{"id":180443,"date":"2023-08-23T15:39:51","date_gmt":"2023-08-23T15:39:51","guid":{"rendered":"https:\/\/precoinnews.com\/?p=180443"},"modified":"2023-08-23T15:39:51","modified_gmt":"2023-08-23T15:39:51","slug":"multichain-victims-search-for-answers-in-1-5b-exploit-as-new-evidence-emerges","status":"publish","type":"post","link":"https:\/\/precoinnews.com\/crypto\/multichain-victims-search-for-answers-in-1-5b-exploit-as-new-evidence-emerges\/","title":{"rendered":"Multichain victims search for answers in $1.5B exploit as new evidence emerges"},"content":{"rendered":"
On July 14, developers of the $1.5-billion Chinese cross-chain protocol Multichain confirmed users\u2019 worst fears. The protocol\u2019s CEO, identified only as \u201cZhaojun He,\u201d was arrested by Chinese authorities in Kunming on May 21 after months of repeated denials on official communication channels. Also allegedly arrested was Multichain\u2019s core team, which was operating in Shanghai.\u00a0<\/p>\n
It was never disclosed why Zhaojun had been arrested or what the charges were. However, evidence suggests that Multichain funds may have been seized as part of an anti-money laundering operation in the context of a greater crackdown on crypto by Chinese authorities. In addition, an alleged fake ID used by the CEO to register Multichain\u2019s operations only draws more questions.\u00a0<\/p>\n
<\/p>\n
Despite their previous assurance of decentralization, the Multichain team revealed that the protocol\u2019s multi-party computation servers and private keys were all under the exclusive control of Zhaojun, which were handed over to police. Without access to such items, the protocol had to shut down, and its team members were nowhere to be found.\u00a0<\/p>\n
By the time of disclosure on July 14, $1.5 billion in total value locked on Multichain bridge remains inaccessible. An attempt to \u201crescue\u201d users\u2019 assets earlier that month also resulted in the arrest of Zhaojun\u2019s sister, or so the development team says. Since the arrest began, funds on Multichain have been mysteriously swapped or bridged to unidentified wallets.\u00a0<\/p>\n
Crypto investor ArkRide, who claims to have over $9,000 stuck in the Multichain protocol, founded a victims group shortly after the incident. The group now has over 300 members.\u00a0<\/p>\n
ArkRide tells Cointelegraph that when the group formed, the members did not even know the names of key Multichain executives. Subsequently, one member shared a document from the Singapore government\u2019s Accounting and Corporate Regulatory Authority alleged to be a Multichain business filing. The document lists \u201cHe Xiaokun,\u201d a resident of Jiangsu Province, China, as the \u201cDirector\u201d of the company. After seeing this document, some allege that \u201cZhaojun He\u201d is in fact a pseudonym for \u201cHe Xiaokun.\u201d (Chinese family names are written first.)<\/p>\n
<\/p>\n
Several Multichain victims reached out to Chinese embassies and the police in their home countries in an attempt to get further information, but received no response.\u00a0<\/p>\n
Around the same time as user investigations, they were contacted by the Fantom Foundation, one of the largest users of the Multichain bridge prior to its collapse. Through several Telegram messages, sources at Fantom claimed that it has hired attorneys within China to assist in the recovery process and confirmed Multichain co-founder Zhaojun had been detained by Chinese police.\u00a0<\/p>\n
\u201cWe\u2019ve been gathering info from different parties and have contacted a Chinese law firm to get advice moving forward,\u201d the source also claimed that some of the Multichain funds have been frozen by centralized exchanges and stablecoin issuers and that the foundation is attempting to get these funds distributed to victims. When asked about the possibility of a rug pull, the source wrote: \u201cI do not believe the MC team misappropriated funds.\u201d<\/p>\n
On July 14, Fantom co-founder Andre Cronje stated that \u201cMultichain was a big blow\u201d to the network, as much of its total value locked consisted of Multichain derivative stablecoins. Stablecoin issuers Circle and Tether have frozen over $65 million in assets associated with the hack, according to blockchain data.<\/p>\n
Cointelegraph reached out to the Fantom Foundation for comments but did not receive a response by the time of publication.<\/p>\n
In a conversation with Cointelegraph, freelance content creator PJ Krypto claimed that he has lost a full month\u2019s paycheck from a client as a result of his funds getting stuck inside the Multichain protocol. According to him, this happened on Aug. 1, nearly a month after the team had announced that the protocol should not be used.\u00a0<\/p>\n
<\/p>\n
After his transfer took an unusually long time, PJ checked Multichain\u2019s block explorer and noticed that it had an abnormally large amount of pending transactions. Alarmed, he then checked the protocol\u2019s social media accounts.<\/p>\n
\u201cNearly, my jaw dropped to the ground when I started reading everything,\u201d he stated, continuing:<\/p>\n
\u201cI don\u2019t know, I guess, sometimes, you just kinda get comfortable. You\u2019ve used something before, and it just works. And you get a little lackadaisical, and I think that\u2019s where I got victimized [\u2026] the silly thing is, I could have just sent it to a centralized exchange.\u201d<\/p><\/blockquote>\n
The content creator stated that his paycheck is still stuck in the Multichain protocol. As a result, he has been unable to pay his team for subcontracted work they performed for him in July and will likely have to catch up these payments out of revenue from August.\u00a0\u201cIt was a tough pill for them to swallow. I mean, they have bills, right? And I\u2019m behind now on my bills for my content creation.\u201d<\/p>\n
