Multichain

Tether USDt

Ekta

Anyswap

<html>
 <head></head>
 <body>
  <div class="textg" style="text-align: justify; font-weight: lighter; line-height: 1.3em; font-size: 15px; border-radius: 3px; color: #80909a; padding: 10px; background-color: #F4F6F9; margin-bottom: 15px;">
    Neither the author, Tim Fries, nor this website, The Tokenist, provide financial advice. Please consult our&nbsp;<a href="https://tokenist.com/terms-of-service/" style="text-decoration:underline;color:#3c7b7b" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">website policy</a>&nbsp;prior to making financial decisions. 
  </div> 
  <p class="has-drop-cap">On July 7, the official Multichain account <a aria-label=" (opens in a new tab)" href="https://twitter.com/MultichainOrg/status/1677180114227056641" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">informed</a> the public that the protocol stopped functioning entirely, leaving existing bridge transactions “stuck on the source chains.” The account advised to stop using Multichain altogether. Interestingly, Curve Finance was more agile, <a aria-label="warning users (opens in a new tab)" href="https://twitter.com/CurveFinance/status/1677056825584152576" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">warning users</a> to exit all Multichain-related ventures a day prior.</p> 
  <p>This translates to revoking all smart contract approvals tied to Multichain. That Friday, @PeckShield cybersecurity firm accounted for over $126 million in abnormal crypto and stablecoin assets, leaving the protocol.</p> 
  <div class="wp-block-image"> 
   <figure class="aligncenter size-large"> 
    <img decoding="async" width="1024" height="547" src="https://tokenist.com/wp-content/uploads/2023/07/F0Y_-SBXwAEsePz-1024x547.jpg" alt="" class="wp-image-161372" srcset="https://tokenist.com/wp-content/uploads/2023/07/F0Y_-SBXwAEsePz-1024x547.jpg 1024w, https://tokenist.com/wp-content/uploads/2023/07/F0Y_-SBXwAEsePz-300x160.jpg 300w, https://tokenist.com/wp-content/uploads/2023/07/F0Y_-SBXwAEsePz-768x410.jpg 768w, https://tokenist.com/wp-content/uploads/2023/07/F0Y_-SBXwAEsePz-650x347.jpg 650w, https://tokenist.com/wp-content/uploads/2023/07/F0Y_-SBXwAEsePz.jpg 1322w" sizes="(max-width: 1024px) 100vw, 1024px"> 
   </figure> 
  </div> 
  <p>Early Tuesday, the cross-chain bridge protocol showed various anomalous withdrawals. The outflows went to an <a aria-label=" (opens in a new tab)" href="https://debank.com/profile/0x1eed63efba5f81d95bfe37d82c8e736b974f477b" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">ID-less address</a>, accounting for ~$106 million in DAI and USDC stablecoins, BTC, ETH, and their wrapped tokens.&nbsp;</p> 
  <p>Given Multichain’s purpose of bridging chains, the funds flowed from all the major scalability networks – Arbitrum, Polygon, Optimism – including layer 1 networks such as Avalanche, BNB Chain, Moonbeam, and Ethereum.&nbsp;</p> 
  <h3 id="multichain-suspiciously-vague">Multichain Suspiciously Vague</h3> 
  <p>Multichain’s response so far is lacking, noting that the “team is not sure what happened and is currently investigating.” In the meantime, both <a aria-label=" (opens in a new tab)" href="https://twitter.com/FantomFDN/status/1677616339362488321" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">Tether</a> (USDT) and <a aria-label=" (opens in a new tab)" href="https://twitter.com/FantomFDN/status/1677370602561101828" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">Circle</a> (USDC) have started freezing addresses associated with Multichain’s multi-drainage, accounting for ~$65 million in frozen funds.</p> 
  <p>Does the systemic liquidity drain indicate a large successful hack, or are the project leaders themselves pulling the plug, making it appear like a hack?</p> 
  <div class="cta-referral"> 
   <img src="https://tokenist.com/wp-content/themes/thetokenist/assets/img/del/cta-referral-1.png" alt="" class="cta-referral__img" loading="lazy" decoding="async"> 
   <div class="cta-referral__text"> 
    <p>Join our&nbsp;<a href="https://t.me/thetokenist" target="_blank" rel="noopener noreferrer nofollow">Telegram group</a>&nbsp;and never miss a breaking digital asset story.</p> 
   </div> 
  </div> 
  <h3 id="multichain-troubles-began-with-shady-ceo">Multichain Troubles Began with Shady CEO</h3> 
