The decentralised cross-chain exchange Transit Swap, said that the hacker agreed to return 10,000 BNB ($2.74 million) to the victims of the exploit.
6,500 BNB ($1.79 million) have already been sent to the platform’s wallet, PeckShield confirmed.
Transit Swap’s developers allowed the hacker to keep 2,500 BNB ($686,000) as a bounty for the vulnerability discovered. According to Etherscan, on 10 October these funds were sent to the cryptocurrency mixer Tornado Cash, which had previously been sanctioned by the U.S. Treasury.
If the remaining 3,500 BNB is returned, the exchange promises not to initiate criminal proceedings against the hacker.
Earlier in October, an unknown actor exploited a bug in Transit Swap’s smart contract and stole $21 million of user funds.
After blockchain-security researchers traced the hacker’s IP address, he returned 70% of the stolen amount.
On 3 October, the attacker reimbursed the platform a further 2,612 BNB (about $750,000). In doing so, he made 40 transfers of 100 BNB to Tornado Cash.
Read ForkLog’s Bitcoin news in our Telegram — cryptocurrency news, prices and analysis.