Doppler Doppler 555 54110 71 30305 80 162991 23447 162 30083
14285 67025 154 35042 128 605348
179333 600976 8440
Crosshair Crosshair

Phantom Functions and the Billion-Dollar No-Op

We disclosed a major vulnerability to the Multichain project (formerly "AnySwap"). The threat was one of the largest, if not the largest, in crypto history, and the attack vector is novel. It turns out that some ERC20 tokens, most notably WETH, that has a permissive fallback function will allow arbitrary function calls to succeed. The reasons for this are complex, but have to do with low-level EVM semantics, the Ethereum ABI standard, and the way the Solidity compiler works. The article describes how an attacker could steal > $1B worth of WETH from Multichain and Fantom, after responsibly disclosing this issue to the Multichain team.

Read more
(in Chinese)