Internet-only Kbank offers virtual accounts for fractional art investors

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

Korean Firms Join Forces to Expand the Security Token MarketSouth Korean tech firm AIITONE announced today that it signed a memorandum of understanding (MOU) with real estate developer Korea Asset Development to expand security token businesses, according to a report by news agency Newsis.Photo by Shubham Dhage on UnsplashVentures into fintechAIITONE is renowned for its expertise in applying extended reality (XR) technology to smart defense and metaverse projects. In their latest strategic move, they have hired a blockchain tech group to venture into fintech sectors, with a specific focus on security tokens.Real estate expertiseKorea Asset Development, a real estate developer engaged in multiple projects nationwide, is currently involved in the development of upscale housing in Seoul and Busan, high-end residences in Songdo, as well as luxury resorts in Chungcheong and Gangwon Provinces.Through their collaborative endeavors, AIITONE and Korea Asset Development seek to capitalize on their respective technological expertise and knowledge. They plan to share their know-how and establish a comprehensive cooperation framework, specifically targeting content development associated with security tokens. Furthermore, both parties have committed to consistently exploring new areas of cooperation.Security token opportunitiesIn particular, the two companies have identified real estate due to its relatively easier valuation compared to other assets. The market for real estate security tokens in Korea is projected to reach 34 trillion KRW ($26 billion) by 2024. It is estimated that financial services, including real estate, account for approximately 70% of the total security token market size.AIITONE CEO Lee Jin-yup underlined the importance of cooperation with a range of players that bring diverse resources, considering that the security token market involves high-value tangible assets such as real estate, music, and artworks. He said the partnership with Korea Asset Development will help the company secure a competitive edge in the burgeoning real estate security token market.Development in JapanNot just South Korea, but other East Asian nations too are experiencing significant strides in the security token market. Japan serves as a case in point, with companies like Mitsui & Co. Digital Asset Management (Mitsui & Co. DAM) exploring the potential of this emerging market.Mitsui & Co. DAM last month introduced a platform that allows retail investors to access security tokens backed by real-world assets. This initiative opens up previously inaccessible investment opportunities to a broader range of participants.Moreover, the Tokyo Metropolitan Government has taken an active role in supporting security token businesses within its jurisdiction. From May 31, 2023, to February 29, 2024, the government runs a subsidy program for security token projects based in the capital city. Under this program, eligible businesses can receive subsidies of up to 5 million yen ($36,000) per project.

Hong Kong Reiterates Web3 Credentials and CommitmentHong Kong is committed to growing the Web3 industry under appropriate regulations, according to government officials.©Pexels/Andrea PiacquadioAt the four-day Web3 Festival, which is the largest Web3 event that the city has hosted since declaring its intention last year to become a digital asset hub, Financial Secretary Paul Chan stated that the stability of the financial system and investor protection should not be damaged, and that appropriate regulations are a must to create a sustainable development environment and a more ideal space for development.DeFi licensing requirementSome attendees were surprised to learn that the Securities and Futures Commission (SFC) believes that decentralized finance (DeFi) platforms for virtual assets need a license under existing rules. Keith Choy, interim head of the intermediaries division at the SFC, stated that people operating or performing DeFi activities should be subject to Hong Kong’s licensing requirements.This means that if Hong Kong really intends to regulate DeFi, it will have a stricter environment than Singapore. The Web3 industry has been closely watching the development of a new regulatory framework for virtual assets in Hong Kong since the city revealed at the end of October its intention to become a cryptocurrency hub. Under new regulations that go into effect in June, cryptocurrency exchanges serving customers in Hong Kong must be licensed by the SFC.10,000 Web3 Festival attendeesThe event attracted more than 10,000 people ahead of the conference, with several big-name speakers and exhibitors looking for new opportunities in the city. OKX and Filecoin were some of the large cryptocurrency firms in attendance, as were traditional tech firms like Tencent Cloud, which had a booth touting its blockchain-related services for corporate clients. Alibaba Cloud was also a co-organiser, along with Amazon Web Services and Hong Kong’s Cyberport.Binance co-founder and CEO Zhao Changpeng (CZ) also dialed in via video for a fireside chat. Last month, the US Commodity Futures Trading Commission (CFTC) sued CZ and Binance over what it alleged was “sham” compliance with domestic regulations. The company has been scrutinized over connections to its local firm Binance.US, which legally is meant to operate as a separate entity. Zhao was not asked and did not address his legal troubles at the conference. However, he did note that Binance is in talks with regulators in many markets.“We are actively engaged with regulators all around the world,” Zhao said. “Many of them are very receptive, some of them are still skeptical, and that’s fine, but we need to engage. We need to have dialogue, we need conversations, and we also need patience.”Singapore comparisonsHong Kong has frequently been compared with Singapore, which had been considered a friendlier market for related activity until Hong Kong’s policy shift. Some attendees had hoped that Hong Kong’s shift would provide some competition for Singapore in the region. “We did see a very obvious trend of people flying to Singapore to make sure their business was part of this space,” said Luke Liu, chief core ecosystem contributor at cross-chain protocol developer Poly Network. “Hong Kong and Singapore can coexist in some sense, but there is definitely a very positive change going on recently because of the Hong Kong policy announcement.”Hong Kong has reaffirmed its commitment to growing the Web3 industry under “appropriate” regulations, with the stability of the financial system and investor protection as a top priority. This has been reiterated during the largest Web3 event in the city since declaring its intention to become a digital asset hub.