Team Finance hacker returns $7M to associated projects after exploit

4 initiatives have acquired some $7 million price of tokens from the hacker behind the $14.5 million Workforce Finance exploit on Oct. 27. Over the weekend, the attacker confirmed in a sequence of messages that they’d hold 10% of the stolen fund as a bounty and return the opposite tokens to the affected initiatives.

The exploiter — a self-described “whitehat” — drained property from Workforce Finance via the Uniswap v2-to-v3 migration. As reported by Cointelegraph, liquidity from Uniswap v2 property on Workforce Finance have been transferred to an attacker-controlled v3 pair with skewed pricing, defined the blockchain safety agency PeckShield.

Related articles

Hector Swap: A revolutionary DeFi swap aggregator

2023-04-13

Fantom: Though DeFi-friendly measures show results, FTM remains in limbo

2023-04-11

The stolen funds included USD Coin (USDC), CAW, TSUKA and KNDA tokens. Among the affected tokens, corresponding to CAW, suffered steep worth declines because of the exploit and subsequent liquidity crunch. 

On Oct. 30, Kondux, a nonfungible token (NFT) market, introduced it acquired 95% of the stolen funds, or 209 Ether (ETH), whereas Feg Token recovered 548 ETH. Tsuka’s blockchain protocol additionally confirmed receiving over $765,000 price of the stablecoin Dai (DAI) and 11.8 million TSUKA. Caw Coin — the largest sufferer of the exploit — acquired again $5 million price of DAI and 74.6 billion of its native token, CAW.

We’re thrilled to announce now we have acquired 95% of the exploited ETH again!

Please bear with us within the coming 48 hours ⏳ as we await the $KNDX to return so we are able to plan our subsequent transfer ahead. ⏩

Huge due to the neighborhood for his or her unwavering assist $FEG $CAW $TSUKA

— Kondux (@Kondux_KNDX) October 30, 2022

On Twitter, the protocol urged the hacker to get in touch for a bounty cost. Based on Workforce Finance, its good contract had been beforehand audited, and builders had briefly halted all exercise on the protocol. The corporate was based in 2020 by TrustSwap, which gives token liquidity locking and vesting providers to mission executives. The protocol claimed to have $3 billion secured throughout 12 blockchains.

The exploit adopted the Mango Markets assault on Oct. 11, when a hacker manipulated the worth of the platform’s native token, MNGO, to attain larger costs. The attacker then took out vital loans towards the inflated collateral, draining Mango’s treasury.

After a proposal on Mango’s governance discussion board was accredited, the hacker was allowed to maintain $47 million as a “bug bounty,” whereas $67 million was despatched again to the treasury.