Multichain 2023 abnormal MPC asset outflows
In July 2023, more than $125 million in assets moved out of Multichain-controlled bridge contracts to unknown addresses. The protocol then stopped services and later announced that operations would cease after losing access to key operational systems and funds.
Incident facts
- Incident title
- Multichain 2023 abnormal MPC asset outflows
- Bridge
- Multichain
- Incident date
- 2023-07-06
- Incident type
- Abnormal Transfers
- Major incident
- Yes
- Affected chains
- Ethereum, Fantom, BNB Chain, Polygon, Avalanche, Arbitrum
- Affected assets
- WETH, WBTC, USDC, USDT
- Attack category
- Operator Or Governance Issue
- Reported loss
- More than $125 million in abnormal outflows
- Amount confidence
- Medium
- Loss amount basis
- Blockchain Analytics And Contemporaneous Reporting
- Recovery
- Unknown
- Reimbursement
- Unknown
- Restart
- Not Reopened
- Current outcome
- Dead After Incident
- Postmortem
- Partial
- Resolution
- Unresolved
- Last reviewed
- 2026-06-14
- Last verified
- 2026-06-14
Amount and valuation
Chainalysis reported more than $125 million in unauthorized withdrawals; other public reporting described the total as nearly $130 million.
The seed uses $125 million as the conservative display figure while preserving the higher nearly $130 million public estimate as a range.
more than $125 million withdrawnmore than $125 million
Used as the conservative display amount.
nearly $130 million across multiple bridge contractsnearly $130 million
Retained as the upper public estimate.
Why this remains unresolved
- The final disposition of the withdrawn assets is not established in this seed record.
- The incident cause remains disputed between external key compromise and insider-controlled action.
Timeline events
Abnormal Multichain asset outflows disclosed2023-07-06
Multichain reported that assets controlled through its MPC system had moved abnormally to unknown addresses and advised users to suspend use of the service.
Public estimates ranged from more than $125 million to nearly $130 million.
Multichain service stopped indefinitely2023-07-07
The team stated that Multichain service had stopped and bridge transactions would remain stuck on source chains, formalizing the operational suspension.
Suspension status is separate from final asset recovery or reimbursement.
Multichain announced cessation of operations2023-07-14
Multichain announced that it was forced to cease operations after losing access to operational systems and funds and after key personnel became unreachable.
This seed records the team's public explanation without independently resolving legal custody or attribution questions.
Evidence records
- Multichain statement on abnormal MPC asset movementMultichain · Tier 1 · High reliability · primary · 2023-07-06Claim scope: Incident Case
Official account statement that MPC-controlled assets moved abnormally to unknown addresses and users should suspend use.
- Multichain Protocol Experiences Mysterious Withdrawals, Suggesting Multi-Million Dollar Hack or Rug PullChainalysis · Tier 1 · High reliability · secondary · 2023-07-10Claim scope: Incident Case
Used for the conservative more-than-$125-million estimate, affected asset context, frozen stablecoin balances, and disputed cause analysis.
- Multichain Bridges Exploited for Nearly $130M Across Fantom, Moonriver and DogechainCoinDesk · Tier 2 · High reliability · secondary · 2023-07-06Claim scope: Amount
Used for the higher nearly-$130-million contemporaneous estimate and bridge-specific outflow context.
- Multichain statement that service stopped indefinitelyMultichain · Tier 1 · High reliability · primary · 2023-07-07Claim scope: Status
Official account statement that service had stopped and bridge transactions would remain stuck on source chains.
- Multichain statement announcing cessation of operationsMultichain · Tier 1 · High reliability · primary · 2023-07-14Claim scope: Shutdown
Official account statement describing loss of operational access and funding and announcing that operations would cease.
- Multichain statement that service stopped indefinitelyMultichain · Tier 1 · High reliability · primary · 2023-07-07Claim scope: Shutdown
Event-scoped duplicate of bir_src_000028: the official indefinite-stop statement is a separate shutdown-stage source supporting the later cessation event; the original record remains status-scoped to bir_ev_000020.
Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.
Known unknowns
- The identity and authority of the party controlling the transfers remain unresolved.
- Frozen stablecoin balances do not by themselves establish recovery or reimbursement.
- Final user-loss and legal-custody outcomes require further review.
Conflicting claims
Cause of the abnormal transfers
Reported values: External compromise of MPC or administrator keys · Insider-controlled action or rug pull
Current treatment: Do not select a definitive cause without stronger primary or legal evidence; retain the incident as abnormal transfers with disputed attribution.
Help maintain incident aftermath records
Support recovery, reimbursement, restart, migration, shutdown, evidence, and correction checks.
Report a correction
Report missing evidence, incorrect dates, outcome changes, recovery details, reimbursement status, or broken links. GitHub Issues are preferred for structured review; the Google Form is available if you do not use GitHub.