Multichain: Arrested founder and family held all the keys

‘All the team’s funds and access to the servers are with Zhaojun and the police,’ the Multichain team said

article-image

Iaremenko Sergii/Shutterstock.com modified by Blockworks

share

Multichain revealed on Friday that CEO Zhaojun and his sister were responsible for the unauthorized withdrawals of over $130 million last week.

The team disclosed that Zhaojun had been detained by Chinese police on May 21 and had been unresponsive ever since.

Its protocol has a multi-party computation (MPC) system, similar to a multi-signature wallet. Multichain said these MPC node servers were operated under Zhaojun’s personal cloud server, meaning access was limited to him alone.

Moreover, authorities confiscated all of his devices, including computers, phones, hardware wallets and recovery phrases.

“This also means that all the team’s funds and access to the servers are with Zhaojun and the police,” they said.

Loading Tweet..

Following Zhaojun’s arrest, his family is believed to have accessed the cloud server platform using information from his home computer. 

However, they granted limited access to Multichain’s team engineers solely for the purpose of addressing specific router-related technical issues, they said.

IP address linked to fund transfers originating from Chinese city Kunming

In the aftermath of the unauthorized transfers on July 7, Zhaojun’s sister discovered login details originating from an IP address in Kunming, a city located in China’s Yunnan province. She also came across a sequence of transactions involving the transfer of funds from the MPC addresses.

After the withdrawals, she moved the remaining user assets to externally owned addresses and notified the team. Subsequently, she too was detained by law enforcement authorities, according to the Multichain team.

Multichain shuts down services, looks to take down website

The team said it has faced challenges in maintaining operations due to limited access on non-MPC servers and legal advice to cooperate with the demands of Zhaojun’s family.

With a lack of alternative sources of information and the inability to bring down their website, Multichain said it has been forced to shut down operations. It has asked domain registrar GoDaddy to help bring the website down.

The exploit affected multiple tokens, including wrapped bitcoin, USDC, DAI, and LINK.

Chainalysis suspected that the exploit may have been an inside job, which appears prima facie correct, although the extenuating circumstances remain unknown. 

Multichain’s native token MULTI has plunged over 40% since news of its difficulties emerged.
Zhaojun’s arrest in May coincided with the reported detention of Trust Reserve staff, a yuan-backed stablecoin issuer. Trust Reserve’s offices were found empty with a notice of judicial seizure.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Nillion_DeSci_Report_Template.png

Research

Nillion’s Monad Integration is poised to catalyze the next phase of DeSci’s evolution by eliminating key privacy bottlenecks. This synergy allows researchers, institutions, and DAOs to exchange sensitive data and insights securely while managing governance and payments onchain.

article-image

Celebrating the wisdom of a diamond-handed Bitcoin Legend

article-image

With the success of RWAs and stablecoins, DePINs could onboard the next wave of crypto users

article-image

Is crypto straying too far from things of value?

article-image

Firedancer and Solana ETFs look less significant than before

article-image

The newly passed House bill amplifies that strategic pivot for the Trump administration, from attempting austerity to running the economy hot

article-image

Unable to secure further funding, the game cycled through three different blockchains and at least five different game engines since 2018