Scam Alert: Multisig Exploit Hits Unleash Protocol
Unleash Protocol has confirmed unauthorized activity affecting its multisig-controlled contracts, resulting in the withdrawal and transfer of user funds. The team flagged the incident to the community and investigators on Dec. 30, 2025, and preliminary on-chain tracing by CertiK Alert shows the stolen ETH was routed into Tornado Cash, a privacy mixer, after the breach.
The use of a mixer complicates recovery and increases the challenge for law enforcement and victims seeking restitution, though chain analysis can still help identify downstream flows and exit points. Users and counterparties should monitor official Unleash communications, avoid interacting with suspicious addresses, and preserve any transaction data for investigators. Further technical forensics and an incident update are expected as teams continue tracing and assessing the exploit’s scope.