LINE NEXT Captivates NFT Aficionados with Beta Launch of DOSI Land

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

The Korea Security Token Offering (KSTO), a South Korea-based association dedicated to providing compliance guidelines for STO projects, announced on Monday that it signed a memorandum of understanding (MOU) with blockchain company Metalab for STO mainnet development. The news was reported by local media outlet Ajunews. Through the MOU, the two institutions plan to create a blockchain platform for local blockchain companies, catering to their needs for STO issuance.Photo by Kaitlyn Baker on UnsplashThe KSTO is an association aiming to provide consultation services on STO design and development and assist blockchain projects in complying with laws and regulations, contributing to building a healthy blockchain ecosystem. Meanwhile, a member of the KSTO, Metalab is a blockchain firm with expertise in developing crypto tokens and decentralized applications, or DApps. The company is reportedly participating in an STO mainnet development project led by the KSTO.  STO infrastructure catering to Korean firms and investors Mainnet refers to the primary blockchain network where actual crypto transactions take place, such as the Ethereum or Solana platform. Mainnets, which operate on their own based on their independent infrastructures, are highly valued in the crypto markets due to the complexity of developing such networks.  This blockchain mainnet project involving Metalab will offer basic infrastructures that enable large-scale STO transactions, with plans to release features for STO issuance and management in connection with crypto wallets.  An KSTO official stated that the institution aims to support companies willing to issue STOs, from both technological and legal perspectives. The person highlighted the institution’s commitment to creating an STO ecosystem tailored for Korean companies, saying that the project will create a regulation-compliant, user-friendly platform and develop it to a level where it can rival the industry’s leading players like Polymesh, a prominent security token platform.  

Coins.ph Suffers 12M XRP ExploitCoins.ph, a leading cryptocurrency exchange in the Philippines, is grappling with the alleged loss of over 12 million XRP tokens, valued at $6 million, in a purported exploit.That’s according to various reports that have been emerging from the Philippines in recent days. The incident not only spotlights serious questions about the security protocols and regulatory oversight of crypto exchanges in the Philippines but it also sparked fears of an impact on market sentiment relative to the XRP unit price.Photo by Kanchanara on UnsplashHacker used various platformsThe reports revealed that an exploit targeted Coins.ph, resulting in the unauthorized transfer and exchange of 12 million XRP tokens in a mere 30 minutes. The hacker behind this incident managed to navigate through various platforms, including OKX, WhiteBIT, OrbitBridge, SimpleSwap, ChangeNOW, and Fixed Float, leaving users and investors alarmed.Coins.ph’s wallet, the focal point of the exploit, has a connection to BitGo, a California-based crypto custody firm, which initiated its activation back in 2018. At present, neither Coins.ph nor BitGo has issued any official statements regarding this reported breach.The alleged exploit brings to the forefront once again, the importance of robust security protocols and regulatory oversight within the cryptocurrency industry in the Philippines and elsewhere. Coins.ph is a major player in the crypto sector in the Southeast Asian country, having more than 10 million users.The hacker responsible for the exploit attempted to execute several transactions, trading nearly 13 million XRP tokens, with one transaction seemingly failing to go through. Following the successful acquisition of approximately 12.2 million XRP tokens, the hacker swiftly moved these assets to different exchanges.Responding to the incident, some platforms promptly blocked or marked the stolen XRP tokens and sought assistance from blockchain analysis firms such as Cristal and Chainalysis. This exploit is being deemed as one of the most substantial thefts of XRP tokens in recent history.It’s understood that WhiteBIT blocked the movement of some of the XRP that has been implicated in the hack. WhiteBIT told The Block: “WhiteBIT, as soon as received a request from the Philippines-based exchange Coins, promptly reacted and blocked 445,000 Ripple.”XRP impactXRP, the native cryptocurrency of the Ripple network, which primarily focuses on facilitating cross-border payments, has been grappling with its price stability in recent times. This has been largely due to the ongoing legal disputes between Ripple and the US Securities and Exchange Commission (SEC) over allegations of conducting unregistered securities offerings.While it had been speculated initially that the hack would have impacted the XRP unit price, XRP seems to have held up well. At the time of writing, it was trading at $0.526. There has been an overall uplift in the crypto market as a whole over the course of the past 24 hours which may be a contributing factor, with digital asset market cap being up 2.7%.As the crypto community waits for official responses from Coins.ph and BitGo, the incident serves as a stark reminder of the importance of safeguarding digital assets and enhancing regulatory oversight in an industry that continues to evolve and expand.