  <p>On May 31, @MultichainOrg openly <a href="https://twitter.com/MultichainOrg/status/1663941611380965376" target="_blank" aria-label=" (opens in a new tab)" rel="noopener noreferrer nofollow" class="deco-link">admitted</a> they could not contact Multichain CEO, Zhaojun. His <a href="https://twitter.com/zhaojun_sh/with_replies" target="_blank" aria-label=" (opens in a new tab)" rel="noopener noreferrer nofollow" class="deco-link">Twitter timeline</a> shows his most recent post was on May 24. Purportedly, he was arrested by Chinese authorities, alongside Multichain’s key members, effectively seizing their funds worth $1.5 billion.</p> 
  <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"> 
   <div class="wp-block-embed__wrapper"> 
    <blockquote class="twitter-tweet" data-width="500" data-dnt="true"> 
     <p lang="en" dir="ltr">According to the rumors earlier today in Chinese community, it is said that the core members of the Multichain team were arrested by Chinese police, and the cold wallet was controlled, involving about $1.5 billion in funds.<a href="https://twitter.com/hashtag/MultiChain?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">#MultiChain</a></p>— Gwei Research (@btcinchina) <a href="https://twitter.com/btcinchina/status/1661578624108208134?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">May 25, 2023</a> 
    </blockquote> 
    <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
   </div> 
  </figure> 
  <p>DeFi Llama shows that Multichain’s total locked value is <a aria-label=" (opens in a new tab)" href="https://defillama.com/protocol/multichain" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">$1.257 billion</a>. The reason for contacting Zhaojun was to gain access to fix a technical issue with network nodes. Namely, the cross-chain protocol had trouble facilitating transactions between chains because some network nodes, Router2 and Router5, were not working correctly.</p> 
  <p>The issue was not fixable without Zhaojun’s permission to access maintenance servers. Accordingly, Multichain suspended operations across 11 chains. Unlike Arbitrum or Polygon, all of them are unknown to the wider public. Kekchain, Findora, Red Light Chain, PublicMint, Omax, and Ekta are some of these.&nbsp;</p> 
  <h3 id="what-was-the-hook-behind-multichain">What Was the Hook Behind Multichain?</h3> 
  <p>The Multichain project started as most DeFi projects do, as a decentralized exchange (DEX) called Anyswap, in July 2020. This was during the so-called DeFi Summer when an entirely new alternative infrastructure for banking started to emerge.</p> 
  <p>In addition to being a DEX, Anyswap was a cross-chain DEX, allowing for the transfer of assets between blockchains. This is as intuitively needed a feature as it gets in the blockchain. In November 2020, AnySwap V2 was released, moving away from a DEX, focusing entirely on cross-chain bridging of assets as the “ultimate router for Web 3.0”.</p> 
  <div class="wp-block-image"> 
   <figure class="aligncenter size-large"> 
    <img decoding="async" width="1024" height="462" src="https://tokenist.com/wp-content/uploads/2023/07/EmDZ61oUcAA8Ar9-1024x462.jpg" alt="" class="wp-image-161385" srcset="https://tokenist.com/wp-content/uploads/2023/07/EmDZ61oUcAA8Ar9-1024x462.jpg 1024w, https://tokenist.com/wp-content/uploads/2023/07/EmDZ61oUcAA8Ar9-300x135.jpg 300w, https://tokenist.com/wp-content/uploads/2023/07/EmDZ61oUcAA8Ar9-768x346.jpg 768w, https://tokenist.com/wp-content/uploads/2023/07/EmDZ61oUcAA8Ar9-1536x693.jpg 1536w, https://tokenist.com/wp-content/uploads/2023/07/EmDZ61oUcAA8Ar9-650x293.jpg 650w, https://tokenist.com/wp-content/uploads/2023/07/EmDZ61oUcAA8Ar9.jpg 1982w" sizes="(max-width: 1024px) 100vw, 1024px"> 
   </figure> 
  </div> 
  <p>In December 2021, AnySwap officially rebranded as Multichain. However, even the <a href="https://tokenist.com/fbi-rings-alarm-as-defi-hacks-dominate-crypto-crime-1-3b-stolen-in-q1-2022/" rel="noopener noreferrer nofollow" class="deco-link">FBI acknowledged</a> that asset-bridging protocols are highly vulnerable. That’s because they run fewer network nodes while simultaneously serving as large token repositories.&nbsp;</p> 
  <p>When the locked tokens are bridged, a smart contract mints equivalent tokens, 1:1, in return. The newly minted tokens are compatible with the target blockchain, making them ‘bridged.’ It is this lockup mechanism that is problematic.</p> 
