Decentralized finance (DeFi) protocol Harvest Finance has upped its bounty from $100,000 to $1 million for information leading to the return of $24 million in siphoned funds taken in an exploit Monday.
A $50 million flash loan from Uniswap was used Monday on Harvest Finance to sway the price of USDC and USDT pools. Harvest Finance’s pricing feeds – based on Curve Finances stablecoin pools in this case – were manipulated by the flash loan leading to traders suffering large amounts of “impermanent loss” (where token prices change momentarily against investors).
The Harvest Finance team implied it knew the identity of the attacker who is “well-known in the crypto community” and who left “a significant amount of personally identifiable information,” according to the project’s Discord.
Harvest Finance did not return questions for comment.
The anonymous developer team is currently administering returning $2.5 million in stablecoins given back to the developer contract. The team is also weighing releasing an IOU reserve pool that extracts value from the protocol to reimburse haircut traders, according to announcements in the project’s Discord channel.