Multichain

USDC

Wrapped Bitcoin

Fantom (Migrated to Sonic)

Tornado

Multichain, a cross-chain router, has confirmed a major security breach affecting its services. 
The incident, which unfolded late on Thursday, impacted an estimated $127 million in user-supplied tokens across its bridges on Fantom, Moonriver, and Dogechain. 
<figure id="attachment_22451" aria-describedby="caption-attachment-22451" style="width: 100%" class="wp-caption alignnone">
 <img decoding="async" class="wp-image-22451 size-full" src="https://crypto.ro/en/wp-content/uploads/2023/07/Multichain-was-exploited-for-126-million.jpg" alt="Multichain was exploited for 126 million" width="900" height="779" srcset="https://crypto.ro/en/wp-content/uploads/2023/07/Multichain-was-exploited-for-126-million.jpg 900w, https://crypto.ro/en/wp-content/uploads/2023/07/Multichain-was-exploited-for-126-million-300x260.jpg 300w, https://crypto.ro/en/wp-content/uploads/2023/07/Multichain-was-exploited-for-126-million-768x665.jpg 768w, https://crypto.ro/en/wp-content/uploads/2023/07/Multichain-was-exploited-for-126-million-750x649.jpg 750w" sizes="(max-width: 900px) 100vw, 900px" title="Multichain exploit shakes DeFi security with $130 million loss 1">
 <figcaption id="caption-attachment-22451" class="wp-caption-text">
 Blockchain security firm Peckshield reported that Multichain was exploited for $126 million | Peckshield
 </figcaption>
</figure> 
The Multichain team is currently investigating the situation and has advised users to suspend the use of its services and revoke all contract approvals related to Multichain. 
They are currently conducting a thorough investigation into the breach. While initial reactions suggest a compromise of the protocol’s private key, the stolen tokens have yet to surface on exchanges or pass through cryptocurrency mixing services, which are used to obscure the traceability of cryptocurrencies. 
As a result of the incident, all bridge transactions have been halted, and there is no confirmed timeline for resumption of services. 
While developers are addressing the issues, the financial impact is already substantial. 
Cross-chain bridges, like the ones provided by Multichain, are a part of the crypto ecosystem, allowing users to transfer tokens between different networks. 
However, they have proven to be a vulnerable target, with bridge-based exploits accounting for losses of $2.66 billion in the past years, according to data from <a href="https://defillama.com/hacks" rel="nofollow noopener" target="_blank">DefiLlama</a>. 
On-chain analytics firm, Lookonchain, estimated that the largest amounts stolen included $62 million worth of <a href="https://crypto.ro/en/cryptocurrencies/usd-coin">USD Coin (USDC)</a>, $31 million in <a href="https://crypto.ro/en/cryptocurrencies/wrapped-bitcoin">Wrapped Bitcoin (wBTC)</a>, and $13 million in Wrapped Ether (wETH). 
<blockquote class="twitter-tweet"> 
 ~$127M locked assets on <a href="https://twitter.com/hashtag/Multichain?src=hash&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">#Multichain</a> were abnormally moved to 6 addresses ~7 hrs ago. 
 Including: 62.6M <a href="https://twitter.com/search?q=%24USDC&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$USDC</a> 1,030 <a href="https://twitter.com/search?q=%24WBTC&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$WBTC</a>($31M) 7,214 <a href="https://twitter.com/search?q=%24WETH&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$WETH</a>($13.4M) 5M <a href="https://twitter.com/search?q=%24DAI&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$DAI</a> 910K <a href="https://twitter.com/search?q=%24UNIDX&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$UNIDX</a>($3.3M) 491K <a href="https://twitter.com/search?q=%24LINK&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$LINK</a>($3M) 2.5M <a href="https://twitter.com/search?q=%24USDT&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$USDT</a> 9.7M <a href="https://twitter.com/search?q=%24WOO&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$WOO</a>($2.1M) 1.3M <a href="https://twitter.com/search?q=%24ICE&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$ICE</a>($1.8M) 1.36M <a href="https://twitter.com/search?q=%24CRV&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$CRV</a>($1M) 134 <a href="https://twitter.com/search?q=%24YFI&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$YFI</a>($914K) 502K <a href="https://twitter.com/search?q=%24TUSD&amp;src=ctag&amp;ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">$TUSD</a> <a href="https://t.co/C4c6nnbGQv" rel="nofollow" target="_blank">pic.twitter.com/C4c6nnbGQv</a> 
 — Lookonchain (@lookonchain) <a href="https://twitter.com/lookonchain/status/1677153197146935296?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">July 7, 2023</a>
</blockquote> 
As of Friday afternoon, the stolen tokens have not been sent to exchanges or passed through <a href="https://crypto.ro/en/news/tornado-cash-governance-attack-triggers-torn-token-price-fluctuations/">mixing services such as Tornado Cash</a>. 
The exploit has had a domino effect on related tokens. <a href="https://crypto.ro/en/news/multichain-token-multi-price-dips-amid-stuck-transactions-and-growing-concerns/">Multichain’s MULTI tokens</a> have slipped 16% in the past 24 hours. 
<a href="https://crypto.ro/en/cryptocurrencies/fantom">Fantom (FTM)</a> also experienced a drop of 9.9%, even as developers reassured community members that FTM was not affected by the Multichain incident. 
Fantom Foundation, in response to the incident, addressed concerns among community members. They clarified that wFTM, FTM ERC-20, and FTM on Opera were not affected as they were never issued or managed by Multichain. 
<blockquote class="twitter-tweet"> 
 For the avoidance of doubt, FTM was never issued or managed by Multichain, so wFTM, FTM ERC-20, and FTM on Opera are not affected. 
 — Fantom Foundation (@FantomFDN) <a href="https://twitter.com/FantomFDN/status/1677201526643720194?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">July 7, 2023</a>
</blockquote> 
The exploit has further exacerbated Multichain’s existing challenges. In May, amid rumors of CEO Zhao Jun’s arrest in China, the Multichain team lost contact with him. Around the same time, the protocol faced a botched upgrade of its cross-chain bridge, with the team attributing the unavailable routes to a “force majeure” situation. 
In response to the recent exploit, <a href="https://crypto.ro/en/education/best-crypto-exchange/#1-binance-lowest-fee-crypto-exchange">Binance</a> has suspended support for eight bridged tokens from the cross-chain protocol until further notice. 
Meanwhile, Daniele Sestagalli of the ICE crypto project announced that the team has decided to burn $1.85 million worth of ICE tokens impacted by the exploit and airdrop a new token, WAGMI, to Fantom Multichain users. WAGMI, which stands for “We’re All Going to Make It,” is being introduced as a protective measure. 
This incident serves as a stark reminder of the potential risks in the DeFi landscape. It underscores the need for robust security measures and vigilant monitoring to protect user assets and maintain trust in these critical infrastructures.

Multichain exploit shakes DeFi security with $130 million loss

crypto.ro global

Other articles published on Jul 7, 2023

Nexo Earns AICPA's Type 2 SOC 2 Audit Certificate: Bolsters Security

Twitter Now Supports NFT Purchases with Inspect’s Browser Extension

The Next 30X Early Altcoin Gems

BarnBridge DAO to halt operations amid reported SEC investigation

FBI Searches Home of Kraken Founder Jesse Powell in Cyberstalking Case

Introducing ApeSwap’s New Liquidity Health Dashboard, Now In Beta

Join our free newsletter for daily crypto updates!