Dubai regulator tightens crypto marketing rules

Google Cloud becomes a Volunteer Validator for gaming blockchain XPLAXPLA, a gaming blockchain guided by Korean cultural content company Com2uS Holdings, revealed in a blog post on Tuesday (local time) that Google Cloud has joined as a validator for its blockchain network.Through their collaboration, Google Cloud will take on the role of the first Volunteer Validator for the XPLA blockchain. This partnership enhances the network’s security and governance, as validators are responsible for maintaining the integrity of a blockchain network by validating and relaying transactions.Photo by engin akyurt on UnsplashLayer-1 mainnetXPLA is a layer-1 mainnet that features a diverse group of network participants from the Web3 space. This includes notable enterprises such as Oasys, Animoca Brands, Yield Guild Games (YGG), Blockdaemon, gumi and LayerZero, all contributing to the ecosystem.Commenting on this initiative, Jack Buser, Google Cloud’s director of game industry solutions, said, “We are pleased to take on a role as a Volunteer Validator for the XPLA ecosystem.” According to South Korean news outlet Etoday, Buser expected that the cloud computing services provider’s robust infrastructure will contribute to driving rapid growth and fostering innovation within the realm of Web3 gaming.Better Web3 experiencesPaul Kim, Leader of the XPLA team, echoed similar sentiments as he welcomed Google Cloud’s participation in their project. He mentioned their shared aim to deliver innovative and appealing Web3 experiences to gamers worldwide within a transparent Web3 ecosystem. Kim said, “Through this collaboration, XPLA can secure advanced IT technology and insights into future industries.”

Suspected Malicious Activity Drains AnySwap Tokens via Multichain ExecutorAccording to an on-chain sleuth known as Spreek, a person is using the Multichain Executor to drain tokens associated with the AnySwap bridging protocol.Multichain is a cross-chain routing network, established and maintained by a Chinese developer team. It supports in excess of 25 blockchains and more than 1,100 tokens.Photo by Marek Piwnicki on Unsplash$100 million outflowThis revelation comes after abnormal outflows of over $100 million from Multichain bridges on July 7, which were flagged by the Multichain team. Spreek’s report via Twitter on July 10 states that the Multichain Executor address has been draining anyToken addresses across multiple chains and transferring them to a new externally owned account (EOA).Evidence provided in the report includes an Ethereum transaction, 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe, which called the “anySwapFeeTo” method on the Multichain Router: V4 contract. This transaction resulted in approximately $15,275.90 worth of anyDAI being minted on Ethereum, sent to the Multichain Executor, burned, and exchanged for the underlying DAI backing the asset.The funds from these transactions were sent to the following address:0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Similarly, on the BNB Smart Chain (BSC), the Multichain Executor used the anySwapFeeTo function to convert $208,997 worth of anyUSDC into Binance-pegged USDC and sent them to the same address. Additionally, 50.80 anyBTC, equivalent to $39,251.43 at the time, was converted into Binance-pegged Bitcoin and sent to the address.In total, approximately $263,524.33 worth of tokens were sent to this address through the anySwapFeeTo method. Spreek suggests that this behavior could be part of the protocol’s normal functioning. However, a different account engaged in similar activity the day before and ultimately sold the drained tokens, indicating malicious intent.Potential exploitSpreek theorizes that the attacker may be exploiting the anySwapFeeTo function by setting fees to an arbitrarily large amount, allowing them to drain users’ funds. The function apparently permits setting any value, enabling the address to choose the total value of the token held in that anyToken.The Multichain incident has puzzled blockchain analysts, as it remains unclear whether it resulted from an exploit or if it was simply large token-holders moving their funds between networks. The mystery began on July 7 when over $100 million worth of tokens were withdrawn from the Ethereum side of Multichain’s bridges and transferred to wallet addresses with no prior transactions. This represented the majority of funds held on each bridge.Hack or rug pullThe Multichain team labeled these withdrawals as “abnormal” and advised users to stop using the protocol. However, they have not disclosed the source or nature of the anomaly. In response to the incident, stablecoin issuers Circle and Tether froze some of the addresses involved in the suspicious transactions. Chainanalysis, a blockchain analytics firm, has commented that the incident appears more like a hack or rug pull rather than a migration.Adding to the complexity, the Multichain team has reported that their CEO is missing, and they have shut down certain bridges due to losing access to some of the network’s multi-party computation network servers. There have been various concerns relative to Multichain since May. The situation continues to evolve, with ongoing investigations and efforts to mitigate any potential damage caused by the suspected malicious activity.

NH Bank announced today that Korean banks and fractional investing companies have teamed up to establish a consortium with the aim of building an ecosystem for security tokens. Consortium between banks and fractional investorsThe consortium comprises NH Bank, Suhyup Bank, and Jeonbuk Bank as well as six fractional investing companies, including Seoul Auction Blue, Tessa, and Galaxia Moneytree.The banking sector will contribute to the security token industry by building infrastructure for distributed ledger technology, conducting research on promoting security tokens, and bolstering investor protection. Korean banks’ crypto initiativesNH Bank has been in partnership with domestic Korean crypto exchanges Bithumb and Korbit to provide them with real-name registered bank accounts, demonstrating continued interest in crypto services. Under current law, crypto exchanges in Korea are obliged to hold real-name bank accounts if they want to provide Korean won trading services.This move led by NH Bank shows that traditional banks, which have been more conservative compared to securities companies, are actively striving to secure a position in the security token market.