{"id":407590,"date":"2022-02-19T14:02:07","date_gmt":"2022-02-19T11:02:07","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/multichain-recovers-2-6m-stolen-funds-to-reimburse-losses-on-condition\/"},"modified":"2022-02-19T14:02:07","modified_gmt":"2022-02-19T11:02:07","slug":"multichain-recovers-2-6m-stolen-funds-to-reimburse-losses-on-condition","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/multichain-recovers-2-6m-stolen-funds-to-reimburse-losses-on-condition\/","title":{"rendered":"# Multichain recovers $2.6M stolen funds, to reimburse losses on condition"},"content":{"rendered":"<p>&#8220;<strong># Multichain recovers $2.6M stolen funds, to reimburse losses on condition <\/strong>&#8221;<\/p>\n<div class=\"post-content\" data-v-128018ef>After a month-long fight against an ongoing exploit, cross-chain router protocol Multichain announced the recovery of nearly 50% of the total stolen funds, worth nearly $2.6 million of cryptocurrencies. The team has also released a compensation plan to reimburse the users\u2019 losses.<\/p>\n<p>On Jan. 10, blockchain security expert Dedaub alerted Multichain about two vulnerabilities in its liquidity pool and router contracts \u2014 affecting eight cryptocurrencies including wr<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>ed ETH (WETH), wrapped BNB (WBNB), Polygon (MATIC) and Avalanche (AVAX).<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">1\/3  We recently identified the &#8220;phantom functions&#8221; code pattern, which would have led to likely the largest crypto hack ever.<\/p>\n<p>Your code may be vulnerable! You need to check for the pattern in your Solidity\/EVM code! <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/pxRqCQFbnS\">https:\/\/t.co\/pxRqCQFbnS<\/a><\/p>\n<p>\u2014 Dedaub (@dedaub) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/dedaub\/status\/1486621638221344768?ref_src=twsrc%5Etfw\">January 27, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\nA week later on Jan. 18, the Multichain team advised users to revoke approvals for the vulnerable smart contracts as a means of im<a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a>te damage control. However, as Cointelegraph reported, the warning announcement encouraged more hackers to try the exploit, resulting in losses exceeding $3 million.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">The <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/MultichainOrg?ref_src=twsrc%5Etfw\">@MultichainOrg<\/a> hack is far from being over.<br \/>Over the last hours more than additional $1M stolen, rising the total stolen amount to $3M.<br \/>One victim lost $960K!<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/fYhYxUojB8\">https:\/\/t.co\/fYhYxUojB8<\/a> <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/Gvh5hB6t6s\">pic.twitter.com\/Gvh5hB6t6s<\/a><\/p>\n<p>\u2014 Tal Be&#8217;ery (@TalBeerySec) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/TalBeerySec\/status\/1483898136678617089?ref_src=twsrc%5Etfw\">January 19, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/medium.com\/multichainorg\/multichain-contract-vulnerability-post-mortem-d37bfab237c8\">According<\/a> to Multichain, the vulnerability of the liquidity pool was fixed by upgrading the affected tokens\u2019 liquidity to new contracts, adding:<\/p>\n<blockquote><p>\u201cHowever, the risk remains for the users who have yet to revoke approvals for the affected router contracts. Importantly, users themselves have to be the ones to revoke the approvals.\u201d<\/p><\/blockquote>\n<figure><img decoding=\"async\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2022-02\/bdb76438-5c30-4833-aca8-50c31c6f4fef.png\" alt=\"\" title=\"\"><figcaption style=\"text-align: center;\">Daily attack sum. Source @Dune Analytics<\/figcaption><\/figure>\n<p>As of Feb. 18, Multichain reported that 4,861 out of the 7,962 affected users have revoked approvals while advising the remaining 3,101 addresses to take action as soon as possible. Out of the 1,889.6612 WETH and 833.4191 AVAX stolen funds, the team was able to recover 912.7984 WETH and 125 AVAX (worth nearly $2.55 million and $10,000 respectively).<\/p>\n<p>\u201cHowever, in spite of our best efforts, a total of 976.8628 WETH has been stolen,\u201d confirmed Multichain. To be eligible for compensation through reimbursement of losses, Multichain has asked users to revoked their approval and submit a ticket on the website. \u201cAs such, we will no longer reimburse any losses that happen after February 18 24:00 UTC.\u201d <\/p>\n<p><strong>Related: <\/strong><strong><em>Netflix announces new <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/watch-movies-tv-seriess\/\" data-internallinksmanager029f6b8e52c=\"8\" title=\"Watch Movies &amp; TV Series\" target=\"_blank\" rel=\"noopener\">series<\/a> on Bitfinex hack involving 120,000 Bitcoin<\/em><\/strong><\/p>\n<p>Netflix will soon produce and launch a documentary series circled around a New York-based couple and their involvement in laundering Bitcoin (BTC) linked to the Bitfinex hack. <\/p>\n<p>As Cointelegraph reported, the documentary will be directed by American filmmaker Chris Smith with Nick Bilton as the co-executive producer. The announcement read:<\/p>\n<blockquote><p>\u201cNetflix has ordered a documentary series about a married couple\u2019s alleged scheme to launder billions of dollars worth of stolen cryptocurrency in the biggest criminal financial crime case in history.\u201d<\/p><\/blockquote>\n<p><template data-name=\"subscription_form\" data-type=\"markets_outlook\"><\/template><\/div>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong>\n<\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/news\/\" data-internallinksmanager029f6b8e52c=\"2\" title=\"News\" target=\"_blank\" rel=\"noopener\">News<\/a> articles, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/general\/\" target=\"_blank\" rel=\"noopener\">General category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/cointelegraph.com\/news\/multichain-recovers-2-6m-stolen-funds-to-reimburse-losses-on-condition\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;# Multichain recovers $2.6M stolen funds, to reimburse losses on condition &#8221; After a month-long fight against an ongoing exploit, cross-chain router protocol Multichain announced the recovery of nearly 50% of the total stolen funds, worth nearly $2.6 million of cryptocurrencies. The team has also released a compensation plan to reimburse the users\u2019 losses. On&#8230;<\/p>\n","protected":false},"author":1,"featured_media":407591,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/images.cointelegraph.com\/images\/1200_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjItMDIvNDcwMTY1MWYtMGE3Ny00NmY5LTg0MDgtYTVmMjFkMzFlMjI1LmpwZw==.jpg","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[74867,74894,74863,74882,75434,70944],"class_list":["post-407590","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-altcoin","tag-blockchain","tag-cryptocurrencies","tag-hacks","tag-smart-contracts","tag-hackers"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/407590","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=407590"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/407590\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/407591"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=407590"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=407590"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=407590"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}