Transit Finance Hacker to Return Remainder of Stolen Tokens
- The biggest hacker involved in Transit Finance’s exploit last week has agreed to return the remaining funds, and will keep 2,500 BNB tokens as bounty.
- The platform has also warned three other individuals involved in the incident that if the stolen funds are not returned by 12 October it will take legal actions.
Shutterstock
The hacker responsible for the attack on Transit Finance earlier this month has agreed to return the remainder of the stolen funds, the DEX aggregator said in an update on 10 October.
According to the announcement, the biggest hacker from the incident — dubbed “white hat #1” — has agreed to return 6,500 BNB to affected users by the end of the day, and another 3,500 BNB once Transit Finance initiates the second phase of refunds. Blockchain data shows the individual — who will keep 2,500 BNB tokens as bounty for his efforts — has already completed the first transaction. Transit Finance wrote in a blog post:
“TransitFinance Official expresses its gratitude to white hat #1 for the refund and promises that if white hat #1 returns the remaining 3500BNB as agreed, TransitFinance Official will no longer hold him any legal responsibility.”
On 1 October, the DEX aggregator lost around $28.9 million in tokens after hackers exploited an internal bug in its swap contracts. Less than 24 hours after the attack, “white hat #1” — who alone was responsible for $24.1 million of the missing funds — had returned 70% of the assets in his possession.
The platform has also called on three more individuals involved in the exploit to get in touch with officials as soon as possible, and return their portions of the stolen funds. Transit Finance warned that after 12 October the judicial process will be “officially launched” for those who have failed to refund the stolen assets.
- Popular Telegram bot Unibot, which is used to snipe trades on Uniswap, became a victim of a token approval exploit earlier today, when it was switching to a new router.
- After confirming the exploit, Unibot assured users that their keys and wallets were safe, and that the project will compensate all affected users.
Shutterstock
- DeFi protocol Balancer confirmed it was exploited almost a week after disclosing a critical vulnerability affecting several of its boosted pools.
- The platform did its best to mitigate some of the risks but was unable to pause the affected pools, and an estimated $980,000 in DAI were stolen in an attack.
- DeFi yield aggregator Zunami Protocol confirmed that a hacker had attacked its “zStables” pools on Curve Finance using a price manipulation exploit.
- Security firm PeckShield has estimated that over $2.1 million was lost during the attack, while SlowMist said it had informed Zunami of the vulnerability two months ago.