A hacker concerned within the $4.67 million exploit of the decentralized finance lending protocol Voltage Finance in 2022 has moved a few of the stolen Ether to Twister Money after a brief hibernation.
Blockchain safety agency CertiK said in a Could 6 put up to X that the 100 Ether (ETH), price $182,783 at present costs, was moved from a distinct tackle initially used within the exploit however could be traced again to the hacker.
In March 2022, the exploiter took benefit of a “built-in callback perform” within the ERC677 token commonplace and allowed them to empty the platform’s lending pool by a reentrancy attack, in accordance with CertiK.
After the exploit, Voltage Finance reported that the hacker stole numerous stablecoins and different crypto, together with USDC (USDC), Binance USD (BUSD), wrapped Bitcoin (WBTC), and Ethereum tokens.
The tackle utilized by the hacker to get the funds to Tornado Cash had been dormant since November, with the final transaction occurring 166 days in the past, Etherscan knowledge shows.
In a postmortem of the 2022 exploit, Voltage Finance said the attacker’s tackle was flagged on Etherscan, and exchanges had been requested to dam any transactions. Makes an attempt have been additionally made to contact the attacker and negotiate a bounty to return the funds.
Voltage Finance staking swimming pools hit in March exploit
Voltage Finance was hit once more by one other exploit on March 18, when its Easy Staking swimming pools have been compromised, the protocol said in a press release posted to X. In whole, $322,000 was stolen.
In its March 20 postmortem, Voltage Finance said it provided the attacker a bounty of $50,000 to return the funds and had presumably recognized a developer who labored on the Easy Staking swimming pools, who might have been concerned.
“Whereas we haven’t confirmed if he’s the hacker, as a precaution, we revoked his entry instantly and filed police stories to collaborate with legislation enforcement and centralized exchanges,” it stated.
Associated: Crypto hackers hit DeFi for $92M in April as attacks double from March
Total crypto losses spiked by 1,163% in April, with the lion’s share coming from a single heist of an elderly US individual’s wallet, after a hacker used superior social engineering ways to steal 3,520 Bitcoin (BTC), price $330.7 million.
Excluding that assault, April’s crypto losses have been $34 million, a 21% bounce from March.
Nevertheless, the month additionally noticed over $18 million returned when the hacker behind the $7.5 million exploit of decentralized trade KiloEx returned all the stolen funds solely 4 days after the assault.
The ZKsync Affiliation additionally recovered $5 million worth of stolen tokens from an April 15 safety incident involving its airdrop distribution contract.
Journal: Financial nihilism in crypto is over — It’s time to dream big again