Hack history / 2022 / Hack or exploit
Multichain
Hack or exploit on Jan 19, 2022 · Missing Input Validation
ATTACK TX CONFIRMED ON CHAININ REVIEWSOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES
Lost
$1.4M
sources: $1.4M to $3M
Returned
none listed
as the sources state it
Rank
#825
among thefts by dollars lost
What happened
Multichain's token contracts for WETH, PERI, OMT, WBNB, MATIC, and AVAX lacked proper validation of ERC20 permit() function calls. An attacker exploited this vulnerability to steal tokens from users who had previously granted approvals. A white-hat responder later returned approximately $1M of the $3M total loss, retaining 62 ETH as a bounty.
In review: sources disagree on the loss.
Details
- Date
- Jan 19, 2022
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Returned by the attacker
- yes, amount not stated
“A white-hat responder later returned approximately $1M of the $3M total loss, retaining 62 ETH as a bounty.” (DefiLlama) - Bounty paid
- yes, amount not stated
“A white-hat responder later returned approximately $1M of the $3M total loss, retaining 62 ETH as a bounty.” (DefiLlama)
Related incidents
Multichain drained of another $107 million days after previous theft 2023 · Hack or exploit · $107M
Multichain 2023 · Hack or exploit · $126M
Multichain 2023 · Hack or exploit · undisclosed
Multichain 2023 · Hack or exploit · $130K
Multichain 2021 · Hack or exploit · $7.9M
Multichain 2023 · Hack or exploit · $126M
Multichain 2023 · Hack or exploit · undisclosed
Multichain 2023 · Hack or exploit · $130K
Multichain 2021 · Hack or exploit · $7.9M
Cite this page
SwanBluechip, "Multichain hack, Jan 19, 2022: $1.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht33b64124fd/ (data as of 2026-10-31).