Top

Suspected Malicious Activity Drains AnySwap Tokens via Multichain Executor

Web3 & Enterprise·July 13, 2023, 12:06 AM

According to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.

Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.

Photo by Marek Piwnicki on Unsplash

 

$100 million outflow

This revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).

Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.

The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.

In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.

 

Potential exploit

Spreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.

The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.

 

Hack or rug pull

The Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.

Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

More to Read
View All
Web3 & Enterprise·

Aug 25, 2025

DBS Bank enables crypto-linked structured note distribution

Singapore’s DBS Bank has announced the launch of the distribution of crypto-linked structured notes. The development will see structured notes tokenized on the Ethereum blockchain, with the product being made available to eligible non-DBS clients across three digital investment platforms and exchanges. In a press release published to its website on Aug. 21, DBS, the largest bank in Southeast Asia, disclosed that its tokenized structured notes would be made available to the investing public via ADDX, DigiFT and HydraX. These platforms have signed agreements with DBS to distribute its tokenized structured notes, which are debt securities that combine various types of financial products into one offering.Photo by Shubham Dhage on UnsplashFirst token distributionThe development marks a milestone for DBS insofar as it makes for the bank’s first-ever token distribution. The bank explained that the nature of the note means that investors are provided with a cash payout when cryptocurrency prices rise. In this way, the investor can build exposure to the asset class without having to directly manage any digital assets.While this is DBS Bank’s first token distribution, the bank had launched crypto-linked structured notes for its own eligible clients back in September 2024. DBS asserted that demand for the product has been strong, given that it enables investors to run advanced investment strategies related to their digital asset portfolios. ‘The next frontier of financial markets infrastructure’Commenting on the development, DBS Bank’s Head of Foreign Exchange and Digital Assets, Li Zhen, said that “asset tokenization is the next frontier of financial markets infrastructure.” He added that the tokenized product offering addresses a growing institutional appetite for digital assets. Singapore-based Ryan De Souza, APAC partnership lead at blockchain development firm Offchain Labs, described the product offering as an example of the fractionalization prophecy starting to play out. Access to this type of product would typically be available with a minimum investment size of $100,000. With the tokenization of the product, accessibility is increased given that minimum investment has been reduced to $1,000. Each tokenized note represents a fungible $1,000 share of the conventional structure note product. The development is also significant from the perspective of Ethereum. It demonstrates yet another instance of institutional adoption, which increases both liquidity and demand relative to ETH. Tokenized product offerings are likely to gain further momentum given that they bring greater transparency and efficiency by comparison with conventional offerings. DBS outlined that its clients executed in excess of $1 billion in trades involving tokenized structured notes and crypto options within the first half of 2025. Additionally, trade volumes related to these products grew by almost 60% from Q1 2025 to Q2 2025.Singapore-headquartered product distribution partner DigiFT recently partnered with crypto market maker GSR with the launch of its secondary over-the-counter (OTC) trading service for tokenized real-world assets (RWAs). Back in March, DigiFT announced plans to launch an on-chain index fund, backed by a tokenized stock portfolio. ADDX, another Singapore-based platform, had joined forces with OCBC Bank back in 2023 with a view towards facilitating the launch of a tokenized equity-linked structured note.

