Exploit of Fantom, Moonriver and Dogechain Crypto Bridges Confirmed by Multichain Team

“It is recommended that all users suspend the use of Multichain services and revoke all contract approvals related to Multichain,” developers said early Friday.

AccessTimeIconJul 7, 2023 at 9:33 a.m. UTC
Updated Jul 7, 2023 at 7:32 p.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

Cross-chain router Multichain developers have confirmed an exploit that impacted $130 million in user-supplied tokens and cautioned users against using its service, as per Friday tweets.

Developers said Friday that the team “is currently investigating.”

“It is recommended that all users suspend the use of Multichain services and revoke all contract approvals related to Multichain,” they said. “The Multichain service stopped currently, and all bridge transactions will be stuck on the source chains. There is no confirmed resume time.”

Multichain’s MULTI tokens have slipped 13% in the past 24 hours.

Bridges such as Multichain allow users to transfer tokens between different networks. These are a key, yet highly vulnerable, part of the crypto ecosystem with $2.66 billion being lost to bridge-based exploits in the past years, according to DefiLlama.

Late on Thursday, Multichain experienced outflows totaling nearly $130 million worth of different tokens across its bridges on blockchain networks Fantom, Moonriver and Dogechain.

On-chain analytics firm Lookonchain estimated $62 million worth of USD coin (USDC), $31 million in wrapped bitcoin (wBTC) and $13 million in wrapped ether (wETH) made up the largest stolen amounts, citing blockchain data.

Stolen tokens have not been sent to exchanges or passed through mixing services such as Tornado Cash as of Asian afternoon hours on Friday.

Meanwhile, related tokens slumped in the past 24 hours amid a broader market decline.

Fantom (FTM) dropped 9.9% even as developers addressed concerns among community members. “For the avoidance of doubt, FTM was never issued or managed by Multichain, so wFTM, FTM ERC-20, and FTM on Opera are not affected,” Fantom Foundation tweeted.

Moonriver’s MOVR tokens fell 13% while lesser-known dogechain (DC) tokens dropped 10%, CoinGecko data shows. Dogechain developers confirmed the network wasn’t directly impacted, but asked users to revoke permissions to Multichain’s Dogechain bridge.

Edited by Oliver Knight.

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.

Shaurya Malwa

Shaurya is the Deputy Managing Editor for the Data & Tokens team, focusing on decentralized finance, markets, on-chain data, and governance across all major and minor blockchains.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.