Unleash Protocol multisig hijack

Unauthorized governance upgrade drained $3.9M in Unleash assets after attackers seized multisig control.

Unleash Protocol multisig hijack: $3.9M drained fast

Jan 6, 2026

—

by

Peter Chofield

in Cyber News & Updates

Attackers seized Unleash Protocol multisig control, pushed an unauthorized upgrade, drained $3.9M in WIP, USDC, and WETH, and laundered funds via Tornado Cash—here’s how to harden governance.