Top

Suspected Malicious Activity Drains AnySwap Tokens via Multichain Executor

Web3 & Enterprise·July 13, 2023, 12:06 AM

According to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.

Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.

Photo by Marek Piwnicki on Unsplash

 

$100 million outflow

This revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).

Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.

The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.

In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.

 

Potential exploit

Spreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.

The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.

 

Hack or rug pull

The Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.

Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

More to Read
View All
Web3 & Enterprise·

Jul 01, 2023

China Mobile Establishes Metaverse Industry Alliance

China Mobile Establishes Metaverse Industry AllianceChina Mobile, one of the leading telecommunications companies in China, has taken a significant step forward in the development of the metaverse by announcing the establishment of an industry alliance during the 2023 Mobile World Congress in Shanghai.News of the development broke via a state-backed media outlet, the Shanghai Securities Journal, in its reporting from the event on Wednesday.Photo by julien Tromeur on UnsplashA trillion yuan marketAt the forefront of this endeavor is Zhao Dachun, Deputy General Manager of China Mobile. Dachun emphasized the metaverse’s potential as a trillion-yuan level market. Recognizing its significance, China Mobile has unveiled the first batch of 24 members of the metaverse industry alliance. Among them are renowned companies such as iFlytek, a leading AI company, HTC, a prominent manufacturer of VR goggles, and MGTV, a popular video streaming platform.The establishment of the alliance serves multiple purposes. It provides a platform for industry partners to engage in discussions and collaboratively shape the future of the metaverse industry. This cooperative effort will contribute to the development of industry standards, facilitating a shared vision for the metaverse ecosystem.More effective metaverse collaborationAdditionally, the alliance aims to foster resource sharing, encouraging deeper integration and collaboration among its members. By adopting a win-win mindset, the alliance members seek to collectively benefit from the new opportunities that arise within the digital economy.Further supporting the metaverse vision, Migu, the digital content unit of China Mobile, has taken significant steps by establishing its metaverse headquarters in Xiamen, a city located in the Fujian province of China.Regional government partnershipIn a promising partnership, Migu has entered into a strategic cooperation agreement with the Xiamen government to spearhead the development of a metaverse within the city. The metaverse, a digital world created through advanced technologies such as virtual reality and augmented reality, holds great potential for transforming Xiamen into a “high-quality, high-value, modern, and international” city that thrives on digital intelligence.Migu’s plans extend beyond theoretical concepts, as they outline concrete steps to realize the metaverse vision. Key application scenarios, such as the development of a metaverse version of Gulangyu Island, a renowned tourist destination celebrated for its natural beauty and historical significance, will be a primary focus. By bringing this iconic location to the metaverse, visitors will have the opportunity to experience its charm in a new digital dimension.Moreover, Migu is dedicated to accelerating research on digital governance within the metaverse. With the metaverse expected to have a profound impact on society, understanding how to effectively manage and regulate this emerging digital landscape becomes paramount. Migu aims to lead the way in establishing best practices and frameworks for responsible and inclusive digital governance.Through collaborative efforts, the promotion of industry standards, and strategic investments in key application scenarios, China Mobile is likely to play an important role in unlocking the vast potential of the metaverse. In turn, the initiative is likely to fuel the growth and transformation of the digital economy.

news
Policy & Regulation·

Jul 25, 2023

Report Cites Escalating Crypto Use by Pro-ISIS Groups

Report Cites Escalating Crypto Use by Pro-ISIS GroupsA recently published report suggests that pro-ISIS terrorist groups in central and southeast Asia and the Middle East are increasing their use of cryptocurrency.According to the report which was published on Friday by blockchain analytics firm TRM Labs, cryptocurrency has become a favored tool for terrorist organizations, with ISIS affiliates showing an increasing preference for the Tron network’s USDT stablecoin. The report highlights that terrorist groups worldwide, including those linked to ISIS, are actively utilizing cryptocurrencies for fundraising purposes, allowing them to attract supporters and bolster their operations.Photo by David McBee on PexelsOn-chain evidenceTRM Labs has been closely monitoring these activities over the past year and has uncovered a growing amount of on-chain evidence. Pro-ISIS networks in countries such as Tajikistan, Indonesia, Pakistan, and Afghanistan have been observed using crypto assets to facilitate their illicit activities, with Tether (USDT) stablecoin on the Tron network (TRX) being their preferred choice for transactions.The disturbing revelations show how recruited fighters were enticed to join ISIS’ Afghanistan affiliate (ISKP) through the use of cryptocurrency fundraising campaigns. One such campaign operated for over a year and managed an address that received approximately $2 million in USDT on Tron in 2022. TRM Labs played a role in getting the operation dismantled, leading to the arrest of Shamil Hukumatov, a senior ISIS fundraiser allegedly responsible for the scheme.Indonesia & PakistanIn Indonesia, individuals used a crypto platform to transfer over $517,000 in 2022 to addresses linked to pro-ISIS fundraising campaigns in Syria, all using USDT on Tron. This connection demonstrates the global reach and sophistication of the terrorist groups’ crypto operations.Additionally, a media unit associated with ISPP, the Pakistan affiliate of ISIS, ramped up its fundraising efforts in the latter half of 2022. The entity sought to capitalize on natural disasters, such as earthquakes in Turkey and Syria, to raise funds by publicizing various cryptocurrency addresses flagged by TRM Labs as associated with the terrorist organization.SyriaTRM Labs’ investigation ultimately points to pro-ISIS fundraising campaigns in Syria as a central hub for cryptocurrency usage by the terrorist group and its supporters. A significant portion of the donations ends up supporting ISIS families in camps like al-Hol and Roj, as well as funding local cryptocurrency exchanges that facilitate the group’s activities.For TRM Labs, the identification and tracking of these campaigns and their donors are crucial steps in mapping out and potentially disrupting pro-ISIS networks worldwide. Their efforts aim to mitigate the risks posed by the misuse of cryptocurrencies in financing terrorism and illegal activities.The rising adoption of cryptocurrencies by terrorist organizations poses significant challenges to law enforcement agencies and regulatory authorities worldwide. It’s a worrying development for legitimate users of digital assets as it may result in far more heavy-handed regulation as a direct consequence.Under these circumstances, it is crucial for the crypto community, governments, and regulatory bodies to collaborate in implementing effective safeguards against the abuse of digital currencies for nefarious purposes. Only through collective action can this threat be neutralized.

