According to security experts PeckShield, the cross-chain protocol Multichain (formerly known as Anyswap) has been abused for USD 1.34 million. This was caused by a problem that was just disclosed by the platform.
Multichain said on January 17 that it had discovered and patched a major vulnerability. The flaw affects six tokens, including wrapped ether, according to the report (WETH).
However, the protocol was unable to prevent the flaw from harming previous users who had interacted with it. Instead, users had to go into their wallets and manually cancel rights that they had previously granted to the protocol. These users should do this right away, according to Multichain, or their valuables will remain at risk.
Many users appear to have failed to do so, and the flaw is now being exploited.
“Someone is taking advantage of this *right now*. If you haven’t already, you should rescind approvals before it’s too late” Samczsun, a Paradigm researcher, tweeted.
Did you also face this bug? Tell us in the comments.