory panel, found no legal obstacles to utilizing state budget funds for the initiative.Photo by Oleksandr P on PexelsDigital handout programThe digital handout program, a key policy of the ruling Pheu Thai party, involves distributing 10,000 baht (approximately $300) to digital wallets set up for each of the 50 million Thai citizens. This financial injection aims to stimulate spending within local communities, providing a much-needed boost to the economy. While the program has faced concerns about potential inflation risks due to Thailand's slow economic growth, the government has argued that it will ultimately benefit the economy. Julapun emphasized that the government plans to proceed with the scheme in May, funded through borrowing. Council of State and opposition party concernsEarlier reports had indicated that the Council of State had initially advised against the government's plan to enact a loan bill for the digital wallet scheme. Concerns were raised about potential violations of constitutional articles, including Article 140, which requires the government to offset any loans outside the budget bill in the next fiscal budget. In addition to inflation worries, the opposition expressed concerns about a potential breach of Article 53 of the 2018 State Fiscal and Financial Discipline Act, which permits off-budget borrowing only in urgent situations. Despite these concerns, the Office of the Council of State ultimately found no reason to prohibit the cabinet from borrowing to fund the program. Thailand's move towards a $14.3 billion cash handout program, termed the "digital wallet" program, is expected to commence by May. Prime Minister Srettha Thavisin affirmed this timeline after the Council of State's approval. The program, allowing Thais to receive funds via a mobile app, aims to spur consumption and overall economic growth. Election campaign giveawayThe idea of the digital asset giveaway was first floated by the Pheu Thai Party (PTP) in April of last year as part of its election manifesto. Subsequently, the party won the election in August, with Srettha being installed as Prime Minister. That appointment was interpreted as being a positive one by crypto advocates, given that Srettha had worked with crypto and blockchain-related technologies in his previous business dealings. Critics, including some economists and former central bank governors, argue that the handout plan could be fiscally irresponsible and fuel inflation. Prime Minister Srettha, who is also the finance minister, plans to discuss the stimulus plan and related matters with the central bank governor. The Thai Chamber of Commerce anticipates a 3% year-on-year growth in the first quarter of 2024, with an annual growth rate of 3.2%, driven by tourism and exports. The digital wallet scheme, if implemented as planned, could potentially add 1.0-1.5 percentage points to this year's growth, according to the chamber. 

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.