According to Tal Be’ery, co-founder of ZenGo, the hacker who stole 3,087 ETH ($3.8 million) from NFT lending pool XCarnival has repaid half of the cash.
Users may borrow money through XCarnival’s NFT lending pool by utilizing their collections as loan collateral. On Sunday, XCarnival had a security breach that allowed the exploiter to steal $3.8 million in Ethereum ពីប្រព័ន្ធ។
ចូលទៅកាន់ eToro ដើម្បីទិញ Ethereum ឥឡូវនេះ
ដើមទុនរបស់អ្នកប្រឈមនឹងហានិភ័យ។
The Loop Hole
According to Be’ery, the main problem was a flaw that let a hacker borrow from the same NFT asset more than once.
In order to borrow money, the hacker sent one NFT, Bored Ape #5110. The Ape ធុញទ្រាន់ used as leverage would typically be imprisoned by the procedure until the debt is repaid.
However, the hacker was able to take the Bored Ape leverage out without paying back the loan and use it to obtain a new loan. This operation was repeatedly carried out, depleting the protocol’s 3,087 ETH.
Merciful Hacker Gave Accepted Offer
Following the event, XCarnival spoke with the hacker via on-chain communications and demanded a refund of the money.
For the stolen money, the NFT lending pool originally offered a $300,000 prize. The hacker accepted XCarnival’s new offer of half of the funds stolen.
At the time of publication, the hacker still had 1,500 ETH ($1.8 million) in his wallet. The other 120 ETH that were taken out of Tornado Cash to use the exploit have been given back.
The NFT lender stated that if the hacker returned 50% of the stolen funds, no legal action would be taken against them.
Offering bug bounties to hackers who steal from them is a common practice among projects nowadays.
As an illustration, this occurred to the exploiter who took 20 million Optimism tokens from Wintermute earlier in June and then gave back 17 million of those tokens, with the two parties considering it equal.
Buy Ethereum via FCA Regulated eToro Now
ដើមទុនរបស់អ្នកប្រឈមនឹងហានិភ័យ។
In addition, Harmony has announced a $1 million reward for the return of the $100 million that was taken on June 23 via their Horizon bridge protocol. In Harmony’s offer, she also makes a commitment not to support legal action against the hackers.
អានបន្ថែម:
Lucky Block - គ្រីបតូដែលបានណែនាំរបស់យើងក្នុងឆ្នាំ 2022
- វេទិកាហ្គេមគ្រីបតូថ្មី។
- មានលក្ខណៈពិសេសនៅក្នុង Forbes, Nasdaq.com, Yahoo Finance
- LBLOCK Token Up 1000%+ ពីការលក់មុន។
- បានចុះបញ្ជីនៅ Pancakeswap, LBank
- សំបុត្រឥតគិតថ្លៃសម្រាប់ការចាប់រង្វាន់ Jackpot សម្រាប់អ្នកកាន់
- រង្វាន់ប្រាក់ចំណូលអកម្ម - លេងដើម្បីទទួលបានឧបករណ៍ប្រើប្រាស់
- 10,000 NFTs ដែលត្រូវបានលុបចោលក្នុងឆ្នាំ 2022 - ឥឡូវនេះនៅលើ NFTLaunchpad.com
- $1 លានដុល្លារ NFT Jackpot ក្នុងខែឧសភា ឆ្នាំ 2022
- ការប្រកួតវិមជ្ឈការទូទាំងពិភពលោក
Cryptoassets គឺជាផលិតផលវិនិយោគដែលមិនមានការគ្រប់គ្រងដែលងាយនឹងបង្កជាហេតុ។ គ្មានការការពារវិនិយោគិនចក្រភពអង់គ្លេស ឬសហភាពអឺរ៉ុបទេ។
Source: https://insidebitcoins.com/news/3-8-million-hack-on-xcarnival-hacker-returns-half-back