Hunt for Curve Finance Attacker: Recovery Efforts, Bounty, and Stolen Assets Revealed

2023-08-08 14:06:55

Since July 30, the hunt has been on for the attacker of Curve, who took advantage of a bug in the Vyper programming language to loot tens of millions of dollars from the CRV-ETH pool, one of the largest DeFi pairs. DeFi bot developers and other projects also took part in the adventurous “chasing” of the attackers, most of the damage has already been recovered, but 19.7 million dollars are still with the hackers. As we wrote on our website, Curve Finance was hit by a serious attack on July 30, but right following the attack, a MEV bot (automated trading robot connected to the blockchain) with the username c0ffeebabe.eth managed to recover 3,000 ETH coins. Alchemix Finance, JPEGd, and Metronome were also involved in the attack (all three companies are moderately well-known DeFi protocols), but thanks to their coordinated efforts, $48.1 million in damage has now been recovered. In such cases, it is common for hacked projects to be willing to forego full accountability and recovery of all assets if the attackers return a significant portion of the stolen assets (90% in this case). All DeFi protocols involved have used this method, with mixed results. Curve’s ultimatum has passed, so the new offer is for bounty hunters: $1.85 million worth of crypto will be awarded to anyone with actionable information on the identity of the hacker(s). From now on, Curve will only waive the need to hold the attacker accountable if the attacker compensates the full amount of the damage. The deadline for the CRV/ETH exploiter passes pic.twitter.com/x8LP9Tx4rs — Curve Finance (@CurveFinance) August 6, 2023 Alchemix Finance attacker transferred 7258 ETH and 4821 Alchemix ETH (alETH) worth $22 million . Ethical hackers have recovered another $13 million worth of crypto, and Alchemix’s official Twitter account has reported that all damage has been recovered. JPEGd 5495.4 Wrapped Ethert (WETH) – approx. $11.5 million – received back from the attacker, who kept his 10% “pain fee.” The Metronome Curve attacker returned 886.55 ETH, which is worth approx. 1.6 million dollars.


1691505720
#Curves #hunt #hacker #continues #million #dollars #recovered

Leave a Replay