  <p>In the case of Multichain, the drained wallets are MPC – Multi-Party Computation – running on a Secure Multi-Party Computation (SMPC) network where security keys are cryptographically distributed, as they are split into shards.</p> 
  <p>Consequently, MPC wallets are represented as single wallet addresses on a blockchain explorer. Still, they allow multiple parties to sign in, with each party not revealing their input to other parties. Further, MPC wallets’ signatures are computed off-chain, allowing low fees for high-volume transactions. This was another Multichain hook.</p> 
  <h3 id="is-multichain-a-rug-pull">Is Multichain a Rug Pull?</h3> 
  <p>A project-level rugpull is not that uncommon. At the end of June, Arbitrum-based <a href="https://tokenist.com/arbitrum-based-defi-project-chibi-finance-disappears-with-a-million-dollars/" rel="noopener noreferrer nofollow" class="deco-link">Chibi Finance</a> took an abrupt exit with over $1 million in user funds, leaving deleted social media accounts behind.</p> 
  <p>Given the way Multichain runs with MPC wallets, hackers could have acquired keys. After all, this was the core concern behind the proposed <a href="https://tokenist.com/ledger-postpones-release-of-new-feature-after-community-backlash/" rel="noopener noreferrer nofollow" class="deco-link">Ledger Recover feature</a>. However, it is unusual for hackers to not immediately swap out controlled assets such as USDC/USDT, which have largely been frozen.</p> 
  <p>With that said, a rug pull doesn’t have to begin as such. Given Zhaojun’s purported troubles with Chinese authorities, he, or someone in control of his wallet, may have decided to exit abruptly with feasibly liquidable funds.&nbsp;</p> 
  <p>How those funds will be liquidated is yet to be determined, as all the crypto exchanges are now looking for the new address. Binance had already suspended <a aria-label=" (opens in a new tab)" href="https://www.binance.com/en/support/announcement/updates-on-the-suspension-of-deposits-withdrawals-for-multichain-bridged-tokens-3c7d279dd37043bd8290ac718b5c08a4" target="_blank" rel="noopener noreferrer nofollow" class="deco-link">eight Multichain-bridged tokens</a>. At the end of the line, only Zhaojun has the explanatory power to clear up the Multichain collapse.</p> 
  <div class="cta-sub js__cta-sub"> 
   <div class="cta-sub__start" data-step="1"> 
    <div class="cta-sub__title"> <strong>Finance is changing.</strong> 
    </div> 
    <div class="cta-sub__subtitle">
      Learn how, with Five Minute Finance. 
    </div> 
    <div class="cta-sub__excerpt">
      A weekly newsletter that covers the big trends in FinTech and Decentralized Finance. 
    </div> <button type="button" class="btn">Try it out (for free)</button> 
   </div> 
   <div class="cta-sub__form" data-step="2" style="display: none;"> 
    <script type="text/javascript" src="https://app.getresponse.com/view_webform_v2.js?u=QcLhh&amp;webforms_id=hpcwd"></script> 
   </div> 
   <div class="cta-sub__result" data-step="3" style="display: none;"> 
    <div class="cta-sub__title">
      Awesome 
    </div> 
    <div class="cta-sub__caption">
      You’ve subscribed. 
    </div> 
    <div class="cta-sub__greeting">
      You’re well on your way to being in the know. 
    </div> 
   </div> 
  </div> 
  <p><strong><em>Do you think failed coding experiments, or rugpulls, will make TradFi’s job easier to corner blockchain technology? Let us know in the comments below.</em></strong></p> 
  <p>The post <a rel="noopener noreferrer nofollow" href="https://tokenist.com/how-multichains-126m-collapse-could-be-a-rugpull/">How Multichain’s $126M Collapse Could Be a Rugpull</a> appeared first on <a rel="noopener noreferrer nofollow" href="https://tokenist.com">Tokenist</a>.</p>
 </body>
</html>

How Multichain’s $126M Collapse Could Be a Rugpull

Table of Contents

Tokenist

Other articles published on Jul 11, 2023

XRP Ledger Hits Massive Milestone in Epic Network Growth

Crypto spot trading volume drops 36% in Q2, CoinMarketCap reports

BitOasis Collaborates with VARA to Fulfill Operational MVP License Requirements

US Dollar Depreciation Could Spike Crypto Prices, Says Analyst

OKX to Support $ETH on Starknet

Axelar and Microsoft Partner to Build Hybrid Blockchain Initiatives

Join our free newsletter for daily crypto updates!