Multichain Executor "Drained" AnySwap Tokens: Report

The contract used an "anySwapFeeTo" function to transfer hundreds of thousands of dollars worth of tokens to itself, which the detective in Spreek chain suspected may have been malicious.

= =.jpg 1x, https://images.cointelegraph.com/images/960_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjMtMDcvYjZhMWJiNWMtYmZjYS00OTYwLTgzNjktMTczYmIyNDE0NWQyLmpwZw == .jpg 2x" src="https:// alt="Multi chain Executor "flushed" AnySwap tokens: Report" class="lazy-image__img type:primaryImage"/> News Join us on social networks

A person is using the multichain executor to drain tokens associated with the AnySwap bridging protocol, according to a July 10 report by chain sleuth and Twitter user Spreek. The report follows outflows of more than $100 million from Multi-Channel Bridges that occurred on July 7, which were flagged by the Multi-Channel Team as "abnormal".

The multi-chain executor address dumped anyToken addresses on many chains today and moved them all to a new EOA pic.twitter.com/gqDaXMBl96< /p> — Spreek (@spreekaway) July 10, 2023

According to Spreek's July 10 report, "The multi-chain executor address dumped anyToken addresses on many chains today and moved them all to a new EOA [externally owned account] ."

An image attached to the post shows Ethereum transaction 0x53ede4462d90978b992b0a88727de19afe4e96f0374aa1a221b8ff65fda5a6fe. Blockchain data reveals that this transaction called the "anySwapFeeTo" method on the Multichain Router: V4 contract, which resulted in the creation of approximately $15,275.90 of anyDAI - a derivative version of the stablecoin Dai (DAI ) on Ethereum and sent to the multi-chain executor, which then burned it and exchanged it for the underlying DAI backing the asset.

DAI conversion by multi-chain executor. Source: Etherscan

In a separate comment, Spreek said funds are sent to the following address: 0x1eed63efba5f81d95bfe37d82c8e736b974f477b. Data from the Ethereum blockchain shows that this address