ArkRide lost over $9,000 worth of crypto in Multichain on July 15 under similar circumstances. He expressed relief that his loss from the hack was small and stated that he has met others who fared much worse:<\/p>\n
\u201cMy amount that I lost on Multichain is not as much as some people that I talked to lost because there were people who lost nearly half a million. I talked to a couple of guys who lost like $100K each, and there were some people who literally couldn\u2019t stand from their beds, they told me they wanted to commit suicide or something like this.\u201d<\/p><\/blockquote>\n
The investigation continues<\/h2>\n
The Chinese national ID system reveals concerning information on who is the actual director of Multichain.\u00a0A Chinese national ID is a 15- or 18-digit number containing an individual\u2019s residing jurisdiction, date of birth and gender.<\/p>\n
A query revealed that the individual listed as \u201cHe Xiaokun\u201d in Multichain\u2019s Singaporean registration documents was born on May 10, 1955. The same search for \u201cYang Qiumei,\u201d another director listed on the Multichain registration file,\u00a0reveals the said individual to have been born on July 20, 1957. Xu Ruduo, the third director of Multichain \u2014 possibly referring to co-founder Alfred Xu \u2014 registered using a different type of ID. Alfred Xu has been unreachable since the arrest of his colleague. <\/p>\n
<\/p>\n
By inspection, Zhaojun appears far too young to fit the profile of either \u201cHe Xiaokun,\u201d age 68, or Yang Qiumei, 66. Both individuals had been indicated as residing in the same address at a rural Chinese village.\u00a0<\/p>\n
A photo of Zhaojun circulated during his participation in the crypto project Fusion, circa 2017, and was previously his profile picture of his official Twitter account. Dejun Qian, co-founder of Fusion, confirmed Zhaojun was in charge of Multichain during the time of the incident. The two were previously involved in a business dispute regarding Multichain, when it was formerly known as Anyswap.\u00a0<\/p>\n
<\/p>\n
Sources reviewed by Cointelegraph claim that from the very beginning (May 21), Chinese authorities accused Zhaojun of \u201cmoney laundering\u201d by bridging tainted assets from users via the Multichain protocol. As a result, the police have attempted to seize all protocol assets, user, enterprise or tainted alike, as proceeds of crime. Although some of these seizures were prevented when centralized exchanges or stablecoin issuers froze the funds, the rest have passed into the hands of Chinese authorities, these sources claim.<\/p>\n
Wuwei Liang, a former staff member of crypto exchange CoinXP, claims that in 2019, the firm\u2019s entire development team was apprehended by Chinese police, along with the confiscation of protocol funds and shutdown of all relevant operations. Liang Liang, the firm\u2019s CEO, was subsequently charged with operating a \u201cmulti-level marketing operation\u201d and a \u201cpyramid scheme,\u201d which could result in the criminal seizure of the projects\u2019 users\u2019 and enterprise\u2019s\u00a0assets al if convicted.\u00a0<\/p>\n
During the trial this July, some sources claim that key witnesses and defense attorneys were threatened with legal intimidation. A presiding judge also reportedly stated, \u201cPresumption of innocence until proven guilty\u201d is \u201cnot a correct principle\u201d within Chinese law. The trial has been adjourned.\u00a0<\/p>\n
<\/p>\n
In a similar incident on May 29, Chinese crypto exchange BKEX suspended withdrawals citing the need to cooperate with police on charges of \u201cmoney laundering.\u201d The exchange has not been active since, and, like Multichain, its team members are nowhere to be found. Social channels, too, have gone cold. Its website is also offline.\u00a0<\/p>\n
<\/p>\n
In yet another incident, the entire development team of offshore Hong Kong dollar and Chinese yuan stablecoin issuer Trust Reserve disappeared in May after its office was raided by police. Local sources say that Trust Reserve developers had been detained. Again, the charges are unknown.\u00a0<\/p>\n
Allegations of corruption<\/h2>\n
In each of these instances, police have neither informed investors of the charges against protocol developers nor of what process investors can go through to recover their funds. CoinXP\u2019s Liang claims that this is because police are using the legal system as a means of corruption to embezzle\u00a0investors\u2019 capital for their own benefit:\u00a0<\/p>\n
\u201cDefense lawyers would persuade the parties and their families [of arrested crypto executive] to comply, shut down servers, hand over [private] keys, and cooperate in pleading guilty, claiming that this will result in leniency. Little do they know that this makes it easy for law enforcement to profit from unlawful conduct, \u2018legally\u2019 pushing the parties towards prison and, at the same time, \u2018legally\u2019 taking away the digital assets that belong to the users, investors and founding team.\u201d<\/p><\/blockquote>\n
Whatever the reason, the Chinese government has not yet answered investors\u2019 questions of where the funds have gone and why they have not been returned to users.<\/p>\n
Users such as ArkRide, PJ Krypto and others in the \u201cMultichain Scam\u201d group have so far been unable to get answers as to where their hard-earned money went. But one thing is certain: The Multichain exploit will go down as one of the worst crypto hacks of 2023. Across the world, Multichain users\u2019 assets have mysteriously disappeared. Although some of the funds may be recovered, many are still experiencing the trauma it caused them.<\/p>\n
Cointelegraph Editor Zhiyuan Sun contributed to this story.\u00a0<\/em><\/p>\n
Magazine:\u00a0Should we ban ransomware payments? It\u2019s an attractive but dangerous idea<\/em><\/strong><\/p>\n