A Person is Draining Tokens Associated with AnySwap Bridging Protocol
A person using the Multichain Executor is draining tokens associated with the AnySwap bridging protocol, according to a report from on-chain sleuth Spreek. This follows abnormal outflows of over $100 million from Multichain bridges on July 7.
Key Points:
- The Multichain Executor address is draining anyToken addresses and moving them to a new EOA.
- An Ethereum transaction minted and burned approximately $15,275.90 worth of anyDAI.
- The funds are being sent to the address 0x1eed63efba5f81d95bfe37d82c8e736b974f477b.
- The Multichain Executor also converted $208,997 worth of anyUSDC on the BNB Smart Chain.
- A total of approximately $263,524.33 worth of tokens have been sent to the address through the anySwapFeeTo method.
The behavior of the Multichain Executor may be part of the normal functioning of the protocol or could be malicious. A different account had engaged in similar behavior the day before, eventually selling the drained tokens. The attacker may be using the anySwapFeeTo function to drain users’ funds by setting fees to an arbitrarily large amount.
The Multichain incident remains a mystery, with no conclusive evidence of whether it resulted from an exploit or large tokenholders moving their funds. The Multichain team has declared the withdrawals as abnormal and has shut down some bridges due to server access issues.
Hot Take:
The draining of tokens associated with the AnySwap bridging protocol raises concerns about the security and integrity of the protocol. Whether it is authorized behavior or the actions of a malicious actor, it highlights the need for increased vigilance and security measures in decentralized finance.