Top

Suspected Malicious Activity Drains AnySwap Tokens via Multichain Executor

Web3 & Enterprise·July 13, 2023, 12:06 AM

According to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.

Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.

Photo by Marek Piwnicki on Unsplash

 

$100 million outflow

This revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).

Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.

The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.

In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.

 

Potential exploit

Spreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.

The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.

 

Hack or rug pull

The Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.

Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

More to Read
View All
Web3 & Enterprise·

Aug 25, 2025

DBS Bank enables crypto-linked structured note distribution

Singapore’s DBS Bank has announced the launch of the distribution of crypto-linked structured notes. The development will see structured notes tokenized on the Ethereum blockchain, with the product being made available to eligible non-DBS clients across three digital investment platforms and exchanges. In a press release published to its website on Aug. 21, DBS, the largest bank in Southeast Asia, disclosed that its tokenized structured notes would be made available to the investing public via ADDX, DigiFT and HydraX. These platforms have signed agreements with DBS to distribute its tokenized structured notes, which are debt securities that combine various types of financial products into one offering.Photo by Shubham Dhage on UnsplashFirst token distributionThe development marks a milestone for DBS insofar as it makes for the bank’s first-ever token distribution. The bank explained that the nature of the note means that investors are provided with a cash payout when cryptocurrency prices rise. In this way, the investor can build exposure to the asset class without having to directly manage any digital assets.While this is DBS Bank’s first token distribution, the bank had launched crypto-linked structured notes for its own eligible clients back in September 2024. DBS asserted that demand for the product has been strong, given that it enables investors to run advanced investment strategies related to their digital asset portfolios. ‘The next frontier of financial markets infrastructure’Commenting on the development, DBS Bank’s Head of Foreign Exchange and Digital Assets, Li Zhen, said that “asset tokenization is the next frontier of financial markets infrastructure.” He added that the tokenized product offering addresses a growing institutional appetite for digital assets. Singapore-based Ryan De Souza, APAC partnership lead at blockchain development firm Offchain Labs, described the product offering as an example of the fractionalization prophecy starting to play out. Access to this type of product would typically be available with a minimum investment size of $100,000. With the tokenization of the product, accessibility is increased given that minimum investment has been reduced to $1,000. Each tokenized note represents a fungible $1,000 share of the conventional structure note product. The development is also significant from the perspective of Ethereum. It demonstrates yet another instance of institutional adoption, which increases both liquidity and demand relative to ETH. Tokenized product offerings are likely to gain further momentum given that they bring greater transparency and efficiency by comparison with conventional offerings. DBS outlined that its clients executed in excess of $1 billion in trades involving tokenized structured notes and crypto options within the first half of 2025. Additionally, trade volumes related to these products grew by almost 60% from Q1 2025 to Q2 2025.Singapore-headquartered product distribution partner DigiFT recently partnered with crypto market maker GSR with the launch of its secondary over-the-counter (OTC) trading service for tokenized real-world assets (RWAs). Back in March, DigiFT announced plans to launch an on-chain index fund, backed by a tokenized stock portfolio. ADDX, another Singapore-based platform, had joined forces with OCBC Bank back in 2023 with a view towards facilitating the launch of a tokenized equity-linked structured note.

