🚨 Crypto Capers: Unleash Protocol’s Multisig Misadventure! 🚨

by

What ho, old sport! It appears the chaps over at Unleash Protocol have found themselves in a bit of a pickle, what? 🥒 Unauthorized shenanigans involving their smart contracts have led to a spot of bother, with user funds taking a jolly old stroll out the door. CertiK Alert, those eagle-eyed sleuths, have spotted deposits of Ethereum waltzing into Tornado Cash, following this rather unfortunate exploit. 🕵️♂️

Unleash Protocol’s Multisig Malarkey

CertiK Alert, in a jolly tweet on X, revealed that a cool 1,337.1 ETH (roughly $3.9 million, give or take a penny) has been spirited away into Tornado Cash. The scallywags behind this caper used the wallet address 0xc946981F5dFBFA10cf858B95d51Fc06DCD15BfE3. Blighter! 😠

These funds, it seems, trace back to some rather suspicious withdrawals of Wrapped ETH and Story tokens from a multisig that may have been compromised. Tsk, tsk. One can’t be too careful in this digital age, what?

This news comes hot on the heels of Unleash Protocol’s announcement that they’re investigating an exploit that’s left their users’ funds in a bit of a tizzy. 🙃

#CertiKInsight 🚨

We have detected deposits of 1337.1 ETH (~$3.9M) into Tornado Cash from 0xc946981F5dFBFA10cf858B95d51Fc06DCD15BfE3.

The fund traces to suspicious withdrawals of Wrapped ETH and Story tokens from a multisig that may have been compromised.…

– CertiK Alert (@CertiKAlert) December 30, 2025

The Unleash Protocol team, bless their cotton socks, have stated that an externally owned address managed to wangle administrative control via their multisig governance. After this, the scoundrels performed an unauthorized contract upgrade, allowing them to make off with assets like WIP, USDC, WETH, stIP, and vIP. What a to-do! 😱

These assets were then bridged using third-party infrastructure before being sent to external addresses. Dash it all, what a kerfuffle!

How Unleash is Sorting Out This Mess

In their announcement, the Unleash Protocol team assured everyone that there’s no evidence of compromise to Story Protocol contracts, validators, or underlying infrastructure. Phew! That’s a silver lining, at least. 🌦️

They’ve suspended all operations to prevent further risk and are working hand-in-hand with independent security experts and forensic investigators to get to the bottom of this. Jolly good show! 👏

Users are advised to steer clear of Unleash Protocol contracts and to keep an ear out for official updates. No point in adding fuel to the fire, what?

This exploit is just the latest in a string of crypto capers. As reported by U.Today, a poor soul recently lost 50 million USDT to an address spoofing scam. And let’s not forget the chaps who exploited a security flaw in XWiki and DELMIA Apriso to mine Monero without permission. Blimey! 😲

In another recent scheme, some ne’er-do-wells made off with $773,000 worth of crypto from the DeFi project Hyperdrive. What a world we live in, eh? 🌍

Read More

2025-12-30 15:16