Multichain team confirms exploit across Fantom, Moonriver and Dogechain bridges
|Cross-chain router Multichain developers have confirmed an exploit that impacted $130 million in user-supplied tokens and cautioned users against using its service, as per Friday tweets.
Developers said Friday that the team “is currently investigating.”
“It is recommended that all users suspend the use of Multichain services and revoke all contract approvals related to Multichain,” they said. “The Multichain service stopped currently, and all bridge transactions will be stuck on the source chains. There is no confirmed resume time.”
Multichain’s MULTI tokens have slipped 13% in the past 24 hours.
Bridges such as Multichain allow users to transfer tokens between different networks. These are a key, yet highly vulnerable, part of the crypto ecosystem with $2.66 billion being lost to bridge-based exploits in the past years, according to DefiLlama.
Late on Thursday, Multichain experienced outflows totaling nearly $130 million worth of different tokens across its bridges on blockchain networks Fantom, Moonriver and Dogechain.
On-chain analytics firm Lookonchain estimated $62 million worth of USD coin (USDC), $31 million in wrapped bitcoin (wBTC) and $13 million in wrapped ether (wETH) made up the largest stolen amounts, citing blockchain data.
~$127M locked assets on #Multichain were abnormally moved to 6 addresses ~7 hrs ago.
— Lookonchain (@lookonchain) July 7, 2023
Including:
62.6M $USDC
1,030 $WBTC($31M)
7,214 $WETH($13.4M)
5M $DAI
910K $UNIDX($3.3M)
491K $LINK($3M)
2.5M $USDT
9.7M $WOO($2.1M)
1.3M $ICE($1.8M)
1.36M $CRV($1M)
134 $YFI($914K)
502K $TUSD pic.twitter.com/C4c6nnbGQv
~$127M locked assets on #Multichain were abnormally moved to 6 addresses ~7 hrs ago.
— Lookonchain (@lookonchain) July 7, 2023
Including:
62.6M $USDC
1,030 $WBTC($31M)
7,214 $WETH($13.4M)
5M $DAI
910K $UNIDX($3.3M)
491K $LINK($3M)
2.5M $USDT
9.7M $WOO($2.1M)
1.3M $ICE($1.8M)
1.36M $CRV($1M)
134 $YFI($914K)
502K $TUSD pic.twitter.com/C4c6nnbGQv
Stolen tokens have not been sent to exchanges or passed through mixing services such as Tornado Cash as of Asian afternoon hours on Friday.
Meanwhile, related tokens slumped in the past 24 hours amid a broader market decline.
Fantom (FTM) dropped 9.9% even as developers addressed concerns among community members. “For the avoidance of doubt, FTM was never issued or managed by Multichain, so wFTM, FTM ERC-20, and FTM on Opera are not affected,” Fantom Foundation tweeted.
Moonriver’s MOVR tokens fell 13% while lesser-known dogechain (DC) tokens dropped 10%, CoinGecko data shows. Dogechain developers confirmed the network wasn’t directly impacted, but asked users to revoke permissions to Multichain’s Dogechain bridge.
Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers.