Multichain Hack Worsens as Loss of Funds Reaches $3M: Report

Users of the cross-chain bridge say that the company is not providing clear information or enough support.

AccessTimeIconJan 20, 2022 at 2:06 a.m. UTC
Updated May 11, 2023 at 5:56 p.m. UTC

Hackers have continued to exploit a vulnerability in the cross-chain bridge Multichain about three days after the weakness surfaced. They have stolen about $3 million in cryptocurrency, according to a report by the online publication Vice.

"The hack against Multichain users keeps getting worse," Vice reporter Lorenzo Franceschi-Bicchierai tweeted.

  • Over $67M in Crypto Lost to Hacks and Exploits in February: Immunefi Report
    00:56
    Over $67M in Crypto Lost to Hacks and Exploits in February: Immunefi Report
  • Running With Crypto: 5 Questions With TRM Labs' Ari Redbord
    00:59
    Running With Crypto: 5 Questions With TRM Labs' Ari Redbord
  • Hacks Involving North Korea Are 'Even Greater Problem': Legal Experts
    09:43
    Hacks Involving North Korea Are 'Even Greater Problem': Legal Experts
  • Breaking Down the State of Hacking in 2024
    02:01
    Breaking Down the State of Hacking in 2024
  • A number of Multichain users have said on social media platforms, including the company's Telegram channel, that Multichain is not providing clear information on the ongoing problems or enough support.

    "I can’t be the only one who’s incredibly confused by @MultichainOrg’s messaging here," Chainlink commentator and podcaster ChainLinkGod.eth 2.0 tweeted to his more than 130,000 followers. He included screenshots from a Medium post indicating that "funds were safe and unsafe at the same time"


    The saga started earlier this week when Multichain instructed its users to remove approvals for six tokens, warning that otherwise their assets would be exposed to a security vulnerability. The tokens were WETH, PERI, OMT, WBNB, MATIC and AVAX. Multichain tweeted on Tuesday that hackers had siphoned about $1.4M in wrapped ether from users.

    The company has pinned a link to the Medium post on its Twitter account outlining how to remove the approvals.

    Multichain, formerly Anyswap, raised $60 million in December in a seed funding round that was led by Binance Labs. Public data shows that Multichain has about $8.8 billion in total value locked.


    Disclosure

    Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

    CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

    James Rubin

    James Rubin was CoinDesk's U.S. news editor based on the West Coast.


    Read more about