The Multichain Scandal: A Vanished CEO, a $125 Million Drain, and the Myth of MPC Security
Key Takeaway
In May 2023, Multichain, one of the largest cross-chain bridge protocols in the Web3 ecosystem, suddenly paralyzed the crypto world. Its CEO, Zhaojun, vanished without a trace. Shortly after, over $125 Million in user assets were drained from the protocol’s wallets in what many suspected was an inside job or a regulatory seizure. This report dissects the forensic reality that the protocol’s "decentralized" security was a facade, controlled by a single individual with access to the master keys.
TL;DR: In May 2023, Multichain, one of the largest cross-chain bridge protocols in the Web3 ecosystem, suddenly paralyzed the crypto world. Its CEO, Zhaojun, vanished without a trace. Shortly after, over $125 Million in user assets were drained from the protocol’s wallets in what many suspected was an inside job or a regulatory seizure. This report dissects the forensic reality that the protocol’s "decentralized" security was a facade, controlled by a single individual with access to the master keys.
📂 Intelligence Snapshot: Case File Reference
| Data Point | Official Record |
|---|---|
| Primary Entity | Multichain (formerly Anyswap) |
| Key Executive | Zhaojun (CEO - Arrested May 2023) |
| Total Funds Lost | ~$125,000,000 USD (Authorized/Unauthorized Drain) |
| Security Mechanism | MPC (Multi-Party Computation) - Failed |
| Location of Incident | China (Regulatory Jurisdiction) |
| Official Outcome | Protocol shutdown; remains unresolved |
the bridge's structural deception, where a marketed decentralized MPC layer was actually a centralized single point of failure under one individual's control.
The Vanishing: May 2023
The crisis began when users noticed that Multichain’s cross-chain bridges were failing. After days of silence, the Multichain team admitted they could not contact their CEO, Zhaojun.
The Chinese Arrest
It was later confirmed that Zhaojun had been taken into custody by Chinese police.
- The Shocking Admission: The Multichain team revealed that Zhaojun had been operating the protocol’s MPC (Multi-Party Computation) nodes from his own personal devices. All the "shards" (pieces of the master key) that were supposed to be distributed among different independent nodes were actually all held by Zhaojun himself.
- The Single Point of Failure: This admission shattered the core value proposition of Multichain. A protocol that held billions of dollars in user funds was essentially a "one-man show" disguised as a decentralized bridge.
The $125 Million Drain: The Custody Theft
On July 6, 2023, forensic analysts at Chainalysis and PeckShield observed massive, unusual movements of assets out of the Multichain MPC wallets.
- The 'Hack' that Wasn't: Unlike a typical exploit where a smart contract vulnerability is used, these withdrawals used the valid signature keys of the protocol.
- The Family Connection: Zhaojun’s family members, who had access to his hardware during his detention, were later accused of attempting to move the funds to "protect" them or under pressure from authorities. Zhaojun’s sister was eventually arrested in China after she moved an additional $107 million to her own wallets.
The MPC Deception: Why 'Decentralized' was a Lie
Multichain marketed its MPC technology as the gold standard of bridge security. MPC is designed so that multiple parties must agree to a transaction without any single party ever seeing the full key.
The Forensic Breakdown of the Fraud
- Centralized Key Generation: Forensic audits after the collapse suggested that Zhaojun had generated all the MPC shards himself and never actually distributed them to the node operators.
- Cloud Access: The server infrastructure for the nodes was registered in Zhaojun’s name and funded by his personal credit cards. When he was arrested, the cloud provider threatened to shut down the servers due to non-payment, which would have permanently frozen all user funds.
- Governance Theater: The "Multichain DAO" had no actual power over the funds. The governance was a "front" for a traditional, centralized company operating in a high-risk jurisdiction.
The Impact on the Ecosystem: Fantom and Beyond
Multichain was the primary bridge for the Fantom (FTM) network. When Multichain collapsed, the "wrapped" assets on Fantom (like multichain-USDC) lost their peg and became virtually worthless.
- The Liquidity Crisis: Millions of dollars in DeFi (Decentralized Finance) positions were liquidated as the bridge’s assets evaporated.
- The Warning to Bridges: The scandal forced other major bridges like LayerZero and Wormhole to undergo "Proof of Decentralization" audits to prove they weren't also "Zhaojun-style" operations.
🔍 Forensic Indicators: 'One-Man' Rug Risk & Systemic Liability
The Multichain collapse is a study in "Administrative Centralization" in Web3.
1. Lack of Multisig Transparency
A truly decentralized bridge should use a Multisig (Multi-Signature) wallet where the signers are public, known individuals or entities in different jurisdictions. Multichain’s use of "invisible" MPC nodes allowed them to hide the fact that one person held all the power.
2. Jurisdictional Risk
Operating a major crypto infrastructure project out of China—a country known for sudden regulatory crackdowns and extrajudicial arrests—is a primary forensic Red Flag. When the CEO of a "decentralized" project can be "disappeared" by a state, the project itself is at the mercy of that state.
3. Personal Control of Infrastructure
The fact that the protocol’s servers were tied to the CEO’s personal credit card is a classic indicator of a "hobbyist" setup masquerading as a professional enterprise. Forensic auditors look for this lack of "Corporate Personhood" in infrastructure management.
Frequently Asked Questions (FAQ)
What happened to the Multichain CEO?
Zhaojun was arrested by Chinese authorities in May 2023. As of late 2024, his status remains unclear, though his sister was also arrested for her role in moving the protocol's funds.
Is Multichain still working?
No. The protocol has officially shut down, and most of its bridges are inactive. Users with funds stuck in Multichain are currently part of various legal and recovery efforts.
How much money was lost?
At least $125 million was drained in the initial "unauthorized" withdrawal, with millions more affected by the loss of the "peg" for multichain-wrapped assets on networks like Fantom.
Was Multichain a rug pull?
While it started as a legitimate project, the fact that the CEO intentionally centralized all control and that funds were moved while he was in custody leads many to classify it as an "Administrative Rug Pull."
What is MPC?
Multi-Party Computation (MPC) is a cryptographic tool that allows multiple parties to compute a function (like signing a transaction) without revealing their private data. Multichain claimed to use this for security but kept all the "parties" under the control of one person.
Conclusion: The End of the 'Trust Me' Era
The Multichain scandal was a brutal lesson for the Web3 community. It proved that "Code is Law" only works if the code is actually decentralized. If the infrastructure behind the code is controlled by a single person in a single room, you are not using a blockchain—you are using a bank with no insurance. For the crypto industry, the legacy of Multichain is a move toward Transparent Infrastructure and a realization that decentralization isn't just a feature; it's a security requirement. The $125 million loss was the price of trusting a "Master Key" that was never meant to be shared.
Keywords: Multichain CEO disappearance, Zhaojun arrest Multichain, Multichain $125M hack, MPC bridge vulnerability, Multichain rug pull scandal, crypto bridge security forensic analysis.
Part of the Crypto Scandals Pillar
Every major cryptocurrency fraud, collapse, and enforcement action — documented with on-chain evidence, regulatory filings, and primary source analysis.
Explore the Full Pillar Archive →