Top

Suspected Malicious Activity Drains AnySwap Tokens via Multichain Executor

Web3 & Enterprise·July 13, 2023, 12:06 AM

According to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.

Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.

Photo by Marek Piwnicki on Unsplash

 

$100 million outflow

This revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).

Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.

The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.

In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.

 

Potential exploit

Spreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.

The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.

 

Hack or rug pull

The Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.

Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

More to Read
View All
Policy & Regulation·

Sep 06, 2023

Japan’s FSA Proposes Tax Exemption for Unrealized Crypto Gains

Japan’s FSA Proposes Tax Exemption for Unrealized Crypto GainsThe Financial Services Agency (FSA) of Japan has taken the step of putting forward amendments that provide a notable tax exemption for unrealized gains on cryptocurrency holdings.Photo by Erik Eastman on UnsplashFSA proposalThe move is significant in that it spares domestic companies from the standard 30% corporate tax rate typically imposed on digital assets up until now. According to reports in local media, that proposal was detailed in a comprehensive 16-page document outlining various regulatory modifications.The most pivotal change within this document is the exemption of domestic companies from the annual “unrealized gains” tax on cryptocurrencies. Unlike some countries that only tax crypto assets when they are converted into fiat currency, Japan currently enforces an annual tax on these digital assets.2023 tax reform agendaThe proposed amendment has garnered support from the Ministry of Economy, Trade and Industry, indicating its potential passage. These discussions are part of Japan’s broader tax reform agenda for 2023, suggestive of the Asian nation’s interest in fostering a favorable environment for the blockchain and cryptocurrency industries.It is important to note that this tax exemption applies exclusively to companies that issue their own tokens and does not extend to entities solely involved in investing in other digital currencies. Additionally, individual crypto investors will still be subject to a maximum income tax rate of 55% on earnings exceeding JPY 200,000 ($1,355) related to cryptocurrency, categorized as “miscellaneous income.”The exemption is structured in a way that excludes these digital coins when assessing a company’s asset market value, provided specific conditions are met. Presently, Japanese law mandates that companies holding crypto assets must pay taxes on unrealized gains at the end of each tax period.To qualify for the tax exemption, a company must meet specific criteria outlined by the tax authority. Firstly, the company must be the issuer of the cryptocurrency in question. Additionally, it must retain continuous ownership of the crypto asset after issuance, while the asset itself remains subject to transfer restrictions.Blockchain ambitionsThis development aligns with Japan’s broader ambition to nurture and expand its blockchain and cryptocurrency sectors. Prime Minister Fumio Kishida recently articulated a vision for a “new form of capitalism,” emphasizing the importance of fostering innovation and growth in emerging industries, inclusive of the Web3 sector. As Japan moves forward with these changes, it signals its interest in creating a conducive environment for blockchain and crypto ventures to thrive.Over time Japan has been iteratively building a framework in respect of digital assets. In 2017 the country recognized Bitcoin as a legitimate property in accordance with the Payment Services Act (PSA). That same year, the Tax Agency classified crypto earnings as miscellaneous income. In 2020, crypto assets were included in Japan’s fund settlement law. Around the same time frame, the FSA brought in the requirement for crypto exchanges to register and obtain a license.These amendments also form part of a series of changes that the Japan Blockchain Association (JBA), an industry advocacy group, has been canvassing for. The proposed changes reflect a pragmatic approach to taxation, doing away with a paper profits taxation treatment in favor of a more progressive approach.

