{"id":33408,"date":"2020-12-15T14:24:15","date_gmt":"2020-12-15T12:24:15","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=33408"},"modified":"2025-08-28T13:41:57","modified_gmt":"2025-08-28T10:41:57","slug":"hacker-uses-renbtc-to-move-nexus-mutual-founders-funds-to-bitcoin-addresses","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/hacker-uses-renbtc-to-move-nexus-mutual-founders-funds-to-bitcoin-addresses\/","title":{"rendered":"Hacker uses renBTC to move Nexus Mutual founder&#8217;s funds to Bitcoin addresses"},"content":{"rendered":"<p>The attacker who stole the Nexus Mutual founder\u2019s funds used the renBTC tokenised-Bitcoin protocol to withdraw 137 BTC to two addresses.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">12 hours passed, but it doesn\u2019t look like the hacker will return anything. Instead, they used renBTC to withdraw 137 BTC to two addresses:<a href=\"https:\/\/t.co\/nlvyMgy465\">https:\/\/t.co\/nlvyMgy465<\/a><a href=\"https:\/\/t.co\/9FDCYZrIqD\">https:\/\/t.co\/9FDCYZrIqD<\/a> <a href=\"https:\/\/t.co\/ZZaYczvEFh\">https:\/\/t.co\/ZZaYczvEFh<\/a><\/p>\n<p>\u2014 Igor Igamberdiev (@FrankResearcher) <a href=\"https:\/\/twitter.com\/FrankResearcher\/status\/1338793022511869953?ref_src=twsrc%5Etfw\">December 15, 2020<\/a><\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<blockquote>\n<p>\u201cTwelve hours have passed, but it seems the hacker will not return anything. Instead, he used renBTC to withdraw funds to two addresses,\u201d wrote The Block analyst Igor Igamberdiev.<\/p>\n<\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Earlier, an unknown attacker <a href=\"https:\/\/forklog.com\/en\/news\/hacker-drains-founders-personal-address-of-defi-protocol-for-8-million\">withdrew<\/a> more than $8 million in native NXM tokens from the Nexus Mutual founder Hugh Karp\u2019s personal wallet.<\/p>\n<p>The hacker managed to install on Hugh Karp\u2019s computer a compromised version of the MetaMask app that tricked him into confirming the transaction.<\/p>\n<p>Hugh Karp offered a $300,000 reward and to drop the investigation in exchange for the return of the funds.<\/p>\n<p>Subscribe to the ForkLog channel on <a href=\"https:\/\/www.youtube.com\/channel\/UCC9FnXTC8_ENzaNSO5cHQ6g\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"> YouTube<\/a>!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The attacker who stole the Nexus Mutual founder\u2019s funds used the renBTC tokenised-Bitcoin protocol to withdraw 137 BTC to two addresses.<\/p>\n","protected":false},"author":1,"featured_media":33409,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,1093,2064],"class_list":["post-33408","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-defi","tag-renbtc"],"aioseo_notices":[],"amp_enabled":true,"views":"18","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/33408","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=33408"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/33408\/revisions"}],"predecessor-version":[{"id":33410,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/33408\/revisions\/33410"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/33409"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=33408"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=33408"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=33408"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}