A white-hat hacker has returned 322 Ethereum (around $900,000) after an exploit drained Multichain users of more than $3 million worth of crypto this week.
Up to $1.5 million worth of Ethereum is still at large, however.
Multichain is a cross-chain router protocol that bridges users between thirty different blockchains, including Bitcoin, Ethereum, and Terra.
This week’s critical vulnerability appears to have affected six tokens on the protocol: Wrapped ETH (WETH), Peri Finance Token (PERI), Official Mars Token (OMT), Wrapped BNB (WBNB), Polygon (MATIC), and Avalanche (AVAX).
On Monday, Multichain announced on Twitter that the problem had been “reported and fixed.”
However, more attackers swooped in after the announcement and were still able to exploit the protocol through the same vulnerability, with one hacker stealing as much as $1.43 million.
1/A critical vulnerability that affected 6 tokens (WETH, PERI, OMT, WBNB, MATIC, AVAX) has been reported and fixed.
All assets on both V2 Bridge and V3 Router are safe, and cross-chain transactions can be done safely.
— Multichain (Previously Anyswap) (@MultichainOrg) January 17, 2022
The White Hat Multichain hacker
In the badlands of crypto, critical vulnerabilities aren’t just exploited by criminals for self-interested motives, they also draw the attention of blockchain vigilantes called “white hat” hackers, who exploit vulnerabilities to report them and collect a bounty.
One of the attackers that attacked Multichain after Monday’s announcement was a white hat.
The hacker returned 322 ETH (around $900,000) to an affected user and kept 62 ETH ($173k) as a bounty for themselves.
The hacker also returned 52 ETH ($139,000) to Multichain and kept around 12 ETH as a bounty.
Around 527 ETH, or just under $1.5 million, is still missing, however.
On Thursday, Multichain CEO and co-founder Zhaojun took to Twitter and confirmed ZenGo wallet co-founder Tal Be’ery’s theory that the vulnerability was due to the fact that Multichain’s bridge contracts need a pause function to prevent loss of funds in the future.
Eric Trump, the son of President Donald Trump, said that it was “woke cancel culture” coming after his family that led him to embrace crypto—with the Trumps making many moves in the space in recent months.
The Trump Organization's executive vice president claimed that the “some of the biggest banks in the world” canceled his accounts with them—as well as accounts for other family members—at the tail end of President Trump’s first term.
He believes this happened as a result of the “woke cancel cu...
Strategy, formerly known as MicroStrategy, reported a decline of $16.49 per common share in the first quarter of 2025—a result of Bitcoin’s price plunge during the span, the leading Bitcoin treasury firm announced Thursday after equity markets closed.
The Tysons Corner, Virginia-based company recorded a loss of $5.9 billion on its Bitcoin holdings for the period.
Strategy said that it would issue a new $21 billion common stock equity offering, with co-founder and Executive Chairman Michael Saylo...
Investment firm dao5 has raised $222 million to close out its second fund, with an aim to nurture institutional interest in cryptocurrencies.
The multi-strategy investment vehicle brings dao5's total assets under management to roughly $550 million, according to the firm's announcement on Thursday.
“Crypto is entering its adolescence phase,” dao5 founder and general partner Tekin Salimi said Thursday in a statement. “The industry’s dependency on pure speculation as the driver of growth is no long...