On July 6, 2023, the cryptocurrency space witnessed one of the most significant security incidents of the year as cross-chain bridge protocol Multichain experienced large unauthorized withdrawals totaling more than $125 million. The exploit sent shockwaves through the decentralized finance community and raised urgent questions about the security of cross-chain infrastructure at a time when Bitcoin traded at approximately $29,909 and Ethereum hovered around $1,848.
The Exploit Mechanics
The attack targeted Multichain’s bridge contracts across multiple chains simultaneously. Nearly $120 million was drained from the Fantom bridge alone, with assets including wrapped Ether (wETH), wrapped Bitcoin (wBTC), and USDC. The Dogecoin bridge lost $666,000, representing 85% of total deposits on that bridge. The Moon River bridge was hit for $6.8 million in USDC and Tether.
Multichain’s smart contracts are secured by a multi-party computation (MPC) system, which functions similarly to a multisignature wallet. Instead of relying on traditional private keys, MPC systems split shards of a private key between multiple parties who cooperate to execute transactions. However, the attacker apparently gained control of sufficient MPC key shards to authorize the withdrawals unilaterally.
What made this incident particularly suspicious was the attacker’s behavior. Unlike typical hackers who quickly swap stolen assets for privacy coins or decentralized exchange tokens, the perpetrator did not move to convert centrally controlled stablecoins like USDC, which can be frozen by the issuer. This unusual operational security lapse led many analysts to suspect insider involvement rather than an external breach.
Affected Systems
The breach impacted three primary bridge endpoints within Multichain’s infrastructure. The Fantom bridge suffered the heaviest losses, with the attacker draining the majority of liquidity pools that facilitated cross-chain transfers between Fantom and other networks. Users who had bridged assets to Fantom found their wrapped tokens effectively unbacked, creating a cascading effect across decentralized applications on the Fantom network.
The Dogecoin and Moon River bridges, while smaller in total value locked, experienced proportionally devastating losses. The 85% depletion of the Dogecoin bridge deposits indicated that virtually all user funds on that endpoint were compromised.
Circle and Tether, the issuers of USDC and USDT respectively, acted swiftly to freeze addresses holding stolen assets. In total, approximately $65 million in stolen funds were frozen across both stablecoin issuers, preventing the attacker from transferring or converting those specific assets.
The Mitigation Strategy
In the immediate aftermath, Multichain advised all users to revoke contract approvals and cease interacting with the protocol. The team acknowledged that they did not have full visibility into the exploit, stating that the unauthorized withdrawals were of an unknown cause.
The swift response by Circle and Tether demonstrated the value of centralized controls in stablecoin infrastructure during crisis scenarios. By freezing approximately $65 million in stolen assets, the issuers effectively limited the attacker’s realized gains to roughly half the total stolen amount, primarily in decentralized assets like wETH and wBTC that cannot be frozen.
Multiple blockchain security firms, including CertiK and Chainalysis, began investigating the incident. CertiK classified the vulnerability as a private key issue, noting that it fell outside the scope of their prior audits of Multichain’s smart contract code.
Lessons Learned
The Multichain exploit underscores a fundamental tension in cross-chain bridge design: the trade-off between decentralization and operational security. MPC-based systems are only as secure as the operational practices governing key shard distribution. When a single entity controls sufficient key shards, or when those shards can be consolidated through social engineering or insider access, the entire security model collapses.
The incident also highlighted the importance of due diligence beyond smart contract audits. CertiK had audited Multichain’s code, but the vulnerability existed in key management practices that fall outside traditional code review scope. Projects and users must evaluate the full security posture of bridge protocols, including governance structures, key custody arrangements, and the operational resilience of the team.
For the broader ecosystem, the exploit reinforced the risk of concentrated liquidity in bridge protocols. When a single bridge holds hundreds of millions in user funds, it becomes an attractive target. Diversifying across multiple bridges and limiting exposure to any single cross-chain protocol can help mitigate the impact of such incidents.
