Unleash Protocol Halts Operations After Unauthorized Smart Contract Upgrade

The $3.9M theft involving WIP, USDC, WETH, stIP, and vIP followed a malicious upgrade, prompting cross-chain asset transfers and a full operational pause during audits.

USDC
WETH
IP

Summary

Unleash Protocol reported a $3.9 million loss after an unauthorized smart contract upgrade allowed the theft of WIP, USDC, WETH, stIP, and vIP tokens. The stolen assets were transferred cross-chain to external addresses. Protocol operations have been paused while investigations and audits proceed. Story Protocol, the broader network on which Unleash operates, remains unaffected by the incident.

Terms & Concepts
  • Smart Contract: Self-executing blockchain code that automatically enforces agreed terms without intermediaries.
  • Multi-sign Governance: A security mechanism requiring multiple authenticated signatures to authorize changes or actions within a blockchain protocol.
  • USDC: A U.S. dollar-pegged stablecoin used for digital payments and transactions.