Multichain, formerly known as Anyswap and at one point the largest cross-chain bridging protocol by total value locked with peaks exceeding $10B, suffered a slow-motion implosion across May to July 2023 that culminated in a Multichain Foundation announcement on July 14, 2023 that operations would cease, that all routers would be paused, and that customers should not deposit further funds. Roughly $130M was drained from Multichain bridge vaults in unauthorized outflows during July 2023, while a far larger pool of user-deposited assets across multiple bridge vaults was rendered inaccessible by the collapse; total losses attributed to the failure across all affected chains (Ethereum, Fantom, BNB Chain, Cronos and Polygon) have since been assessed at approximately $210M in the Singapore liquidation proceedings. The proximate cause was the late-May 2023 arrest of Multichain CEO Zhao Jun by Chinese police authorities in an undisclosed location and on undisclosed charges, an event that the foundation initially attempted to conceal and that came to public attention through a series of community investigations and an eventual July 6 statement from Zhao's sister. The structural cause was that Multichain's multi-party computation key shards, which controlled signing authority over the bridge's cross-chain vault contracts, were concentrated in devices and access points under Zhao's personal control, despite years of public representations that the system operated under a distributed federation of independent signers. When Zhao's devices were seized by Chinese authorities, the MPC system became operationally inaccessible to the remaining team. Multichain Foundation's July 14 announcement formally terminated the protocol; the foundation has since dissolved with no further public communication, and the residual losses to users have not been compensated. The Multichain failure ended the era of opaque federated bridges and accelerated the industry shift toward verifiable on-chain or zk-secured cross-chain messaging.
Timeline of events
Multichain's failure unfolded over approximately ten weeks. On May 24, 2023, the protocol began experiencing intermittent outages and failed cross-chain transfers across multiple routes, with users reporting deposits that left source chains but never appeared on destination chains. The Multichain Foundation's official Twitter account on May 25 attributed the issues to 'force majeure circumstances' affecting the technical team, language that was widely interpreted as Chinese diplomatic euphemism for state intervention. On May 31, the foundation issued a clarifying statement that several routers had been paused due to operational issues; the statement did not mention CEO Zhao Jun or his whereabouts. Over June and early July, the protocol's TVL declined steadily as users withdrew assets through the routes that remained functional. On July 6, an account belonging to Zhao Jun's sister published a statement on Twitter alleging that Zhao had been detained by Chinese police authorities on May 21, that the family had been unable to obtain information about his whereabouts or charges, and that the operational team had lost access to the systems Zhao personally controlled. Approximately $130M of additional outflows occurred from Multichain bridge vaults between July 7 and July 13, with the funds moving in patterns inconsistent with normal bridge redemption flows; the foundation initially described these flows as 'abnormal' but did not provide further explanation. On July 14, the Multichain Foundation issued a final statement announcing the cessation of all operations, the permanent pause of all routers, and the dissolution of the foundation entity. The statement did not commit to any user reimbursement and provided no further information about the missing funds or about Zhao Jun's status. The foundation has not communicated publicly since.
Attack mechanism
Multichain's failure was not an attack in the conventional sense; there was no external exploiter who breached the system's security perimeter. The mechanism by which these funds became inaccessible was the convergence of three operational realities that the protocol's public documentation had explicitly denied. First, the multi-party computation signing system that controlled withdrawals from the bridge's destination vaults was not in fact distributed across multiple independent signers as represented; the MPC key shards, while technically distributed, were concentrated in physical and digital access points under the CEO's personal control. Forensic analysis by on-chain investigators suggests that Zhao Jun held effective sole-signer authority over the production MPC system, with backup access points either non-existent or compromised by the same single-custodian failure. Second, the foundation's operational continuity plan did not contemplate state-level intervention against the CEO; the team's response to Zhao's detention was reportedly to attempt to reconstruct access, an effort that failed because the necessary hardware and credentials were in the custody of Chinese authorities. Third, the residual outflows of approximately $130M between July 7 and July 13 occurred from vaults that had been frozen against normal user redemptions but remained accessible to whatever party held the seized credentials; the destination of these flows has been catalogued by on-chain investigators but the transactional pattern is consistent with state-directed custodial action rather than with any conventional exploit attribution. The protocol's Anyswap legacy compounded the issue: Multichain inherited a vault architecture from the 2020-2021 Anyswap codebase that had been audited only at the smart-contract level, with no audit of the off-chain key custody architecture that proved to be the actual single point of failure.
