Hackers Withdrew $1.34 million Worth of Crypto Assets from the Multichain Protocol

A vulnerability was discovered in the decentralized Multichain protocol and, although the developers promptly fixed the problem, user funds remain at risk. According to PeckShield, a blockchain security company, despite fixing the vulnerability, users need to revoke permission to work with the protocol in their wallets. Not all users did it promptly, which allowed hackers to steal $1.34 million worth of crypto assets. "Someone is using the vulnerability right now. If you have not revoked your work permit, then I would advise you to do it before it is too late," wrote an employee of Paradigm under the pseudonym Samczsun. The hacking was also confirmed by the developers of the Multichain protocol itself. They reported that the attackers were able to withdraw 445 WETH tokens. At the same time, the vulnerability concerns six tokens in Multichain pools - WETH, PERI, OMT, WBNB, MATIC, AVAX. Note that Multichain is the largest protocol for the exchange of assets between blockchains. Currently, more than $8.3 billion is blocked in the project pools. Multichain works with ten blockchains and supports 1,366 tokens. At the end of December, the protocol developers received funding in the amount of $ 60 million.