news
Policy & Regulation·

Jan 27, 2024

Hong Kong raises red flag on 'Floki' and 'TokenFi' staking programs

Hong Kong's financial watchdog, the Securities and Futures Commission (SFC), has issued a stern warning against two crypto investment schemes, namely the "Floki” and “TokenFi” staking programs. Offering high annual returnsThese programs, luring investors with enticing promises of annual returns ranging from 30% to over 100%, have triggered concerns within the regulatory authority due to their lack of authorization and questionable nature. In an update issued on Friday, the SFC emphasized that both Floki and TokenFi's staking offerings have not been granted approval for public offerings. Furthermore, the administrators of these programs have failed to provide convincing explanations about the feasibility of achieving such unusually high returns. The SFC cautioned that engaging in staking arrangements involving virtual assets without proper authorization may constitute unauthorized collective investment schemes.Photo by Sigmund on UnsplashUnsustainable yieldThe watchdog expressed its worry about the legitimacy of these staking programs, highlighting that neither has received the necessary authorization to provide services to the public in Hong Kong. Investors participating in these programs would not be protected under the SFC's regulations, potentially exposing them to significant financial losses. With the failure of many crypto platforms in 2022, a number of industry commentators began to question the sustainability of some public offerings. One such commentator, Allen Farrington, General Partner at bitcoin-native venture capital firm Axiom, repeatedly asked, “Where does the yield come from?” That appears to be the SFC’s concern in this instance. In its statement, it reaffirmed its commitment to upholding regulatory standards and safeguarding investors from fraudulent schemes. It warned that any breach of the law, including the promotion of unlicensed collective investment schemes, will result in appropriate legal action. Elon Musk-inspired meme coinFloki, initially conceived as a meme-coin inspired by Dogecoin, a project associated with Elon Musk, has evolved into a comprehensive Web3 project spanning decentralized finance, NFTs and the metaverse. TokenFi is a crypto and asset tokenization platform under the Floki umbrella, which aims to capitalize on the booming trillion-dollar tokenization industry. TokenFi, denoted by the ticker TOKEN, seeks to simplify the crypto and asset tokenization process with aspirations of becoming a leading platform globally. Launched last October, TokenFi operates as a multichain tokenization platform on both Ethereum and Binance Smart Chain. While both Floki and TokenFi offer distinct staking programs, they share a close integration. Stakers under the Floki scheme gain access to a significant portion of TokenFi's supply, while TokenFi stakers earn TOKEN rewards through a user-friendly interface. In the broader context of crypto staking, the practice allows users to earn rewards by contributing to a blockchain's security through the proof-of-stake mechanism. By staking cryptocurrency, users participate in a staking pool, similar to depositing money into a savings account. Staking rewards typically range from 5-20%, attracting investors seeking profitable opportunities. However, caution is advised against schemes promising unrealistic returns. The SFC, in collaboration with the Hong Kong Police Force, established a dedicated working group last year to enhance vigilance and enforcement in the evolving crypto sector. 

news
Web3 & Enterprise·

Feb 21, 2025

Shares in Moon Inc. surge following 1 BTC purchase

Shares in Moon Inc. (formerly HK Asia Holdings Limited), a publicly listed Hong Kong-based firm that acts as an investment holding company while engaged in activities such as wholesale and retail sales of prepaid products such as SIM cards, have surged following the company’s symbolic purchase of one Bitcoin (BTC).Photo by Thought Catalog on Unsplash93% share price increaseThe stock (1723.HK), which is listed on the Hong Kong Stock Exchange (HKEX), closed at HKD 5.50 following Monday’s trading. That represents a 93% increase compared to the closing share price following the previous day’s trading. The share price has settled somewhat following Tuesday’s trading, pulling back 16% to HKD 4.60. However, it jumped again on Feb. 21, closing at HKD 6.48. Bitcoin adoptionIt’s believed that the stock has been influenced by a decision taken by the company to adopt Bitcoin. The firm bought just one Bitcoin. However, the move has led to speculation as to whether Moon Inc. will become the MicroStrategy (now rebranded as “Strategy”) of China.  Michael Saylor’s Strategy has pioneered the use of Bitcoin as a corporate treasury asset. The company has positioned itself as the frontrunner in terms of the corporate adoption of Bitcoin. The company has amassed 471,000 Bitcoin within its reserves. This accounts for 2% of all Bitcoin. With Strategy’s Bitcoin playbook having been well documented, other companies now appear to be following its lead.  In recent weeks, Metaplanet, a Japanese Bitcoin treasury company, has demonstrated that it is pursuing the same strategy, outlining its ambition to build a reserve of 21,000 Bitcoin by 2026. On Feb. 18, it announced a 10-to-1 stock split in an effort to improve liquidity while executing on that overall Bitcoin treasury goal. Metaplanet shares have surged 3,900% over the course of the past 12 months on the back of its Bitcoin treasury pivot. On Feb. 16, Moon Inc. announced the purchase of its first Bitcoin at a unit price of $96,150. In a statement, the company said that the purchase was financed by way of the firm’s “internal resources.” An evolving global financial landscapeThe company’s board noted the increasing popularity of cryptocurrencies in the commercial world, with particular emphasis on the use of Bitcoin as an investment portfolio asset. It believes that Bitcoin acts as a dependable store of value. It added: “The Board believes that this initial investment is symbolic in scale, and marks a significant step toward aligning with the evolving global financial landscape, and would diversify the Group’s investment portfolio and enhance its asset value.” The company’s stock rose significantly last month when details emerged of a 70% stock position in the firm, taken by UTXO Management, in collaboration with Sora Ventures and other investors. Recently appointed board member John Riggins of BTC Inc. said that this recent Bitcoin purchase by Moon Inc. “is more than a transaction.” He stated, “It’s a bold step toward creating a vision for the future of the company.”

news
Loading