Fantom's Multichain appears to have been attacked, resulting in the extraction of tokens worth over $100 million.

Odaily News: Tokens worth over $100 million have been withdrawn from the Multichain bridge on the Fantom network, raising concerns about a possible security vulnerability. The transferred tokens include $58 million worth of stablecoin USDC, 1,020 WBTC (equivalent to $30.9 million), 7,200 WETH (equivalent to $13.7 million), $4 million worth of stablecoin DAI (the combined value of these four tokens exceeds $100 million), as well as other tokens such as Chainlink, Curve DAO, YFI, and Wootrade Network, and nearly a quarter of UniDex's total supply. Assets also appear to have moved on the Multichain Moonriver bridge, including 4.8 million USDC and 1 million USDT. Dogechain has also experienced abnormal fund flows, with at least 660,000 USDC being sent to wallets associated with the Moonriver fund flows.



Security company Paladin questions whether this may be related to LayerZero, a cross-chain platform, increasing support for the four tokens (USDC, USDT, WETH, and WBTC), which partially overlap with the tokens being moved. Bryan Pellegrino, CEO of LayerZero, responded that this issue is unrelated to their platform and believes it is a hack targeting Multichain. Pellegrino suggested that Multichain bridge users may have been extracting assets and taking them to LayerZero. However, Igor Igamberdiev, Director of Wintermute Research, suggests that it is likely the work of someone controlling Multichain since the funds on the Fantom side were not destroyed during the transaction. Igamberdiev also pointed out that it is strange that the wallet receiving a large amount of USDC had engaged in a transaction on the old Binance Smart Chain bridge just a few hours earlier. (The Block)



In earlier news, Multichain tweeted that the locked assets on their MPC address have been abnormally moved to unknown addresses.