Answers to the Frequently Asked Questions About Multichain Vulnerability
On Jan 18, we urged users to remove approvals for six cross-chain tokens (WETH, PERI, OMT, WBNB, MATIC, AVAX), while the users haven’t revoked WETH approval were exploited (WETH 445 total affected). For your fund safety, the top priority at this moment is to revoke the approvals of six tokens via https://app.multichain.org/#/approvals as soon as possible, as per our instruction. If you are unsure of the status of your approval(s), you can also log into https://app.multichain.org/#/approvals to check it out. Also, please do not transfer any of these six tokens to your accounts before revoking, otherwise, your wallets are in danger still.
Q1: Is the hack contained?
A: The hack is contained for now. However, users still have to revoke the approvals for those six tokens (WETH, PERI, OMT, WBNB, MATIC, AVAX) to avoid a future attack.
Q2: How much has been lost?
A: 445 WETH has lost as of Jan 18.
Q3: How much could potentially be lost?
A: All the 6 tokens sent to wallets that didn’t revoke approvals are still potentially be lost.
Q4: Are users’ wallets in danger still?
A: All the users’ wallets that haven’t revoked the approval for these 6 tokens are in danger.
Q5: Is it safe to use Multichain now?
A: Multichain is safe now. You can bridge as usual.
Q6: How do I know whether I have approved these tokens before?
A: Just login https://app.multichain.org/#/approvals or https://app.multichain.org/#/approvals
If you have approved these tokens, you will see revoke buttons. Please click and follow instructions accordingly.
Q7: Do I have to act immediately?
A: Yes, please act immediately.
Q8: What will happen if I do not revoke approvals?
A: If you do not revoke, your assets will be at risk.
Q9: I have used Multichain to bridge before, but I did not bridge these tokens. Do I need to worry?
A: No, you do not need to worry. But you better check https://app.multichain.org/#/approvals or https://app.multichain.org/#/approvals to ensure.
Q10: Is it safe to bridge as usual?
A: Yes, you can bridge as usual.
Q11: Are the assets in Multichain safe?
A: Yes, all the assets in bridge and router are safe.
Q12: What’s the affected bridge?
A: The 6 affected tokens (WETH, PERI, OMT, WBNB, MATIC, AVAX) have been delisted. All the other tokens can be bridged as usual.
If you have any questions, please reach out to us here:
Twitter: https://twitter.com/MultichainOrg
Email: contact@multichain.org
