Top

Suspected Malicious Activity Drains AnySwap Tokens via Multichain Executor

Web3 & Enterprise·July 13, 2023, 12:06 AM

According to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.

Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.

Photo by Marek Piwnicki on Unsplash

 

$100 million outflow

This revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).

Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.

The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.

In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.

 

Potential exploit

Spreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.

The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.

 

Hack or rug pull

The Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.

Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

More to Read
View All
Web3 & Enterprise·

Oct 07, 2024

Zetrix launches product to simplify KYC for Chinese nationals

Zetrix, a layer-1 blockchain project for real-world applications, has launched an electronic Know Your Customer (KYC) verification product for Chinese nationals. The Malaysian enterprise, which is a subsidiary of digital services company My E.G. Services Berhad (MYEG), has launched ZCert. The offering is available to Chinese nationals who opt to have their digital identities published to the Xinghuo BF network, a Chinese national blockchain infrastructure network developed under the guidance of China’s Ministry of Industry and Information Technology and managed by the China Academy of Information and Communications Technology.Photo by Diego Jimenez on UnsplashFirst-of-its-kind applicationZetrix acts as an international super-node relative to the Xinghuo blockchain. In a press release published by PR Newswire on Oct. 3, the company outlined that ZCert had been launched as a first-of-its-kind application, enabling Chinese nationals “to be authenticated and verified digitally overseas, paving the way for a seamless, efficient, and secure verification process for verifiers and identity holders. ” The service simplifies the issue of identity verification for verifiers located outside of China, as a consequence of Zetrix’s integration with the Xinghuo BIF network.  Connecting to ‘China Web3’Xinghuo signed a memorandum of understanding (MoU) with Zetrix’s parent company, MYEG, to establish the international super-node back in November 2022. The tie-up was seen as an opportunity to provide access to Chinese government agencies and businesses internationally.  At the time, MYEG Managing Director and Zetrix Co-Founder Wong Thean Soon said that “with the commencement of the Xinghuo International Supernode, the rest of the world can connect and be part of the China Web 3 evolution that will promote the establishment of international communities and facilitate global trade and finance.”  On this occasion, Wong said that the new product “enables a new wave of services powered by smart contracts.” He added that KYC processes can be simplified and automated, while “user data is retained by users at all times and only critical information is shared in an encrypted manner." The company has already digitized Chinese driving licenses for the purpose of overseas verification. Furthermore, it has plans to expand its offering beyond ID verification soon. In April of this year, Zetrix and MYEG signed an MOU with MaiCapital, a Hong Kong-based virtual assets manager, with a view towards collaborating on the launch of a digital asset fund or digital asset-based exchange-traded fund (ETF). Last year Zetrix engaged in a pilot project with the Bank of China with the aim of offering supply chain financing products. On a similar theme, its parent company entered into a partnership with the Philippines Bureau of Customs (BOC) and Cargo Data Exchange Center Inc. (CDEC), also in 2023. The collaboration involved the use of Zetrix’s ZTrade product, a Web3 platform that enables digitized trade document verification. Zetrix launched its ZETRIX token in October 2023 through an initial exchange offering (IEO) facilitated by the Coinstore exchange.

