Multichain team confirms exploit across Fantom, Moonriver and Dogechain bridges

Cross-chain router Multichain developers have confirmed an exploit that impacted $130 million in user-supplied tokens and cautioned users against using its service, as per Friday tweets.

Developers said Friday that the team “is currently investigating.”

“It is recommended that all users suspend the use of Multichain services and revoke all contract approvals related to Multichain,” they said. “The Multichain service stopped currently, and all bridge transactions will be stuck on the source chains. There is no confirmed resume time.”

Multichain’s MULTI tokens have slipped 13% in the past 24 hours.

Bridges such as Multichain allow users to transfer tokens between different networks. These are a key, yet highly vulnerable, part of the crypto ecosystem with $2.66 billion being lost to bridge-based exploits in the past years, according to DefiLlama.

Late on Thursday, Multichain experienced outflows totaling nearly $130 million worth of different tokens across its bridges on blockchain networks Fantom, Moonriver and Dogechain.

On-chain analytics firm Lookonchain estimated $62 million worth of USD coin (USDC), $31 million in wrapped bitcoin (wBTC) and $13 million in wrapped ether (wETH) made up the largest stolen amounts, citing blockchain data.

~$127M locked assets on #Multichain were abnormally moved to 6 addresses ~7 hrs ago.

Including:
62.6M $USDC
1,030 $WBTC($31M)
7,214 $WETH($13.4M)
5M $DAI
910K $UNIDX($3.3M)
491K $LINK($3M)
2.5M $USDT
9.7M $WOO($2.1M)
1.3M $ICE($1.8M)
1.36M $CRV($1M)
134 $YFI($914K)
502K $TUSD pic.twitter.com/C4c6nnbGQv
— Lookonchain (@lookonchain) July 7, 2023

Stolen tokens have not been sent to exchanges or passed through mixing services such as Tornado Cash as of Asian afternoon hours on Friday.

Meanwhile, related tokens slumped in the past 24 hours amid a broader market decline.

Fantom (FTM) dropped 9.9% even as developers addressed concerns among community members. “For the avoidance of doubt, FTM was never issued or managed by Multichain, so wFTM, FTM ERC-20, and FTM on Opera are not affected,” Fantom Foundation tweeted.

Moonriver’s MOVR tokens fell 13% while lesser-known dogechain (DC) tokens dropped 10%, CoinGecko data shows. Dogechain developers confirmed the network wasn’t directly impacted, but asked users to revoke permissions to Multichain’s Dogechain bridge.

Share: Cryptos feed

All writers’ opinions are their own and do not constitute financial advice in any way whatsoever. Nothing published by CoinDesk constitutes an investment recommendation, nor should any data or Content published by CoinDesk be relied upon for any investment activities. CoinDesk strongly recommends that you perform your own independent research and/or speak with a qualified investment professional before making any financial decisions.