news
Policy & Regulation·

Nov 25, 2025

Regulators clamp down on crypto energy as nations shift priorities

The blockchain network underpinning Bitcoin, the world’s largest cryptocurrency, requires an energy volume comparable to the annual consumption of Thailand. According to Digiconomist’s Bitcoin Energy Consumption Index, the protocol utilized roughly 204.44 terawatt-hours (TWh) of electricity between Nov. 18, 2024, and Nov. 18, 2025.Photo by Fré Sonneveld on UnsplashFiscal losses drive Malaysian oversightAmid these intense energy demands, Malaysia’s primary electricity utility has recorded substantial financial impairments attributed to illicit activities. Tenaga Nasional Bhd (TNB) reported losses totaling 4.57 billion ringgit ($1.1 billion) from illegal crypto-mining operations over a five-year span. In a Nov. 19 report by The Edge Malaysia, the Ministry of Energy Transition and Water Transformation (Petra) disclosed these figures to parliament, specifying that the unauthorized mining occurred at 13,827 locations between 2020 and August of this year. To counter these infractions through regulatory channels, Petra has formed a special committee scheduled to convene before year-end. This body aims to recommend enhancements to the Electricity Supply Act, which currently delineates penalties based on the offender's classification. Domestic violators face fines ranging from 1,000 to 50,000 ringgit ($240 to $12,000), imprisonment of up to one year, or both. Penalties escalate for non-domestic entities, involving fines between 20,000 and one million ringgit ($480 to $240,000) and potential prison terms of up to five years. Despite these provisions regarding electricity theft, a specific legal code regulating the act of crypto mining remains absent, creating a jurisdictional void. International bans and grid reallocationStrategies to curtail electricity usage by crypto miners are becoming evident elsewhere in Southeast Asia as well. Laotian Deputy Energy Minister Chanthaboun Soukaloun told Reuters last month that the nation intends to suspend electricity supplies to crypto miners by early 2026. He cited the sector's minimal economic contribution and low job creation as primary factors. Consequently, the state plans to redirect power to high-priority sectors, including AI data centers, metals processing, and electric-vehicle manufacturing. Parallel restrictions are emerging globally. In October, the government of British Columbia enacted a permanent prohibition on new BC Hydro connections for crypto miners to safeguard the Canadian province’s energy reserves. Officials pointed to the industry’s "disproportionate energy consumption and limited economic benefit" as the rationale for the policy. The debate over thermal innovationConversely, some enterprises are exploring methods to capture thermal output from Bitcoin mining to heat residential and commercial properties. If viable, such repurposing could utilize the considerable thermal byproducts of mining. A K33 Research study cited by CNBC indicates the industry generates roughly 100 TWh of heat annually, a figure sufficient to warm the entirety of Finland. However, industry consensus on the feasibility of these applications remains elusive. Proponents suggest that mining infrastructure could be situated in proximity to heat consumers. Skeptics, however, contend that the reliance on application-specific integrated circuit (ASIC) chips makes this impractical, arguing that the technical difficulty of mining a block renders household participation unfeasible. Despite these differing views, the concept continues to attract attention as a potential avenue for innovation in energy distribution. As jurisdictions like Malaysia and British Columbia tighten regulatory oversight, the cryptocurrency sector faces mounting pressure to address its energy footprint. The divergence between government restrictions and industry-led efficiency proposals underscores the complex relationship between digital asset infrastructure and global energy resources. Given the shifting landscape of policy and technology, the outlook for sustainable large-scale crypto mining remains uncertain, as governments weigh energy demands against economic benefits and the industry searches for more efficient ways to operate.

news
Loading