news
Web3 & Enterprise·

Nov 01, 2023

Backpack crypto wallet secures VASP license for crypto exchange in Dubai

Backpack crypto wallet secures VASP license for crypto exchange in DubaiThe Dubai Virtual Assets Regulatory Authority (VARA) recently granted a Virtual Asset Service Provider (VASP) license to the Backpack crypto wallet project. This development has paved the way for the launch of Backpack Exchange, a crypto trading platform.Details of the licensing approval and exchange launch were provided via a press release published by Backpack on Tuesday. The VASP license obtained by the fledgling startup is specific to crypto exchange services within the Dubai jurisdiction. Although it restricts Backpack from offering other virtual asset products and services, the company is embracing the opportunity via the newly launched exchange.Photo by Wael Hneini on UnsplashBackpack ExchangeThe new exchange, Backpack Exchange, incorporates cutting-edge technologies such as zero-knowledge (ZK) proof-of-reserves, multi-party computation (MPC) for custody and low-latency order execution, among other features. These technologies are poised to enhance the security, privacy and efficiency of the exchange in an effort to set it apart in the competitive crypto market.By all accounts, this will not be the last licensing announcement from Backpack. Over the past five months, Backpack Exchange has been working to secure operational licenses across multiple jurisdictions worldwide. This global expansion showcases the company’s interest in taking its product offering in the form of a secure and transparent trading experience further afield.Fiat-to-dApp bridgeWhile the wallet currently operates without specific regulatory oversight, it serves as a bridge for users to transition seamlessly from fiat to on-chain applications. Armani Ferrante, CEO and Co-Founder of Backpack, expressed his ambition to bring greater transparency to the crypto exchange sphere. He emphasized the importance of trust and verification in a sector often shrouded in opacity.Ferrante believes that leveraging cryptographic techniques such as zk-proofs, MPC, and state machine replication can elevate industry standards. Backpack Exchange aims to set a precedent by providing users with the tools and knowledge to verify transactions, ultimately fostering trust and confidence within the crypto community.Dubai’s VARA regulator has been actively enhancing its crypto-friendly regulatory environment. In February 2023, the regulator issued guidelines for VASPs operating within the emirate, emphasizing the importance of adhering to marketing, advertising, and promotion regulations. Violators may face fines ranging from 20,000 UAE dirhams ($5,500) to 200,000 dirhams, with repeat offenders potentially incurring fines as high as 500,000 dirhams.Solana ecosystem projectBackpack is very much a Solana-centric project. As a lead developer of the layer one blockchain, Ferrante is bullish in terms of future development on the Solana blockchain. His Mad Lads NFT project is the top-rated collection by market cap within the Solana ecosystem.In a podcast earlier this year, he outlined that the prospects for the blockchain are bright going forward. Backpack was first established by crypto infrastructure firm Coral, the creator of Anchor, one of the most popular smart contract developer frameworks for Solana.For existing Backpack and Mad Lads users (Mad Lads is a collection of 9,966 NFTs created by Ferrante), exciting prospects are on the horizon via the new exchange. Initial access to Backpack Exchange will be granted starting in November, with full public availability anticipated in Q1 2024. During this interim period, Backpack plans to introduce various trading functionalities, including derivatives, margin trading and cross-collateralization.

news
Policy & Regulation·

Sep 01, 2023

KuCoin Report Points to Marked Increase in Crypto Investors in Turkey

KuCoin Report Points to Marked Increase in Crypto Investors in TurkeyAs part of its “Into The Cryptoverse: Understanding Crypto Users” series, Seychelles-based crypto exchange KuCoin published a report on Thursday that identifies a significant increase in the number of crypto investors in Turkey over the course of the past eighteen months.Photo by Dima Rogachevskiy on UnsplashCrypto adoption surgeThe report, the fifteenth such report produced by KuCoin as part of this series, reveals that there has been a substantial surge in crypto adoption among Turkish adults, with an impressive 52% of the adult population participating in crypto investments.Since November 2021 there has been a 12% increase in the number of crypto investors aged 18 to 60. These statistics underscore the growing interest and acceptance of cryptocurrencies in Turkey. It’s not likely to be a coincidence that this surge in adoption has come about against the backdrop of the local currency, the Turkish lira, losing more than 50% of its value against the US dollar.Here are some of the key insights that the report identified:Growing Crypto Adoption Among Turkish Adults: The survey indicates a significant upswing in the number of Turkish adults investing in cryptocurrencies. The percentage of adults embracing crypto has surged from 40% to 52% over the last year and a half, despite the overall crypto market finding itself in the doldrums within that time frame.Increased Female Participation: While male investors continue to dominate at a rate of 57%, the survey points to a notable trend of increasing participation among women, particularly in the younger age brackets. Approximately 47% of female crypto investors are between the ages of 18 and 30.Youth-Driven Growth: Younger generations are leading the crypto adoption charge, with investors aged 31 to 44 constituting the largest group at 48%. Furthermore, a significant proportion of investors under 30 joined the market within the past year, indicating the influence of youth within the crypto space.Many have expressed the view that crypto adoption will come about through the younger demographic. It’s a factor that has not gone unnoticed by crypto platforms, including fellow Seychelles-based exchange Bitget.Motivations for Crypto Investments: The report delves into the motivations behind crypto investments among Turkish adults. A substantial 58% express the desire to create long-term wealth, transcending generational boundaries. This suggests a widespread belief in crypto’s potential as a tool for financial freedom.Popular Cryptocurrencies: Bitcoin remains a favored choice, capturing 71% of overall investor interest. Ethereum follows closely with 45% interest, while stablecoins garnered the attention of 33% of surveyed participants.Crypto Trading Dominates: A significant 70% of Turkish participants use crypto for trading, indicating the prevalent use of cryptocurrencies as investment instruments. Meanwhile, 22% have ventured into buying NFTs.Influence of Personal Connections: Personal relationships play a pivotal role in driving crypto adoption in Turkey. About 57% of participants learned about crypto through family and friends, highlighting the significance of these connections in introducing newcomers to the crypto world.This finding resonates with a similar finding relative to a recently published report covering crypto adoption in Vietnam.The report has been based upon online surveys carried out by KuCoin between May 5 and May 12 of this year.

news
Loading