Attacker Behind $14.5M Team Finance Exploit Returns $7M
On-chain data shows that four projects affected in the attack received the stolen tokens over the weekend.
:format(jpg)/cloudfront-us-east-1.images.arcpublishing.com/coindesk/L5GSAIQKFNAIVCVVKEMRGTEXJM.jpg)
The attacker behind last week’s $14 million exploit of crypto launchpad Team Finance has returned some $7 million worth of stolen tokens. (Kevin Ku/Unsplash)
/arc-photo-coindesk/arc2-prod/public/LXF2COBSKBCNHNRE3WTK2BZ7GE.png)
The attacker behind last week’s $14.5 million exploit of crypto launchpad Team Finance has returned some $7 million worth of tokens to four projects over the weekend, data shows.
Team Finance suffered a $14.5 million exploit in relation to a smart contract bug in its migration feature, as reported.
Blockchain security firm SlowMist said in a tweet on Monday that the attacker termed themselves as a “whitehat” on messages stamped on transactions. A whitehat is an exploiter or hacker that attacks any software with an intention of making that service better or more secure, as opposed to for nefarious purposes.
Over $765,000 worth of stablecoin DAI and 11.8 million TSUKA tokens were returned to blockchain protocol Tsuka, which confirmed the receipt. Non-fungible token (NFT) marketplace Kondux received 209 ether (ETH), or 95% of the stolen funds, while Feg Token received 548 ether.
Caw Coin, which took the biggest hit during the exploit, received over $5 million worth of DAI and 74.6 billion CAW, its native tokens.
The attacker confirmed the deposit addresses of all affected projects in several blockchain messages, viewable here. The messages were generally incoherent, but the attacker said they would keep 10% of the stolen funds as a bounty.
Disclosure
Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.
The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is an award-winning media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. In November 2023, CoinDesk was acquired by Bullish, a cryptocurrency exchange, which in turn is owned by Block.one, a firm with interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets including bitcoin and EOS. CoinDesk operates as an independent subsidiary, and an editorial committee, chaired by a former editor-in-chief of The Wall Street Journal, is being formed to support journalistic integrity.
Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.