Root cause analysis
There are three distinct root causes. First, the MPC custody architecture was centralized in fact while distributed in representation; the public documentation, audit reports, and foundation communications consistently described Multichain as operating under a federation of independent signers, when in operational reality the signing keys were under unified CEO control. This misrepresentation was not exposed by any audit because audits focused on smart-contract surface and not on the off-chain operational substrate that controlled signing. Second, the foundation lacked a credible operational continuity plan against the failure mode that actually occurred: state-level seizure of the CEO and his devices. Continuity plans for centralized custodians typically assume key personnel turnover, illness, or corporate restructuring; they do not typically assume that a sovereign state will arrest the keyholder and confiscate the access infrastructure. The lack of distributed redundancy that would have allowed the remaining team to recover signing capability was the direct operational cause of the loss. Third, the protocol's user-facing risk disclosure did not communicate the centralization risk that would have allowed depositors to size exposure appropriately. Multichain marketed itself as a non-custodial cross-chain protocol, with messaging that obscured the fact that the bridge's destination vaults relied on off-chain federation signing rather than on chain-native verification. The post-2023 industry consensus is that any cross-chain bridge operating on a federation model must publish auditable signer-control disclosures that allow users to understand the actual single-point-of-failure surface; Multichain's documentation prior to its collapse failed this test in ways that became financially material when the underlying centralization was tested.
Initial response and recovery
There has been no meaningful recovery. The Multichain Foundation dissolved without filing for any formal insolvency proceeding in any jurisdiction; users with deposits in frozen vaults have no estate against which to file claims. Approximately $65M of residual assets remained on-chain in the bridge vaults after the July 13 outflows, with these assets now held in contracts that no party can sign withdrawal authorizations against. Various Multichain user groups, organized through Discord and Telegram channels through 2023 and 2024, attempted to coordinate recovery efforts including engagement with Chinese law enforcement (which produced no responsive action), engagement with destination chain validators (which had no protocol-level authority to override the bridge contract logic), and proposals for a community-led recovery contract that would attempt to unstuck the residual on-chain balances (which has not progressed beyond proposal). Several connected DeFi protocols that had used Multichain as their canonical cross-chain infrastructure executed their own emergency responses: Curve Finance migrated its cross-chain pools to alternative bridge protocols, Fantom Foundation deployed a one-time recovery contract for Fantom-side Multichain assets that was partially successful, and certain stablecoin issuers (notably Circle) blacklisted Multichain bridge contract addresses to prevent further USDC commingling. As of 2026, no individual user has received reimbursement from any Multichain-related entity, though the Singapore court-ordered liquidation (KPMG liquidators, appointed May 2025) provides a formal recovery channel. Total losses attributed to the collapse across all affected chains are assessed at approximately $210M; a portion remains held in contracts that lack accessible signing authority, visible on-chain but functionally inaccessible.
