ChainBleedv0.1 · open intel
← back to feed·SOCIAL-ENGINEERING2023-08-10 · 2y ago
Incident · SLOWMIST

MPC Wallets

BitForge Vulnerability
Estimated loss
VERDICT —OUT OF SCOPE
Root cause is social engineering — privileged personnel deceived into authorizing the drain. Contract behaved as written. Defense lives in process controls (multi-party approval, M-of-N signoff windows), not in smart-contract review.
▰ METHOD
SOCIAL ENGINEERING
SOCIAL-ENGINEERING
Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

Crypto infrastructure company Fireblocks has disclosed a series of vulnerabilities (collectively referred to as "BitForge") affecting various popular crypto wallets that use multi-party computation (MPC) technology, CoinDesk reported. The company classified BitForge as a "zero-day" vulnerability, and Coinbase, ZenGo, and Binance — the three companies most affected by BitForge — have already worked with Fireblocks to fix the underlying vulnerability. "If not remediated, the vulnerabilities would allow attackers and malicious insiders to siphon funds from the wallets of millions of retail and institutional customers in seconds, without the knowledge of users or providers", Fireblocks said. Attack method (per SlowMist): BitForge Vulnerability. Reported loss: -.

Primary source
https://www.coindesk.com/tech/2023/08/09/fireblocks-discloses-zero-day-vulnerabilities-impacting-leading-mpc-wallets/
Sourced from
slowmist
Technical record
chain
protocol
MPC Wallets
bug_class
social-engineering
date_occurred
2023-08-10
loss_usd
source_id
sm:mpc-wallets::2023-08-10
Related — same bug class· social-engineering
2026-05-11
1mo ago
SOL
Roaring Kitty X Account → $RKC memecoin pump-dump
X account takeover → coordinated memecoin pump-and-dump on Pump.fun
social-engineering
$2.86M
OUT OF SCOPE
2026-04-01
2mo ago
SOL
Drift Protocol
DPRK-linked Privileged-Access Drain
social-engineering
$286.00M
OUT OF SCOPE
2026-02-23
3mo ago
WLFI
Social Engineering
social-engineering
OUT OF SCOPE
2025-09-01
9mo ago
BSC
OlaXBT
Multisig wallet Social Engineering Exploit
social-engineering
$2.00M
OUT OF SCOPE
2025-07-24
10mo ago
MULTI
WOO X
Social Engineering
social-engineering
$14.00M
OUT OF SCOPE
2025-04-27
1y ago
QuantMaster
Insider Manipulation
social-engineering
$100.0K
OUT OF SCOPE
ChainBleed — live web3 threat intelligence