DeFi
Singapore court rules $125M Multichain hack was inside job – DL News
- Fantom Foundation director Michael Long has long had doubts about Multichain’s story.
- A Singapore judge has ordered Multichain to pay Fantom $2.2 million.
- Reported arrests in China muddy the waters as to where the money went.
When Multichain close Last summer, after an apparent hack of $125 million in cryptocurrency, Michael Kong dismissed speculation that it was an inside job.
As CEO of the Fantom Foundation, Kong was dismayed to see his project burn when all that cryptocurrency was mysteriously transferred to “unknown addresses in an abnormal manner.”
But Kong couldn’t get his head around the fact that Multichain was a thriving business. Why ruin it?
Kong is not so sure anymore.
In an interview earlier this year, Kong said he couldn’t rule out that someone affiliated with Multichain had managed to get hold of the money. “My perspective has changed a little bit,” he said. DL News“I had a little too much faith in what Multichain was telling us.”
A court ruling now appears to lend credence to Kong’s suspicions.
On July 8, Judicial Commissioner Mohamed Faizal of the High Court of Singapore governed that Multichain owes the Fantom Foundation, the organization that manages the Fantom blockchain, $2.2 million.
A court decision
Fantom, once a top-five blockchain with nearly $8 billion locked in its DeFi ecosystem, now sits just outside the top 50. As of Tuesday, DeFi applications on Fantom managed to generate a total of $129 million, just over half of what they did before the hack.
Join the community to receive our latest stories and updates
On the eve of last year’s exploit, much of the crypto in Fantom’s DeFi ecosystem came from Multichain, a “bridge” that allows users to move digital assets between otherwise incompatible blockchains.
The total value of cryptocurrencies in Fantom’s myriad DeFi applications plummeted after the Multichain incident.
“[Fantom’s] position is that the violation was possible because the CEO of [Multichain] “He had ultimate privileges and control over the cryptocurrency assets stored in the multi-chain bridge,” Faizal wrote in his decision.
This violated the company’s user agreement, the judge said.
The decision could pave the way for the appointment of a third-party liquidator and the eventual return of the stolen tokens, according to the Fantom Foundation.
Faizal also noted that Fantom believes the “siphoned assets” may have been “illegally diverted” from one Multichain entity to another.
The judge was quick to add, however, that this allegation fell outside the scope of the legal case before him.
$1.8 billion lost
The lawsuit sheds more light on an episode that took place during a series of exploits a few years ago.
In 2022, the bridges lost $1.8 billion in hacks, a figure that represents more than half the value of cryptocurrencies stolen from DeFi protocols that year.
A representative for Multichain could not be reached for comment. The company has not defended itself at any point in the Fantom case. trial in Singapore, which started in 2023.
A person familiar with the inner workings of Multichain said DL News The company team had not planned any internal work.
“The truth will be known when the police make the case public,” said the person, who spoke on condition of anonymity out of fear for his family in China.
“It’s conceivable that someone from the police force targeted the CEO of Multichain and said, ‘Hey, he’s got money.
— Michael Kong, Fantom Foundation
Kong claims that former Multichain employees have been “totally uncooperative.”
Multichain is a “bridge” that allows users to move digital assets between otherwise incompatible blockchains. Users on blockchain A can deposit cryptocurrencies into Multichain, which will issue IOU tokens on blockchain B, where they can be used as if they were real.
Arrests in China
In May 2023, founder and CEO Zhaojun He was arrested by police in the southern Chinese city of Kunming, according to a statement made by the company after the hack.
Despite the team’s efforts to keep the bridge up and running after Zhaojun’s disappearance, Multichain suffered an apparent hack on July 7, 2023, when $125 million in crypto was transferred to “unknown addresses in an abnormal manner,” the company said.
Two days later, Zhaojun’s sister tried to salvage what was left, the company said. She transferred much of the remaining cryptocurrency to wallets she controlled, only to also be detained on July 13.
Strapped for cash and unable to contact the CEO or his sister, Multichain said it would shut down and share information as it became available.
For some, the case has become a warning about operational security failure and running a business in a crypto-hostile police state.
Others, without evidence, suggested in a “Multichain Scam” Telegram chat group with over 500 members that Zhaojun and his sister had absconded with the missing cryptocurrency.
At the time, Kong said Multichain may have been the victim of a racketeering operation by local police. He added that employees had told him that some of their colleagues had been arrested.
Fantom investigates
A former employee, named Marcel, said DL News At least five people have been arrested, although this could not be independently verified.
“It’s conceivable that someone targeted the CEO of Multichain within a police force and said, ‘Hey, he’s got money, he’s pretty well-known in the industry. Let’s target him,’” Kong said. DL News last summer. “That’s what I think could happen.”
But evidence that has since emerged has changed that.
The Fantom Foundation, which hired a Hong Kong law firm called King & Wood Mallesons to investigate the situation, was able to confirm that Zhaojun had indeed been arrested, Kong said. DL News.
Jail
Although Zhaojun is likely still awaiting indictment, his colleagues at Multichain have had better luck.
“We understand that some of them have been arrested and released,” he said. “But we have had no contact with them for months because Multichain and its former team members have been completely uncooperative.”
A mysterious arbitration
In November, the Multichain Bridge was open for about two hours, allowing a user to take advantage of a $1 million arbitrage opportunity. The profits were then transferred to Binance, the world’s largest cryptocurrency exchange.
So who is behind this move? “We believe it is a person (or several people) from the old Multichain team,” Kong said. DL News this week.
Earlier this year, he said it was unlikely the police had moved any funds because they would likely have used a different method.
The possibility of Multichain’s involvement was raised in court.
In his ruling, Faizal noted that the Fantom Foundation had sued two entities: Multichain Foundation Ltd, which ran the crypto bridge, and Multichain Pte Ltd.
This is because of the “sudden incorporation” of Multichain Pte Ltd “just before the July 7 security breach” and the foundation’s “belief that the siphoned assets could have been illegally diverted” to the entity, Faizal wrote.
But the Commissioner made it clear that this allegation fell outside the scope of his decision.
“I do not comment on the merits of these claims regarding the involvement of [Multichain Foundation] And [Multichain Pte]”I am not convinced of the validity of these claims,” he wrote.
Regardless, the Fantom Foundation has yet to find a definitive answer as to what happened.
“We’re not quite sure yet,” Kong said. “Some [crypto] “The movements were confusing.”
Aleks Gilbert is DL News“New York-based DeFi correspondent. Got a tip? You can reach him at aleks@dlnews.com.