news
Web3 & Enterprise·

Dec 21, 2023

OKX shores up App security following bug discovery

OKX shores up App security following bug discoveryCryptocurrency exchange OKX has swiftly responded to a recently uncovered security flaw by releasing an updated version (v6.45.0) of its iOS app.User data and asset vulnerabilityThe flaw was identified by Web3 and blockchain security specialist CertiK. It posed a Remote Code Execution (RCE) vulnerability that had the potential to compromise sensitive user data and crypto assets. Notwithstanding that, no user assets were lost or security compromised.Taking to the X social media platform on Tuesday, CertiK wrote:”Attention! We urge users of OKX wallets to update their iOS app to the latest version immediately. Earlier this month, we identified and reported a critical Remote Code Execution (RCE) vulnerability in the OKX iOS App, leading to potential compromise of sensitive data and crypto assets.”Photo by FLY:D on UnsplashPrompt responseRecognizing the risk, OKX has acted promptly to rectify the issue and commit to protecting user assets. It too followed up on social media with its own announcement:”Thanks @Certik for the note. We’ve completed the relevant upgrade & this is no longer an issue. We have verified that this did not impact any customer assets. The fix has been deployed to iOS version 6.45.0 & we recommend you update the app asap.”Ongoing exploitsThis security incident has played out amid a backdrop that has seen a worrying number of hacks, exploits and vulnerabilities in the crypto space. In recent weeks, hacks at HTX (formerly Huobi), cross-chain bridge Heco and Poloniex have accounted for millions of dollars in losses.As recently as last week, users of the Ledger hardware wallet were told by the company not to connect to decentralized applications as it had discovered that a malicious version of its Ledger Connect software had been distributed.Industry collaborationThe collaboration between OKX and CertiK in addressing this security concern is demonstrative of how industry actors are having to cooperate in order to deal effectively with these vulnerabilities and threats.Transparent communication and a swift response in this instance are likely to have played a role in minimizing any potential loss. In a noteworthy development, OKX, in collaboration with Tether, has collaborated with the United States Department of Justice (DOJ) to freeze $225 million in USDT tokens.This unprecedented action primarily targeted a human trafficking syndicate in Southeast Asia, illustrating the increasing cooperation between crypto entities and law enforcement in addressing illegal activities involving digital currencies.The immediate resolution of the iOS app vulnerability in this instance resulted in no loss occurring. That outcome underscores the importance of the prioritization of user safety and data security.With the updated app version (v6.45.0) now available, users can proceed with their crypto transactions with renewed confidence in the platform’s security measures. As the cryptocurrency landscape evolves, crypto platforms and platform users will need to remain vigilant in order to safeguard and protect funds.

news
Markets·

Apr 13, 2023

Shapella Upgrade to Have limited Impact on ETH’s Selling Pressure

Shapella Upgrade to Have limited Impact on ETH’s Selling PressureThe Shapella upgrade on the Ethereum network scheduled to take place on Wednesday will only have a limited impact on the selling pressure on ETH, according to a report by the research center at Korean cryptocurrency exchange Korbit.©Pexels/JievaniShapella upgradeOne of the key features of the Shapella upgrade is to allow withdrawal of staked ETH. This upgrade follows September’s Merge upgrade that switched the Ethereum network’s consensus algorithm from Proof of Work to Proof of Stake, significantly reducing electricity consumption.Impact on selling pressureTo predict the impact of the Shapella upgrade on the selling pressure on ETH, the analysts at Korbit Research calculated the amount of time it takes for all the ETH staked as of March 22 to be withdrawn. They believe this calculation is relevant because withdrawals of staked ETH could trigger bulk sales, potentially imposing a greater selling pressure on ETH.According to the findings, the daily sell volume for the first three days is expected to be 300,700 ETH, 0.254% of the circulating supply. This volume will gradually decrease to 43,000 ETH for the next six months and to 29,000 ETH for the following six months, each corresponding to 0.035% and 0.024% of the circulating supply, respectively.All in all, bulk selling of ETH is not likely, considering it will take about a year and five months for all the staked ETH to be withdrawn and that the amount of withdrawable ETH will stay relatively low for each period. Furthermore, since this analysis assumes an extreme case, the market will be able to effectively handle the volume over the six month to 18 month period.4 other reasonsIn addition, Korbit Research outlined four other aspects that limit the selling pressure on ETH.Firstly, there is some concern that the selling volume of ETH may increase due to unstaking resulting from the cessation of staking services at American crypto exchange Kraken. However, a decrease in the number of validators on the Ethereum network will raise the base reward. This may prompt those who unstaked ETH to stake them on other platforms, rather than selling them.Second, ETH locked up at liquidity staking protocols such as Lido Finance and Rocket Pool provide liquidity for representations of staked ETH. These platforms allow users to stake fewer than 32 ETH for rewards. According to a February Binance Research report, 57.7% of ETH stakers enjoy liquidity and rewards. Therefore, there may be a limited impetus to divest of staked ETH.Third, since only 41.1% of ETH stakers are seeing profits as of the time of writing the report, the remaining stakers would have to risk losses when withdrawing ETH. This suggests that those not yet seeing profits are more likely to keep ETH staked. Furthermore, Dune Analytics data shows that most of the ETH stakers with gains staked ETH when its price was relatively low, which indicates that they participated in staking in early days. Shivam Sharma, the author of the aforementioned Binance report, states that these ETH stakers are likely “some of the strongest Ethereum believers.”Lastly, despite the Shapella upgrade, ETH withdrawals at different staking pools may not be initiated immediately. This could limit the circulation of withdrawable ETH, which in turn would hinder the selling pressure on ETH.Macroeconomic factorsThe Korbit researchers concluded their paper with a note that the selling pressure on ETH will be more influenced by macroeconomic factors than technical factors. They added that a possible downturn in the overall economy and corrections in risky asset markets might lead investors to sell ETH.

news
Loading