Parity Multisig
Summary
Parity Multisig was a multi-signature wallet implementation developed by Parity Technologies, founded by Ethereum co-founder Gavin Wood. The software suffered two catastrophic security failures in 2017: a July hack in which 153,037 ETH (approximately $30–32 million at the time) was stolen from three Ethereum project wallets via an unguarded initialization function, and a November incident in which GitHub user devops199 accidentally triggered a self-destruct on the shared library contract, permanently freezing 513,774 ETH (approximately $150–280 million at the time) across 587 wallets. The frozen funds have never been recovered, and the July 2017 attacker resumed laundering stolen ETH through the exchange eXch in May 2024 after seven years of inactivity.
Connected Entities
1 entitiesTimeline(10 events)
2017-07-19
Attacker exploits unguarded initWallet() function in Parity Multisig WalletLibrary, stealing 153,037 ETH (~$30-32M) from Aeternity, Swarm City, and Edgeless
2017-07-19
White Hat Group uses the same exploit to drain and rescue approximately 377,000 ETH from other vulnerable Parity wallets before additional theft occurs
2017-07-20
Parity Technologies deploys replacement WalletLibrary contract without initializing it, inadvertently leaving a new critical vulnerability
2017-08-01
GitHub issue filed recommending auto-initialization of the library contract; Parity classifies it as a convenience enhancement and does not implement the fix
2017-11-06
GitHub user devops199 calls initWallet() on the uninitialized library contract, becomes its owner, then calls kill(), permanently destroying it and freezing 513,774 ETH across 587 wallets
2017-11-08
Parity Technologies publicly announces the library self-destruct incident and begins postmortem analysis
2017-11-15
Parity publishes postmortem on the library self-destruct incident, acknowledging the prior known-but-unaddressed vulnerability
2018-04-01
Parity submits EIP-999 to the Ethereum community, proposing a protocol-level state change to restore the destroyed library contract and unfreeze 513,774 ETH (now worth ~$280-330M)
2018-04-30
Community coin-vote on EIP-999 concludes with approximately 55% voting against; proposal is rejected and frozen funds remain inaccessible
2024-05-13
July 2017 Parity hacker resumes on-chain activity after seven years of inactivity, transferring ~3,050 ETH (~$9M) to exchange eXch using multiple intermediate addresses
Decision Log
- hash: 91AVB8AmsUnvnAiuM1zyvY71o3PHxN4q6arQnxXycFB
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:55:01 AM
last updated: 5/25/2026, 6:20:05 PM
avoid.net — verified advice for a post-truth world