Funds tracking and laundering
On-chain investigators including ZachXBT, MistTrack, and the Beosin team catalogued the July 7-13 abnormal outflows in detail, with the destination addresses publicly mapped within seventy-two hours of the events. Approximately $65M of USDC, USDT, WBTC, ETH, and various ERC-20 assets moved out of Multichain's Ethereum-side vaults to addresses that the investigators tagged as being controlled by parties associated with the seized CEO's operational infrastructure. A subset of the outflows was subsequently moved through Tornado Cash and through alternative cross-chain bridge routes (including direct on-chain conversion via curve and uniswap pools) for further obfuscation. Notably, the laundering pattern was inconsistent with the typical Lazarus playbook (which favors immediate peel-chain dispersion to dozens of intermediate addresses); the Multichain outflows showed a more deliberate, slower, and more centrally-controlled movement pattern, which on-chain analysts have interpreted as consistent with Chinese-state-directed custodial liquidation rather than with conventional criminal laundering. Stablecoin issuers Circle and Tether froze approximately $65M of USDC and USDT linked to the stolen funds on July 8, 2023; notably the attacker did not swap out of these centrally-controlled assets before they were frozen, an unusual pattern that fueled suspicions of an inside job or rug pull rather than a purely external hack. The remaining proceeds moved into wallets that stayed identifiable but largely inactive, suggesting the controlling party either faced no liquidation pressure or was awaiting jurisdictional clarity before further movement. The Multichain forensic record is unusual among major bridge incidents in that the destination is publicly identifiable but the recovery pathway is blocked by sovereign-state dynamics rather than by criminal-actor obfuscation.
Legal and regulatory aftermath
The legal aftermath has centered on Singapore, where the Multichain Foundation was registered even as it operated principally from China, with the CEO and core engineering team domiciled in mainland China. Rather than a quiet dissolution, the collapse produced formal court proceedings. The Fantom Foundation (later rebranded Sonic Labs), which had integrated Multichain as canonical cross-chain infrastructure, sued the Multichain Foundation and Multichain Pte Ltd in the Singapore High Court for breach of contract and fraudulent misrepresentation, and obtained a default judgment in January 2024 (assessed at roughly $122M). On May 9, 2025, the Singapore High Court granted Sonic Labs' winding-up application against the Multichain Foundation in full and appointed liquidators from KPMG Singapore, opening a court-supervised process to trace and recover assets on behalf of Sonic Labs and other affected users. Chinese authorities have provided no public information about Zhao Jun's detention, the charges against him, or the disposition of the seized infrastructure; this opacity is consistent with the broader pattern of Chinese state action against domestic crypto operators since the 2021 mining ban, but it provides no legal predicate for civil or criminal recovery action. U.S. regulators including the SEC and CFTC have made no public enforcement statements about Multichain, reflecting the absence of a clear U.S. nexus and the dissolution of the operating team. The Multichain case has become a leading reference for the difficulty of cross-border crypto-bridge supervision and for the value of jurisdiction-of-incorporation liquidation as a recovery avenue when an operator abandons its users.
Industry implications
Multichain's collapse was the most consequential cross-chain bridge failure of 2023 and its industry implications have been substantial. First, it ended the era in which federated multi-signer bridges operating under undisclosed key-custody arrangements could capture significant TVL on user-trust grounds; the post-Multichain bridge market has consolidated around protocols that publish auditable signer architectures (LayerZero with its DVN model, Wormhole with its guardian set disclosure, Axelar with its delegated-PoS validator set). Second, it accelerated the migration toward cryptographically-verifiable cross-chain messaging using zero-knowledge proofs (zkBridge architectures), light-client verification, or shared sequencing layers; protocols including Polyhedra, Succinct Labs, and Espresso have grown in part on the post-Multichain shift in user expectations about bridge security. Third, it reshaped the audit market: bridge audits now routinely include off-chain operational architecture review, signer-control disclosure verification, and tabletop exercises against state-actor seizure scenarios; major auditors including Trail of Bits, OpenZeppelin, and Spearbit have published methodology updates explicitly motivated by the Multichain failure mode. Fourth, the connected DeFi ecosystem has internalized the lesson that bridge-derived assets are not equivalent to the underlying assets they purport to represent: many protocols now distinguish between native USDC and bridge-USDC variants in their risk parameters, with Aave, Curve, and Compound implementing tiered collateral factors that reflect the bridge-source's centralization risk. Fifth, the era of single-bridge dependence in cross-chain DeFi has ended; major protocols now route across multiple independent bridges with quorum logic, accepting the latency cost in exchange for resilience against any single bridge's failure. The cumulative effect is that the cross-chain infrastructure of 2026 is materially more robust than that of 2023, but the displaced user trust and the roughly $210M of un-recovered Multichain losses remain a permanent cost of the transition.
