PM encourages focus on crypto so Malaysia doesn’t get left behind

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

South Korea is ramping up its scrutiny on cryptocurrency exchanges, with the Financial Intelligence Unit (FIU) of the Financial Services Commission (FSC) announcing its intention yesterday to remove platforms that lack the necessary qualifications, according to the Korea Economic Daily.Unqualified exchangesIn its announcement yesterday, the FIU revealed its aim to block unqualified virtual asset service providers (VASPs) from facilitating trades in Korean won, the currency of the country. Those currently providing Korean won trading services will be eliminated from the market unless they can demonstrate they meet the required standards. With many exchanges set to renew their registrations in the latter half of this year, the FIU is gearing up for thorough evaluations through June to identify and remove unqualified VASPs. The FIU's assessments will focus on determining whether VASPs have adequate measures in place for user protection and are safeguarded against risks of money laundering. To bolster its efforts in preventing money laundering risks, the FIU intends to establish a framework where lawyers and accountants participate in crypto oversight activities.Photo by Andrea Piacquadio on PexelsExamining majority shareholder of VASPThe financial watchdog is also looking to propose amendments to the Financial Transaction Reports Act, aiming to raise the standards for VASP registration by introducing more stringent requirements. Beyond the current assessments of a VASP operator and its executives, the new regulations will involve close examination of its majority shareholder. This additional layer of scrutiny will evaluate the credibility of the major parties related to the VASP, taking into account factors such as their history of loan defaults. The FIU is set to create a system for analyzing cryptocurrency transactions and will strengthen its communication channels, not just with financial institutions but also with prosecutors and police forces. Furthermore, the agency is reviewing the Financial Action Task Force's (FATF) recommendation for freezing transactions in cases of suspicious activities. Once implemented, this will enable the FIU to temporarily halt suspicious transactions before bringing the issue to prosecutors.

Taiwanese cryptocurrency exchange under investigation for money launderingBitgin, a cryptocurrency exchange in Taiwan, is currently under police investigation for alleged money laundering, with its Chief Operating Officer, Yuting Zhang, arrested in connection to the infamous “88 Guild Hall” money laundering incident. The exchange is cooperating fully with the investigation and has assured users that its operations remain unaffected.Photo by Adam Jang on Unsplash‘88 Guild Hall’ scandalThe “88 Guild Hall” scandal, which unfolded from late 2021 to March 2022, implicated Zhang in a massive money laundering network. The controversy exposed a multi-billion dollar operation orchestrated by local businessmen Zhemin Guo and Chengwen Tu, utilizing a network of foreign exchange offices and crypto exchanges.Yuling Tsai, General Counsel of the Taiwan VASP Association, addressed the situation, stating: “This time, a member of the preparatory group was involved in the investigation case. The preparatory group immediately held a meeting and issued a public response. The members involved in the case also took the initiative to suspend participation in the work of the preparatory group.”Business as usualIn an official statement, Bitgin confirmed Zhang’s association with the scandal and clarified that the ongoing investigation has not disrupted its operations. The exchange emphasized its commitment to cooperating with authorities, providing all necessary assistance to facilitate a smooth investigation process.The statement reads: “At present, Bitgin is fully cooperating with the investigating unit and actively providing all necessary assistance to ensure the smooth conduct of the investigation and hopes that the facts can be clarified as soon as possible.”Bitgin also confirmed that in light of the charges, the COO has ceased all communications with counterparties.Focus on regulationTaiwan’s Financial Supervisory Commission (FSC) outlined earlier this year its intention to restrict the activity of non-compliant offshore crypto exchanges. While cryptocurrency exchanges are not officially regulated yet, local operators have taken cues from the FSC to move towards self-regulation. A preparatory group was formed in September with Bitgin participating as a founding member.While Taiwan still doesn’t have a regulatory framework in place, it has applied anti-money laundering (AML) regulation to crypto businesses. In August, leading crypto exchange Binance initiated steps to register for AML compliance in Taiwan.Earlier this year, Taiwanese officials suggested that they would foster self-regulation while proposing the classification of crypto regulations within their own unique business category. Efforts were furthered last month when legislators introduced a cryptocurrency bill for its inaugural reading.JPEX falloutBeyond Bitgin, Taiwan is grappling with the fallout from wayward crypto exchange JPEX, which is accused of orchestrating Hong Kong’s largest financial scam. The authorities raided the local office of JPEX and identified suspects involved in the alleged fraud. To compound matters, local police also uncovered a $320 million crypto money laundering operation earlier this month.The incidents highlight the ongoing challenges faced by regulators in the region as they strive to protect investors from fraudulent activities.As the investigation unfolds, the Taiwanese cryptocurrency industry, along with its self-regulatory initiatives, remains under scrutiny, emphasizing the broader need for regulatory frameworks to safeguard the interests of investors and maintain the integrity of the market.