news
Web3 & Enterprise·

Nov 07, 2024

Paxos launches USDG stablecoin in Singapore

Regulated blockchain and digital asset solutions provider Paxos has announced the launch of its latest digital asset, the Global Dollar (USDG), a U.S. dollar-backed stablecoin. The company outlined in a press release published to its website on Nov. 31 that the USDG stablecoin is being issued by its local Singaporean corporate entity, Paxos Digital Singapore Pte. Ltd., with the product being regulated by the Monetary Authority of Singapore (MAS).Photo by Alexander Grey on UnsplashMAS compliant offeringThe company claims that the offering is “substantively compliant” with the stablecoin regulatory framework that MAS intends to roll out imminently. Paxos paved the way for this latest product offering back in July when it obtained a Digital Payment Token license from MAS, enabling it to issue U.S. dollar-backed stablecoins within the city-state. In terms of distribution, Paxos intends to partner with global crypto exchanges, wallets and platforms in an effort to get this new product out into the market.  DBS Bank partnershipIts first partnership with regard to the Global Dollar has already been struck with DBS Bank, Singapore and Southeast Asia’s largest bank based on assets held. DBS will play a role in the custody of USDG reserves and in cash management relative to the project.  Ronak Daya, Head of Product at Paxos, said that “USDG offers a trusted solution with a top-tier banking partner in DBS that will be the catalyst to drive stablecoin innovation and enterprise adoption at a global scale.” This latest product launch appears to be similar to the approach the company has taken in the Middle East. Back in June a United Arab Emirates (UAE)-based affiliate company launched the Lift Dollar (USDL), a yield-generating U.S. dollar-backed stablecoin under the regulatory oversight of the Financial Services Regulatory Authority (FSRA), the regulator within the Abu Dhabi Global Market (ADGM) free zone and international financial center. Running on EthereumThe USDL stablecoin started out on the Ethereum network, with it launching on the Arbitrum network in October. A similar roadmap has been set for USDG, with it launching on Ethereum while Paxos maintains that it “will be issued on more blockchains in the near term.” The Stellar network is likely to be one that it expands to in the future. In October the firm announced an integration with the Stellar Development Foundation, with a view towards expanding stablecoin adoption. Daya said that “enterprise interest in stablecoins has never been higher than it is today, but the market lacks a solution that combines regulatory compliance with real economic incentives for enterprises.” The company has developed an expertise in the issuance of digital assets, with USDG being its sixth such issuance. Last week Paxos outlined that it had launched a stablecoin payments platform with the objective of simplifying global transactions for payments providers and merchants. Paxos has also partnered with the Trump family venture, World Liberty Financial, which plans on launching a U.S. dollar stablecoin with the help of Paxos. The firm’s CEO, Charles Cascarilla, also encouraged both U.S. presidential candidates recently to embrace stablecoins as a mechanism through which to safeguard the continuing influence of the U.S. dollar on a global basis. 

news
Web3 & Enterprise·

Jul 28, 2023

Hyundai Motor Harnesses Blockchain to Double Down on Climate Change Efforts

Hyundai Motor Harnesses Blockchain to Double Down on Climate Change EffortsSouth Korean auto giant Hyundai Motor Group is taking significant strides in tackling global climate change concerns by harnessing the power of blockchain technology.Photo by Chris Liverani on UnsplashTracking carbon emissionsToday, Hyundai Motor and Kia, two affiliates of the group, have introduced the Supplier CO2 Emission Monitoring System (SCEMS), a carbon emission tracking solution based on blockchain technology. This system marks a pivotal step towards intensifying their efforts to reduce carbon emissions across their extensive supply chain.The SCEMS is designed to record and manage carbon footprints at every stage of the manufacturing process, starting from the extraction of raw materials to the production and delivery of parts and vehicles. This comprehensive approach allows Hyundai and Kia to gain better control over their carbon reduction initiatives.The urgency of addressing climate change has made it essential for organizations of all sizes to manage and decrease their carbon emissions. However, calculating carbon footprints requires an understanding of complex standards and intricate mathematical processes.Supply chainTo address these challenges, Hyundai Motor and Kia are providing the SCEMS to hundreds of their suppliers free of charge, offering them the necessary tools to effectively curb carbon emissions. The SCEMS employs artificial intelligence modeling, which automatically computes carbon emissions and predicts future projections as suppliers from various industries input their data into the system.Previously, these suppliers had to rely on external experts to perform such calculations. By adopting Hyundai’s new system, suppliers can now independently set their carbon reduction goals and efficiently manage their activities, thereby cutting costs and enhancing their competencies.Incorporating blockchainMoreover, Hyundai Motor and Kia anticipate that the incorporation of blockchain technology into their operations will bolster the reliability of their data, increasing their credibility among global evaluators of environmental, social, and governance (ESG) management.A Hyundai official emphasized that the scope of eco-friendly products now encompasses their entire lifecycles and supply chains. The company aims to lead the charge in building a sustainable and green supply chain.In line with this commitment, Hyundai Motor and Kia in February joined the Carbon Disclosure Project’s (CDP) Supply Chain Program, a nonprofit organization that oversees a global disclosure system for investors, companies, and regions to manage their environmental impacts. As part of this initiative, the Hyundai affiliates have also provided education to their suppliers to aid them in achieving carbon neutrality.Under the CDP’s Supply Chain Program, Hyundai affiliates’ suppliers need to submit data on energy consumption and greenhouse gas emissions, along with carbon neutrality strategies, sustainability objectives, and renewable energy transition plans to the nonprofit organization.

news
Loading