{"id":86576,"date":"2023-11-03T16:09:18","date_gmt":"2023-11-03T14:09:18","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=86576"},"modified":"2025-09-13T06:27:11","modified_gmt":"2025-09-13T03:27:11","slug":"unknown-trader-nets-1m-in-arbitrage-after-multichain-restart","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/unknown-trader-nets-1m-in-arbitrage-after-multichain-restart\/","title":{"rendered":"Unknown trader nets $1m in arbitrage after Multichain restart"},"content":{"rendered":"<p>The <a href=\"https:\/\/forklog.com\/en\/news\/what-are-cross-chain-bridges\">cross-chain protocol<\/a> Multichain, which halted operations in July, restarted in early November, allowing one of its users to profit from arbitrage of $1 million. DL News reports.<\/p>\n<p>The <a href=\"https:\/\/forklog.com\/en\/news\/cross-chain-protocol-multichain-halts-operations\">July shutdown<\/a>, the team explained, was due to the arrest by Chinese authorities of CEO Zhao Jun, which led to a loss of access to the wallet. The project&#8217;s problems <a href=\"https:\/\/forklog.com\/en\/news\/multichain-token-plunges-28-amid-network-glitches\">began as early as May<\/a>, and user funds were subsequently <a href=\"https:\/\/forklog.com\/en\/news\/multichain-suspends-operations-amid-possible-hack\">began to be transferred<\/a> to unknown addresses.<\/p>\n<p>On 1 November the protocol briefly resumed processing transactions on the <a href=\"https:\/\/forklog.com\/en\/news\/what-is-fantom-ftm\">Fantom<\/a> blockchain. At around 9:40 <span data-descr=\"Coordinated Universal Time\" class=\"old_tooltip\">UTC<\/span> an unknown individual successfully withdrew WBTC worth about $1 million to the Ethereum network. It was the first operation through Multichain in 117 days.<\/p>\n<p>Subsequently the user made transfers in WETH and USDT. Finding that the bridge was functioning, dozens of other traders began using it with small amounts.<\/p>\n<p>After about two hours of activity, Multichain stopped again.<\/p>\n<p>Experts say the timing of the unknown&#8217;s operations raises questions about his actions in concert with those who restarted the protocol.<\/p>\n<p>At 9:23 UTC, this user received 1.2 million Fantom (FTM) tokens from Binance worth about $280,000. <\/p>\n<p>Then he swapped 500,000 FTM for <a href=\"https:\/\/forklog.com\/en\/news\/what-is-a-wrapped-token\">\u201cwrapped\u201d<\/a> Bitcoin via the DEX Spookyswap on the Fantom blockchain. After the restart, the assets were immediately transferred to Ethereum.<\/p>\n<p>The same method was used by the unknown actor for swaps of FTM to WETH and USDT, but with withdrawals to the BNB Chain.<\/p>\n<p>About ten minutes after his last transaction, the bridge stopped working again.<\/p>\n<p>Experts note that the user effectively capitalised on price discrepancies. For example, WETH before Multichain&#8217;s restart traded on Fantom at around $7,000 \u2014 about 80% below current spot quotes. WETH and USDT were in similar positions. Starting with $280,000, he finished with assets worth over $1 million, which he sent back to Binance.<\/p>\n<p>Cyvers Alerts specialists noted that after the protocol suspended operations a queue of pending transactions remained. It is presumed the arbitrager&#8217;s transactions were given priority because the earlier ones stayed in the queue.<\/p>\n<blockquote class=\"twitter-tweet\" data-conversation=\"none\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">Just to clarify, we didn&#8217;t claim that the stuck transactions have been processed, but rather we were referring to transactions from the last day!<\/p>\n<p>\u2014 ? Cyvers Alerts ? (@CyversAlerts) <a href=\"https:\/\/twitter.com\/CyversAlerts\/status\/1720085545630744985?ref_src=twsrc%5Etfw\">November 2, 2023<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Commentators also noted the lack of any notification about the Multichain restart. The last post on the project&#8217;s previously active X account was dated October 6.<\/p>\n<p>DL News researchers noted that, according to BlockSec CEO Yajin Zhou, the allegedly arrested head of Multichain is the only one who could have restarted the bridge.<\/p>\n<p>According to <a href=\"https:\/\/defillama.com\/protocol\/multichain\">DeFi Llama<\/a>, the protocol still stores user deposits totaling about $120 million.<\/p>\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/lh7-eu.googleusercontent.com\/k8InMLe8AHrF6iLOVJXdevoIHeBMnxPiOX2lx9BOhPrgYjzknj3H29f855bSu6k9AWQ8PzZJxO91wsGyyL0vkGi9JQlWNzwZUfzBErjN4mcOWjj__oS01GR1MCAQBGiNZD_K9_xH09YPFq1e0yU50Yc\" alt=\"Unknown user earned $1m in the unexpected Multichain restart\"\/><figcaption class=\"wp-element-caption\">Data: DeFi Llama.<\/figcaption><\/figure>\n<p>In October, losses from hacks and fraud in the crypto industry fell to $51.61 million \u2014 85% below the level a month earlier, according to Beosin.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Multichain, the cross-chain protocol that shut down in July, restarted in early November, enabling one user to profit from arbitrage of $1 million. DL News reports.<\/p>\n","protected":false},"author":1,"featured_media":86577,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1210,2277],"class_list":["post-86576","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cross-chain-protocols","tag-multichain"],"aioseo_notices":[],"amp_enabled":true,"views":"17","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/86576","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=86576"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/86576\/revisions"}],"predecessor-version":[{"id":86578,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/86576\/revisions\/86578"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/86577"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=86576"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=86576"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=86576"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}