Multicall Phishing: Bundled Malicious Calls in a Single Signature

Definition

Multicall phishing is a sophisticated cyberattack where fraudsters exploit legitimate blockchain functions designed to bundle multiple operations into a single transaction. By embedding malicious calls, such as unauthorized token transfers or approvals, within a seemingly benign series of actions, attackers trick users into signing a single transaction that secretly grants access to or directly steals their digital assets.

At its core, multicall phishing leverages the efficiency feature of certain smart contracts, particularly prevalent in decentralized finance (DeFi), which allows users to execute several distinct contract interactions in one atomic transaction. While this functionality is intended to save gas fees and streamline complex operations, it simultaneously creates an opportunity for malicious actors to obscure their true intentions. The user interface of most wallets typically displays a summary of the transaction, which may not fully decode or highlight all individual calls within a bundled multicall, making it challenging for an average user to identify the hidden malicious component.

Key Takeaway

The fundamental danger of multicall phishing lies in the obfuscation of malicious intent within a legitimate, complex transaction structure. Users are often presented with a single signature request that, on the surface, appears to interact with a trusted protocol or perform a routine operation. However, deep within this bundled transaction, an attacker has embedded one or more calls designed to drain funds, approve unlimited token spending, or compromise wallet access. Therefore, users must scrutinize every component of a transaction, even if it appears to originate from a reputable and familiar decentralized application (dApp) or smart contract.

Mechanics

The multicall function is a standard feature in many advanced smart contracts, notably in protocols like Uniswap V3. Its primary purpose is to enhance user experience and reduce transaction costs by allowing a series of operations – such as swapping multiple tokens, adding liquidity, or claiming rewards – to be executed sequentially within a single blockchain transaction. Instead of signing and paying for each operation individually, users can bundle them into one efficient call.

Attackers exploit this legitimate mechanism by crafting a malicious multicall transaction. They typically begin by including several seemingly innocuous or even beneficial calls that might align with a user's expected interaction with a dApp. For instance, a multicall might include a small token approval or a query to a known contract. Crucially, nestled among these benign operations, the attacker embeds one or more highly destructive calls. A common tactic involves the transferFrom function, which, if approved, allows a third party to transfer tokens from the user's wallet. The attacker specifies their own wallet as the recipient and targets a valuable token held by the victim. Alternatively, they might include an approve call that grants unlimited spending permission for a high-value token to an attacker-controlled address. When the user signs this single, bundled transaction, they unknowingly authorize all embedded calls, including the malicious ones. The complexity of the raw transaction data, often displayed as a hexadecimal string or a partially decoded summary in wallet interfaces, makes it exceedingly difficult for users to discern the hidden malicious intent, especially when the primary contract address (e.g., Uniswap V3 Multicall2) appears legitimate.

Trading Relevance

Multicall phishing poses a significant threat to participants in the cryptocurrency trading ecosystem, particularly those active in decentralized finance (DeFi). Traders frequently interact with various smart contracts on decentralized exchanges (DEXs), lending platforms, and yield aggregators, often requiring multiple approvals and swaps. The very nature of DeFi trading, which prioritizes efficiency and low transaction costs, makes the multicall function attractive and widely adopted. This widespread use, however, creates a fertile ground for sophisticated phishing attacks.

For a trader, losing access to funds or having assets stolen due to a single compromised signature can be catastrophic, leading to immediate and irreversible capital loss. The efficiency benefits of multicall become a double-edged sword; while it saves gas and streamlines complex trading strategies, it simultaneously increases the cognitive load required for transaction verification. A trader accustomed to quickly approving transactions might overlook the subtle indicators of a malicious embedded call, especially when under pressure to execute trades swiftly. The ability of attackers to mimic legitimate dApp interfaces further compounds this risk, making it difficult for even experienced traders to differentiate between a genuine transaction request and a cleverly disguised phishing attempt.

Risks

The primary and most immediate risk of multicall phishing is the direct theft of digital assets. This can include cryptocurrencies, stablecoins, and even non-fungible tokens (NFTs) held in the victim's wallet. Once a malicious multicall transaction is signed and executed, the embedded transferFrom or approve calls can instantly drain specified tokens to an attacker-controlled address, often leaving no recourse for recovery due to the irreversible nature of blockchain transactions.

Beyond direct theft, another significant risk is wallet compromise through unlimited approvals. If a malicious multicall includes an approve function that grants an attacker's address unlimited spending allowance for a particular token, the attacker can then drain that token from the victim's wallet at any time in the future, even without further interaction from the victim. This creates a persistent vulnerability that can lead to ongoing losses. The difficulty in detecting these hidden malicious calls, coupled with the psychological pressure on users to quickly approve transactions in fast-paced DeFi environments, amplifies these risks. Furthermore, the perceived legitimacy of the contract address (e.g., a known Uniswap contract) can lull users into a false sense of security, making them more susceptible to authorizing a transaction that contains hidden dangers. The irreversible nature of blockchain transactions means that once funds are transferred, recovery is exceedingly rare, underscoring the severity of this threat.

History and Examples

The evolution of crypto scams has seen a continuous shift from simple phishing links to highly sophisticated on-chain exploits. While the concept of bundling multiple operations has existed for some time, the specific exploitation of legitimate multicall functions for phishing gained prominence as DeFi protocols matured and became more complex. Early phishing attempts often relied on fake websites or malicious smart contracts that directly requested approvals for large sums. However, as users became more aware, attackers adapted their methods to leverage the very features designed for user convenience.

A notable example of this type of attack was highlighted by Check Point Research, which detailed how fraudsters abused the multicall aggregate function on the Uniswap V3 contract. Attackers would embed their malicious transferFrom calls within a seemingly legitimate Uniswap V3 multicall transaction. Victims, upon checking the contract address on block explorers like Etherscan, would see it labeled as a legitimate Uniswap contract, mistakenly assuming the entire transaction was safe. This allowed attackers to redirect the victim's specified tokens to their own wallets. This incident underscores how attackers are increasingly moving beyond simple social engineering to exploit the technical intricacies of blockchain protocols, making detection more challenging and requiring a deeper understanding of transaction structures from users.

Common Misunderstandings

One prevalent misunderstanding among crypto users is the belief that **