Multichain

<div class="protos">
 <div>
  <div>
   <div>
    <p>On November 1, the Multichain Protocol resumed operations for the first time in nearly four months. Validators confirmed its first transactions since a June 2023 exploit that drained a stunning $120 million and shuttered the entire project. Tragically, users immediately suffered another $1 million exploit.</p>
    <p>In the initial days after the June hack, some Multichain believers considered the possibility that administrators had removed stablecoins and other liquidity pools to protect the protocol. Naturally, investigators doubted that protocol administrators would drain liquidity from cross-blockchain bridges to safeguard user funds.</p>
    <p>Eventually, administrators admitted the breach. Yes, someone had stolen the funds.</p>
    <p>Unfortunately, thieves continue to steal from Multichain users. When Multichain Protocol resumed this week, near-riskless arbitrage opportunities lasted for hours. Someone extracted $1 million in a simple cross-chain arbitrage trade that emerged from Multichain’s restoration of service.</p>
    <p>Despite four months to prepare for a relaunch, developers clearly didn’t sufficiently test the protocol to protect regular users.</p>
    <p>A few minutes after the $1 <a rel="noopener noreferrer nofollow" title="million" href="https://thebittimes.com/tag/million.html">million</a> theft, the protocol ceased operating yet again.</p>
    <h2 class="wp-block-heading" id="multichain-protocol-s-secretive-relaunch">Multichain Protocol’s secretive relaunch</h2>
    <p>Formerly known as Anyswap, Multichain’s block explorer showed transactions clearing from a long queue earlier this week. Some users have indicated that their transactions were still pending. For example, one Bitcoin-to-Polygon transaction failed.</p>
    <p>Everyone wondered why the protocol never provided advance notice.</p>
    <p>Yesterday, security researchers at Cyvers Alerts clarified that most four-month-old transactions remain queued. Recent transactions seemed to gain priority.</p>
    <p>Many users were understandably wary of the unannounced protocol restart. Multichain’s X account said nothing about the relaunch. Prior to resuming operations, Multichain had last published to X only as recently as October 5.</p>
    <p>For context, Multichain’s former CEO and co-founder, known only as Zhaojun, <strong>vanished in May 2023</strong> amid claims that Chinese authorities had arrested him. Chinese authorities also arrested several Multichain developers and Zhaojun’s sister. Authorities confiscated computers, hardware wallets, mnemonic phrases, and a multi-party computation wallet critical to Multichain’s operations. Multichain later admitted the incident.</p>
    <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
     <div class="wp-block-embed__wrapper">
      <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
       <p lang="en" dir="ltr">1. On May 21, 2023, Multi<a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> CEO Zhaojun was taken away by the Chinese police from his home and has been out of contact with the global Multi<a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> team ever since. The team contacted the MPC node operators and learned that their operational access keys to MPC node servers had…</p>— Multichain (Previously Anyswap) (@MultichainOrg) July 14, 2023
      </blockquote>
     </div>
     <figcaption class="wp-element-caption">
      Multichain finally admits in July what users had suspected since May.
     </figcaption>
    </figure>
    <p>Circle blacklisted three addresses that received USDC from the <a rel="noopener noreferrer nofollow" title="Hack" href="https://thebittimes.com/tag/hack.html">Hack</a>. Binance Smart Chain paused deposits from some compromised Multi<a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> wallets. Although helpful, these actions were not enough to save users from massive losses.</p>
    <h2 class="wp-block-heading" id="h-relaunched-into-another-1-million-exploit">Relaunched into another $1 million exploit</h2>
    <p>It remains unclear who relaunched the protocol this week, who stole the liquidity, and who re-stopped operations after the $1 million theft.</p>
    <p>Obvioiusly, someone with private keys to the multi-party computation contracts restarted it. Zhaojun was supposedly the only person who could have accessed those contracts, but perhaps he shared (or lost) keys subsequent to his May arrest by Chinese authorities.</p>
    <p>Browser extensions like MetaMask still publish a warning about the June exploit to users connecting to the Multichain Protocol. MetaMask advises using caution when connecting to its front-end website or protocol.</p>
    <p><em>Read more: Crypto token MULTI crashes as Multichain confirms CEO missing</em></p>
    <p>In summary, someone temporarily restored Multichain Protocol’s functionality, allowing a million-dollar arbitrage trade to clear. This allowed some recent transactions to go through and would make sense if somebody has access to the core protocol’s multi-party computation wallet.</p>
    <p>Multi<a rel="noopener noreferrer nofollow" title="chain" href="https://thebittimes.com/tag/chain.html">chain</a> Protocol did not alert users about the relaunch, and has said little about it on its official social media accounts. Its latest post to X is from October 5.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on X, </em><em>Instagram</em><em>, </em><em>Bluesky</em><em>, and </em><em>Google News</em><em>, or subscribe to our </em><em>YouTube</em><em> channel.</em></p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/multichain-protocol-secretly-restarts-to-another-1-million-exploit-tbt68932.html">https://thebittimes.com/multichain-protocol-secretly-restarts-to-another-1-million-exploit-tbt68932.html</a></p>

Multichain Protocol secretly restarts to another $1 million exploit

Table of Contents

TheBitTimes

Other articles published on Nov 3, 2023

NFT Trade Cards: A Comprehensive Guide to Non-Fungible Tokens in the Card Collectibles World

What is Chromia Coin?

Cathie Wood Says ‘Digital Gold’ Bitcoin Is Better Deflation Hedge Than Gold Or Cash

The Human side of web3: Empowerment, community, and new frontiers

FTX liquidated $100 million SOL in 10 days, but there is more to go

SHIB Burn Could Help the Rise to $0.000008, Here’s Why

Join our free newsletter for daily crypto updates!