Verdict and lessons
Multichain is the canonical example of a cross-chain bridge whose advertised decentralization was operationally fictitious, and whose user funds became inaccessible when the actual single point of control was severed by sovereign state action. The lessons are concrete and have been substantially internalized by the surviving bridge ecosystem. First, federated bridges must publish auditable signer-control disclosures that allow users to size their deposits against the real custodial risk; representations about distributed signing must be backed by verifiable on-chain governance and operational continuity disclosures, not by marketing language alone. Second, off-chain key custody is part of the bridge's security model and must be audited with the same rigor as on-chain code; the gap between smart-contract audit and operational-substrate audit was the precise gap that Multichain fell into. Third, operational continuity planning for crypto infrastructure must explicitly contemplate state-level intervention as a primary failure mode in the relevant jurisdictions; for protocols with significant operational footprint in jurisdictions with state-actor risk, geographic diversification of key custody is not optional. Fourth, the user-facing risk disclosure for bridge protocols must communicate the actual custodial structure in terms that allow non-expert users to make informed deposit sizing decisions; the gap between Multichain's user-facing language ('non-custodial cross-chain') and its operational reality (single-CEO-controlled MPC) was a financial-disclosure failure in addition to an operational failure. The protocol's dissolution without insolvency, without recovery, and without any clear enforcement pathway for affected users has set a precedent that the industry has explicitly worked to ensure does not repeat: subsequent bridge protocols have invested in demonstrably-distributed key custody and in disclosed wind-down procedures precisely to differentiate themselves from the Multichain failure mode.
Root cause
Multichain's MPC signing architecture was centralized in fact while distributed in representation, with operational signing authority concentrated under CEO Zhao Jun's personal control despite years of public representations that the bridge operated under a federation of independent signers. Zhao's late-May 2023 arrest by Chinese police authorities and the seizure of his devices severed access to the production signing infrastructure, leaving the remaining team unable to recover signing capability. The bridge vaults became inaccessible for normal user redemption, and approximately $130M of additional outflows of disputed provenance occurred between July 7-13 from frozen vaults whose seized credentials remained operable for the controlling party.
Recovery and aftermath
No user reimbursement as of 2026. Roughly $130M was drained in the July 2023 outflows (Circle and Tether froze about $65M of it in stablecoins on July 8); total losses across all affected chains are assessed at approximately $210M. On May 9, 2025 the Singapore High Court ordered the Multichain Foundation wound up and appointed KPMG liquidators on a petition by Sonic Labs (formerly Fantom Foundation), providing a formal, court-supervised recovery channel; residual assets remain frozen or laundered.
Lessons
- Federated bridges must publish auditable signer-control disclosures that match operational reality; representations about distributed signing must be backed by verifiable architecture, not by marketing language
- Off-chain key custody is part of the bridge's security model and must be audited with the same rigor as on-chain code
- Operational continuity planning must contemplate state-level intervention against key personnel as a primary failure mode in relevant jurisdictions
- Bridge-derived assets are not equivalent to the underlying assets; risk parameters in connected DeFi protocols should reflect the bridge-source's centralization risk
- Cross-chain DeFi should route across multiple independent bridges with quorum logic; single-bridge dependence is now an unacceptable risk concentration
Precedent
Established that federated bridges with undisclosed key-custody centralization are structurally incompatible with the user-trust represented in their marketing; ended the era of opaque federation bridges and accelerated migration toward cryptographically-verifiable cross-chain messaging (zkBridge, light-client verification, multi-bridge quorum routing).