Rotonda Signs Deal with The Sandbox for Blockchain Ecosystem Expansion

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

South Korean FIU rejects Hanbitco’s bid to become fiat-to-crypto exchangeWhile numerous cryptocurrency-only exchanges in Korea have been vying for registration as fiat-to-crypto exchanges with the financial regulator, the government has turned down another platform’s attempt to achieve this status.Photo by Dim Hou on UnsplashUnmet standardsAccording to a report from local news provider MoneyToday, the Financial Intelligence Unit (FIU) of the Financial Services Commission (FSC) recently convened a committee that decided against approving Hanbitco’s request to change its business status. Industry sources suggest that this decision was based on Hanbitco’s inability to meet the standards set by the Act on Reporting and Using Specified Financial Transaction Information, often referred to as the Financial Transaction Reporting Act.Fine and cautionary orderA person familiar with the matter that the committee started deliberating on Hanbitco’s request to alter its business status about two weeks ago and ultimately decided against it. A significant factor in this decision might have been the KRW 2 billion ($1.49 million) fine levied on Hanbitco, stemming from numerous violations found in recent on-site inspections, the source added.Before approaching the FIU with its request, Hanbitco formed a partnership with Kwangju Bank in June to obtain real-name accounts, facilitating Korean won deposits and withdrawals. Achieving this is quite uncommon for a crypto-only exchange. In Korea, exchanges are legally required to have real-name bank accounts for trading in Korean won. Presently, only five platforms hold registration as fiat-to-crypto exchanges: Upbit, Bithumb, Coinone, Korbit and Gopax, each having its own banking partnership.As per the details released by the FIU, besides the levied fine, Hanbitco was issued a cautionary order, and five of its employees faced reprimands.The fine of KRW 2 billion is the heaviest handed out to a virtual asset service provider from on-site inspections held between last year and the first half of this year. For perspective, Upbit, the country’s largest crypto exchange, was fined KRW 80 million.An FIU representative noted that during the evaluation of Hanbitco’s application to transition into a fiat-to-crypto exchange, factors such as the firm’s anti-money laundering (AML) protocols, its internal control systems and past sanctions played a role in the decision-making process.

The Sandbox Adds Singapore Virtual Neighborhood Lion CityMetaverse platform The Sandbox has announced the launch of Lion City, Singapore’s virtual neighborhood, during its inaugural Singapore Partner Day event.In a blog post published on Tuesday, The Sandbox project team outlined that Lion City is set to debut in September 2023 and will feature 512 plots of virtual land. With over 40 partners and 10+ studios, Lion City aims to showcase global and regional brands, along with established Web3 natives, representing Singapore’s culture in sports, fashion, entertainment, and technology within The Sandbox metaverse.Photo by Kin Pastor on PexelsRegional brand partnershipsThe Sandbox has attracted a range of local partners for Lion City, including MM2 Asia, ONE Championship, Mighty Jaxx Group, Spa Esprit Group, METAVI, Technology Development Centre (TDC) of ITE College Central, UKISS, Bandwagon, Renovi, Affyn, 8sian, The Engineers, Metaskull by Jacky Tsai x Froyo Games, Fabric of Reality, CreativesAtWork, Memotics, FXMedia, Kappou, The Parlour, Manifest, Vaniday, PengWine, LOFI, and Zodium. These partners represent various industries and will contribute to the diverse offerings and experiences within Lion City.Studio partnersMoreover, studio partners catering to the Singapore market will be an integral part of the Lion City experience. These studios include Smobler Studios, CGame Studio, Oceanus Media Global, and iCandy Interactive subsidiaries Lemonsky Studios and Hashcode Studio, New Moon Studios, Pangu by Kenal, and Clevereen. Collaborative ecosystem partners such as OKContract, Pinnacle, DIFY, and Peatix are also contributing to the development of the metaverse.Unlocking Web3 opportunitiesThe Sandbox emphasized the significance of Lion City as a gateway and launchpad for Southeast Asia. With over 400 global brands, including Singapore’s DBS Bank, already on board, Lion City has the potential to unlock new Web3 possibilities in the region. The supportive and collaborative ecosystem in Singapore will provide companies with opportunities to explore digital frontiers and test decentralized technologies.The project also announced the milestone during the Singapore Partner Day event held at the Marina Bay Sands Expo & Convention Centre. The event served as a platform for networking and sharing insights among The Sandbox’s partners.Keynotes were delivered by Sébastien Borget, the Co-Founder and COO of The Sandbox, and George Wong, the project’s Head of Singapore. They discussed the vast opportunities within the metaverse, and panel discussions with ecosystem partners took place, covering topics like intellectual properties (IPs) and the metaverse’s future, as well as the development of the open NFT metaverse.During the event, Borget highlighted Singapore’s regulatory environment, as being conducive to emerging technologies. He also emphasized Singapore’s position as an innovation hub for Web3 advancements.The metaverse faces new challenges in 2023, with the crypto market gravitating towards a more institutional-friendly approach, and questions surrounding its relevance. Recently, Borget had a clash with the SEC in the United States, disagreeing with the regulator’s classification of the project’s native $SAND token as a security.No doubt that experience has helped to underscore his appreciation for Singapore’s regulatory setup. Nevertheless, Wong described 2023 as an important and pivotal year for metaverse growth.