Share this article

Multichain Bridges Exploited for Nearly $130M Across Fantom, Moonriver and Dogechain

Multichain developers told users to revoke smart contract approvals after locked funds had been moved to an unknown address abnormally.

Updated Jul 11, 2023, 5:42 p.m. Published Jul 6, 2023, 8:35 p.m.
jwp-player-placeholder

Cross-chain router protocol Multichain has been exploited for nearly $130 million after an attacker siphoned capital out of numerous token bridges.

"The lockup assets on the Multichain MPC address have been moved to an unknown address abnormally," Multichain wrote on Twitter. "The team is not sure what happened and is currently investigating. It is recommended that all users suspend the use of Multichain services and revoke all contract approvals related to Multichain."

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

The unexpected outflows stripped Multichain’s Fantom bridge of nearly its entire holdings in wBTC, USDC, USDT and a handful of altcoins. Together, the assets were worth over $130 million. On-chain sleuths described the activity as highly unusual; Fantom Foundation CEO Michael Kong told CoinDesk he was “looking into it.”

Multichain has been under pressure for over a month because of failing tech and its AWOL CEO. The trio of unexplained outflows from Multichain’s Fantom, Moonriver and Dogecoin bridge contracts sparked fears on crypto Twitter that a hack could be afoot. Multichain could not immediately be reached for comment.

Binance CEO Changpeng 'CZ' Zhao said that the exploit does not impact Binance users.

"Looks like another hack happened on Multichain. This DOES NOT affect users on Binance itself. We have swapped all assets out and closed deposits a while back. Regardless, we offer our assistance in helping with the situation," CZ wrote on Twitter.

Assets transferred out of the Multichain Fantom bridge, with at least $20 million of the altcoins including DAI, LINK and USDT going to 0x9d57. Other transfers saw outbound moves of 1,023 wBTC (~$30.9 million) 7,214 wETH (~$13.6 million), and $57 million USDC between two separate addresses.

Multichain’s Moonriver bridge contract has seen $6.8 million in token outflows with nearly all its wBTC, USDT, USDC and DAI going to 0x48BeAD. An address identified as Mulitchain’s Dogecoin bridge has seen over $600,000 in outflows of USDC.

UPDATE (July 7, 2023, 09:17 UTC): Updates headline and adds context on the exploit throughout.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

USDC Issuer Circle Secures Abu Dhabi's ADGM License in Middle East Expansion

Jeremy Allaire, Co-Founder, Chairman and CEO, Circle Speaks at Hong Kong Fintech Week in 2024 (HK Fintech Week)

The license allows Circle to expand USDC payment and settlement tools across the United Arab Emirates.

What to know:

  • Circle has obtained a Financial Services Permission license from Abu Dhabi Global Market, allowing it to operate as a Money Services Provider in the UAE.
  • The stablecoin issuer has appointed Dr. Saeeda Jaffar, former manager at payments firm Visa.
  • The approval comes as part of the UAE's emergence as a global hub for regulated digital assets, following similar licenses granted to Binance.