Cross-chain bridge Multichain halted operations on July 7, 2023, after $126 million in abnormal asset movements left user funds inaccessible across the network.
The Multichain cross-chain bridge halted operations on July 7, 2023, following the discovery of $126 million in abnormal asset movements that left user funds locked within the protocol. The collapse demonstrated systemic risks in cross-chain infrastructure when access to cryptographic keys concentrated in a single individual.
Multichain, formerly known as Anyswap, facilitated asset transfers across multiple blockchain networks including Ethereum, Fantom, Moonriver, and Dogecoin. Users deposited assets into Multichain smart contracts on one blockchain and received wrapped representations on another blockchain. The bridge relied on multisignature wallet architecture where multiple signers controlled the security of user assets.
The Multichain collapse traced to the detention of Zhaojun, the protocol's CEO, by Chinese police in May 2023. Zhaojun held sole access to the multi-party computation keys required to authorize transactions moving assets held in bridge escrow. The Chinese police detention became public knowledge only after the fund movements occurred and the bridge halted operations.
Fund drainage affected multiple networks. Fantom sustained losses exceeding $65 million in bridged assets as funds moved through malicious transactions. Moonriver experienced substantial losses. Dogecoin bridge assets were also affected. The distributed nature of the theft across multiple networks suggested coordinated access to Multichain's key infrastructure.
Multichain maintained approximately $1.5 billion in total value locked before the collapse. The TVL consisted of user assets deposited in bridge contracts across all supported networks. When fund movements ceased and the bridge halted operations, users could not withdraw assets.
The protocol's multi-party computation security model relied on threshold cryptography where a minimum number of signers (commonly three of five or four of seven) could authorize transactions. The system intended to prevent any single individual from unilaterally moving funds. However, the implementation concentrated real-world access to the cryptographic keys in a single person or a small group without sufficient redundancy.
The collapse highlighted the distinction between technical decentralization and operational centralization. While Multichain's smart contracts were decentralized and immutable, the key management practices were operationally centralized around Zhaojun. When that individual became unavailable, the system failed to function despite its theoretical decentralized architecture.
The Fantom Foundation and other ecosystem participants explored recovery options. Fantom Foundation recovered some drained assets through negotiations and on-chain tracking. However, substantial portions of the $126 million in moved funds remained inaccessible to users. Recovery efforts extended over months as authorities and blockchain analysts tracked asset movements through address hopping and mixing protocols.
The Multichain collapse affected thousands of users holding wrapped assets from the bridge. Users attempting to exit bridge positions or move assets to other blockchains encountered a non-functional bridge with no recovery mechanism in the smart contracts themselves.
Cross-chain bridge protocols subsequently undertook enhanced key management practices. Competitors and new bridge projects implemented distributed key management using services like Threshold Network and other threshold cryptography infrastructure. The Multichain collapse created demand for bridge solutions with verifiable key distribution.
Multichain's failure underscored the importance of operational governance and key management in decentralized finance. A well-designed protocol must ensure that key management practices match the technical architecture's decentralization. The lesson influenced subsequent bridge designs and generated discussion about standardized governance practices across DeFi infrastructure.
The incident accelerated development of bridge solutions without custodial intermediaries holding user assets. Designs using light clients and native cross-chain verification mechanisms provided higher security guarantees than bridge models concentrating asset custody in multisignature wallets.
---
