NullMeridianLog

6–7 Jul 2023

Multichain: MPC Address Assets Moved Abnormally; Bridges Halted

Multichain: early Jul 2023 assets locked in its MPC address were moved to an unknown address abnormally. Users told to stop using services and revoke approvals. PeckShield ~$126M.

  • Event date
  • Incident typeBridge / MPC compromise
  • Bug classKey compromise
  • Published

Loss, as sourced

Multichain did not state its own USD total initially. PeckShield assessed about $126M.

Traceability

Primary sources

  1. 01x.comMultichain urgent warning, early Jul 2023 (opens in a new tab)

In brief

Root cause: Per Multichain: abnormal movement from MPC address.

Timeline, as sourced: 6–7 Jul 2023 warning; bridges halted.

Account, as sourced

Claimed (Multichain): assets moved abnormally; stop using services; revoke approvals.

Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.