The hacker who breached the DeFi protocol Euler Finance contacted the project’s developers via on-chain messages.
Lending platform @eulerfinance received on-chain messages earlier today from the exploiter.
The exploiter seeks to come to an agreement and have «no intention of keeping what is not theirs.»
Their full message and the Euler response seen below ? pic.twitter.com/4eLbUIf5br
— CertiK Alert (@CertiKAlert) March 21, 2023
Blockchain security company CertiK published screenshots of the correspondence.
“We want to resolve the situation for all those affected. We have no intention of taking what does not belong to us. Let us establish a secure line of communication and come to an agreement,” the hacker wrote.
Euler representatives responded to the message and proposed contacting via EOA or email. The company added that they were ready to hear the hacker’s wishes.
No official statements from project representatives have yet been issued.
On March 13 the attacker illicitly withdrew assets worth more than $196 million from the DeFi platform.
The Euler Finance team after the incident blocked the vulnerable EToken module and turned to law enforcement, as well as Chainalysis and TRM Labs for help with the investigation. The project demanded from the hacker return 90% of the stolen funds.
Because there was no response, the company announced a $1 million reward for any information that could lead to the hacker’s arrest.
Today the Euler Foundation is launching a $1M reward in the hope that this provides additional incentive for information that leads to the Euler protocol attacker’s arrest and the return of all funds extracted by the attacker.
— Euler Labs (@eulerfinance) March 15, 2023
Later the hacker sent cryptocurrency worth about $2.5 million to the mixer Tornado Cash. Lookonchain analysts also reported that the attacker moved 100 ETH to an address linked to the Lazarus Group, associated with the Ronin network attack in March 2022.
Earlier in March 2023, the Tender.fi DeFi protocol hacker returned assets in exchange for a reward of 62.16 ETH. In total, the hacker managed to withdraw $1.59 million from the platform.