Leaderboard
1036All-time rank
Multichain logo

Multichain

Feb 15, 2023

$130K
Lost
$130K
Recovered
$0
Net loss
$130K
Unrecovered0% recovered

On February 15, 2023, the AnyswapV4Router contract of Multichain was exploited via a front-running attack. The attacker exploited a lack of signature verification in the permit mechanism to front-run the anySwapOutUnderlyingWithPermit function and transfer WETH worth approximately 87 ETH ($130K) from the contract.

Target
Bridge
Classification
Input Validation
Technique
Signature Verification Flaw
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Feb 15, 2023
    Exploit executed — $130K drained via signature verification flaw
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents