A hacker concerned within the $4.67 million exploit of the decentralized finance lending protocol Voltage Finance in 2022 has moved a number of the stolen Ether to Twister Money after a brief hibernation.
Blockchain safety agency CertiK said in a Might 6 put up to X that the 100 Ether (ETH), value $182,783 at present costs, was moved from a distinct handle initially used within the exploit however might be traced again to the hacker.
In March 2022, the exploiter took benefit of a “built-in callback operate” within the ERC677 token commonplace and allowed them to empty the platform’s lending pool by means of a reentrancy attack, based on CertiK.
After the exploit, Voltage Finance reported that the hacker stole varied stablecoins and different crypto, together with USDC (USDC), Binance USD (BUSD), wrapped Bitcoin (WBTC), and Ethereum tokens.
The handle utilized by the hacker to get the funds to Tornado Cash had been dormant since November, with the final transaction occurring 166 days in the past, Etherscan information shows.
In a postmortem of the 2022 exploit, Voltage Finance said the attacker’s handle was flagged on Etherscan, and exchanges had been requested to dam any transactions. Makes an attempt have been additionally made to contact the attacker and negotiate a bounty to return the funds.
Voltage Finance staking swimming pools hit in March exploit
Voltage Finance was hit once more by one other exploit on March 18, when its Easy Staking swimming pools have been compromised, the protocol said in a press release posted to X. In whole, $322,000 was stolen.
In its March 20 postmortem, Voltage Finance said it provided the attacker a bounty of $50,000 to return the funds and had probably recognized a developer who labored on the Easy Staking swimming pools, who could have been concerned.
“Whereas we haven’t confirmed if he’s the hacker, as a precaution, we revoked his entry instantly and filed police reviews to collaborate with legislation enforcement and centralized exchanges,” it stated.
Associated: Crypto hackers hit DeFi for $92M in April as attacks double from March
Total crypto losses spiked by 1,163% in April, with the lion’s share coming from a single heist of an elderly US individual’s wallet, after a hacker used superior social engineering techniques to steal 3,520 Bitcoin (BTC), value $330.7 million.
Excluding that assault, April’s crypto losses have been $34 million, a 21% soar from March.
Nonetheless, the month additionally noticed over $18 million returned when the hacker behind the $7.5 million exploit of decentralized alternate KiloEx returned all the stolen funds solely 4 days after the assault.
The ZKsync Affiliation additionally recovered $5 million worth of stolen tokens from an April 15 safety incident involving its airdrop distribution contract.
Journal: Financial nihilism in crypto is over — It’s time to dream big again