Skip to main content
Sign in

Parity Multisig

avoid.net/parity-multisig5/100·95% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3b3D6X…sA6p

Summary

Parity Multisig was a multi-signature wallet implementation developed by Parity Technologies, founded by Ethereum co-founder Gavin Wood. The software suffered two catastrophic security failures in 2017: a July hack in which 153,037 ETH (approximately $30–32 million at the time) was stolen from three Ethereum project wallets via an unguarded initialization function, and a November incident in which GitHub user devops199 accidentally triggered a self-destruct on the shared library contract, permanently freezing 513,774 ETH (approximately $150–280 million at the time) across 587 wallets. The frozen funds have never been recovered, and the July 2017 attacker resumed laundering stolen ETH through the exchange eXch in May 2024 after seven years of inactivity.

Connected Entities

1 entities
Organizations
Parity Multisig
Relationships
    Have evidence about Parity Multisig?

    Timeline(10 events)

    19 July 2017

    Attacker exploits unguarded initWallet() function in Parity Multisig WalletLibrary, stealing 153,037 ETH (~$30-32M) from Aeternity, Swarm City, and Edgeless

    19 July 2017

    White Hat Group uses the same exploit to drain and rescue approximately 377,000 ETH from other vulnerable Parity wallets before additional theft occurs

    20 July 2017

    Parity Technologies deploys replacement WalletLibrary contract without initializing it, inadvertently leaving a new critical vulnerability

    August 2017

    GitHub issue filed recommending auto-initialization of the library contract; Parity classifies it as a convenience enhancement and does not implement the fix

    6 November 2017

    GitHub user devops199 calls initWallet() on the uninitialized library contract, becomes its owner, then calls kill(), permanently destroying it and freezing 513,774 ETH across 587 wallets

    8 November 2017

    Parity Technologies publicly announces the library self-destruct incident and begins postmortem analysis

    15 November 2017

    Parity publishes postmortem on the library self-destruct incident, acknowledging the prior known-but-unaddressed vulnerability

    April 2018

    Parity submits EIP-999 to the Ethereum community, proposing a protocol-level state change to restore the destroyed library contract and unfreeze 513,774 ETH (now worth ~$280-330M)

    30 April 2018

    Community coin-vote on EIP-999 concludes with approximately 55% voting against; proposal is rejected and frozen funds remain inaccessible

    13 May 2024

    July 2017 Parity hacker resumes on-chain activity after seven years of inactivity, transferring ~3,050 ETH (~$9M) to exchange eXch using multiple intermediate addresses

    Provenance & Audit Trail

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 25 cited source URLs have an Internet Archive snapshot.

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:55:01 AM

    last updated: 8/29/2026, 8:45:07 PM

    avoid.net — verified advice for a post-truth world