User Action Required
If you have ever interacted with Multichain or any of its bridge contracts, take immediate steps to protect your remaining assets. Revoke all token approvals granted to Multichain contracts using tools like Revoke.cash or Etherscan’s token approval checker. Verify that your wallets are not connected to any Multichain-affiliated dApps. Monitor official communications from Multichain for updates on fund recovery efforts, but exercise caution against phishing attempts that may impersonate recovery services. Consider using alternative cross-chain solutions while the investigation continues, and always verify bridge contract addresses before executing any cross-chain transfers.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Always conduct your own research before making any financial decisions.
$120m from the fantom bridge alone and nobody noticed until it was gone. MPC is only as strong as whoever holds the shards
the shards were apparently held by a tiny group. MPC is theater when 3 people control the key fragments. might as well use a 3-of-5 multisig at that point
3-of-5 multisig at least has a clear security model. MPC with opaque shard management is trust-me-bro security with extra steps
shard_audit the problem is MPC gives you no on-chain transparency. at least with a Gnosis Safe you can audit who signed what. MPC shards leave zero forensic trail
Amara J. 3 people controlling MPC shards is basically a multisig with extra steps and less transparency. the whole point was to avoid key concentration
MPC sounds great in theory until you realize the key shards are held by a small group of people who can be coerced or compromised. multichain proved that
shard_theory MPC being trust-me-bro is the uncomfortable truth. at least with a Gnosis Safe multisig you can see the signers on chain. MPC shard holders are invisible
shard_theory MPC being trust-me-bro is exactly why I refuse to bridge anymore. one group of people holding all the key fragments is just a multisig with worse transparency
bridge_rekt_ MPC shard holders being invisible is the real problem. at least with multisig you can audit who signed what on chain
key_frag_ MPC shard holders being invisible is the core issue. multichain proved that threshold cryptography without public signer identity is just trust-me-bro security dressed up in math
key_frag_ the on-chain transparency argument is exactly right. MPC sells mathematical security but delivers operational opacity. give me a gnosis safe with public signers any day
the dogecoin bridge lost 85% of deposits. who was even using the dogecoin bridge on multichain in 2023
^ apparently about $666k worth of people. small but not zero. the moonriver hit at $6.8m is the weird one
moonriver was a cool name for a chain tbh. losing $6.8M in USDC and Tether on it is almost an afterthought next to the fantom drain
$120M from Fantom and the FTM chart still hasnt recovered years later. one bridge exploit didnt just drain liquidity, it killed the entire chain narrative. systemic risk is an understatement
FTM at 30 cents to 15 and never recovering is brutal. Fantom had real TVL before the Multichain drain killed confidence. bridge risk IS token risk
fantom bridge lost $120M and the FTM price never really recovered. cross-chain risk is systemic, not isolated to one protocol
FTM went from $0.30 to below $0.15 after the exploit and never reclaimed that level. systemic risk in cross-chain means contagion hits the token price hardest
FTM went from top 30 to an afterthought after that exploit. cross-chain risk doesnt just drain the bridge, it drains the entire ecosystem confidence
$125M drained across multiple chains simultaneously and the MPC system showed zero alerts. whatever happened to threshold monitoring
FTM at $0.30 dropping below $0.15 and never recovering tells you everything about bridge risk. one exploit killed the entire ecosystem confidence
fantom_rekt the FTM community kept saying recovery was coming for 2 years. it never did. bridge exploits dont just drain funds they drain trust
fantom_rekt_ FTM at 30 cents dropping to 15 and never recovering is the textbook definition of tail risk. bridge exploits dont just drain liquidity they nuke ecosystem trust
Tomer K. FTM going from 0.30 to 0.15 and never recovering is the part bridge risk analysts keep missing. the token death spiral after a bridge drain is worse than the drain itself
$120M from Fantom alone and the Dogecoin bridge lost 85% of total deposits. the Moonriver hit was pocket change next to Fantom but still killed that chain’s bridge liquidity
the Dogecoin bridge losing 85% of deposits on 666k is wild. who was bridging DOGE through multichain in mid-2023 anyway. the long tail of cross-chain risk catches everyone