{"id":577218,"date":"2022-09-21T17:04:36","date_gmt":"2022-09-21T16:04:36","guid":{"rendered":"https:\/\/en.ethereumworldnews.com\/?p=577218"},"modified":"2022-09-21T17:18:31","modified_gmt":"2022-09-21T16:18:31","slug":"wintermute-offers-bounty-for-160m-defi-hack","status":"publish","type":"post","link":"https:\/\/en.ethereumworldnews.com\/wintermute-offers-bounty-for-160m-defi-hack\/","title":{"rendered":"Wintermute Offers Bounty For $160M DeFi Hack&nbsp;"},"content":{"rendered":"\n<ul><li>Wintermute&#8217;s CEO, Evgeny Gaevoy, shared additional details via Twitter after encountering a $160M DeFi hack\u00a0yesterday. <\/li><li>Gaevoy is also offering a 10% bounty to hackers in exchange for stolen funds.<\/li><\/ul>\n\n\n\n<p>After encountering a massive $160M <a href=\"https:\/\/en.ethereumworldnews.com\/wintermutes-suffers-160-million-hack\/\" data-type=\"post\" data-id=\"577156\">DeFi<\/a> hack yesterday, Wintermute&#8217;s CEO, Evgeny Gaevoy, took to Twitter to share more details about the exploit, alongside offering a 10% bounty on funds stolen by hackers.<\/p>\n\n\n\n<p><strong>Wintermute CEO Offers $10M Bounty To Hackers&nbsp;<\/strong><\/p>\n\n\n\n<p>In a comprehensive Twitter thread, Gaevoy unveiled details about the recent DeFi exploit that resulted in Wintermute losing $160 million worth of funds. The attack was directed toward the firm&#8217;s wallet used for DeFi proprietary trading operations. Gaevoy later stressed how the firm&#8217;s internal CeFi and OTC operations were not affected and are separate from its DeFi procedures.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">Our internal systems in both Cefi and Defi are not affected, as well as any internal or counterparty data<\/p>&mdash; wishful cynic (@EvgenyGaevoy) <a href=\"https:\/\/twitter.com\/EvgenyGaevoy\/status\/1572329153441177600?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">September 20, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>Gaevoy further revealed that the hack was most likely linked to a profanity-type exploit that enables users to create multiple vanity ETH addresses. According to Blockworks Research, &#8220;Profanity lets users randomly pick 1 out of 4B seed private keys. Then the user can expand it deterministically to 2M private keys before deriving public keys from the private keys. Profanity then loops through keys until a user gets the desired ETH address. &#8220;<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">3\/ Wintermute utilized the tool to create an address with 7 0&#39;s which enables slightly cheaper transaction fees due to advantages with how bytecode is processed.<\/p>&mdash; Blockworks Research (@blockworksres) <a href=\"https:\/\/twitter.com\/blockworksres\/status\/1572603949483692033?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">September 21, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>The research platform further revealed how a 1inch blog post had earlier found a potential bug in the profanity wallet generator tool that could later result in a loss of millions of dollars. Similar to this, the platform reported that this is precisely how the hacker may have found Wintermute&#8217;s vanity address before looping to get the remaining numbers of the firm&#8217;s ETH address.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">1\/ Last week, a <a href=\"https:\/\/twitter.com\/1inch?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">@1inch<\/a> blog post pointed out a bug in the Profanity wallet generator tool that could result in hundreds of millions of dollars stolen.<br><br>Profanity enables users to create vanity ETH addresses, similar to how one could choose a custom license plate for a car. <a href=\"https:\/\/t.co\/gHXzG5Dcwz\" rel=\"nofollow\">pic.twitter.com\/gHXzG5Dcwz<\/a><\/p>&mdash; Blockworks Research (@blockworksres) <a href=\"https:\/\/twitter.com\/blockworksres\/status\/1572603942584086528?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">September 21, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>According to <a href=\"https:\/\/www.cnbctv18.com\/cryptocurrency\/crypto-trader-wintermute-loses-160-mn-in-cyber-heist-it-has-over-200-mn-in-defi-dues-14775521.htm\" rel=\"nofollow noopener\">CNBC<\/a>, a total of 90 different assets were stolen by hackers in the $160 million DeFi hack, out of which nearly $114 million were in the form of USDC and USDT stablecoins. Currently, Gaevoy is offering a $10 million bounty to the hackers and has shared a crypto address via Twitter for the scammer to respond and transfer all the firm&#8217;s stolen funds.<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">To the hacker, we offer a 10% bounty on funds taken. To make it easy, we propose for you to transfer all of the funds taken through the exploit, save for $16M USDC, to:<br>0x4f3a120E72C76c22ae802D129F599BFDbc31cb81<\/p>&mdash; wishful cynic (@EvgenyGaevoy) <a href=\"https:\/\/twitter.com\/EvgenyGaevoy\/status\/1572329658636537857?ref_src=twsrc%5Etfw\" rel=\"nofollow noopener\">September 20, 2022<\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div><\/figure>\n\n\n\n<p>Wintermute is currently in <a href=\"https:\/\/www.coindesk.com\/business\/2022\/09\/20\/hacked-crypto-market-maker-wintermute-has-200m-in-outstanding-defi-debt\/\" rel=\"nofollow noopener\">crisis<\/a> mode. The firm owes nearly $200 million to multiple DeFi lenders, including a $92 million Tether loan issued by TrueFi, a $75 million debt owed to Maple Finance, and another $22.4 million owed to Clearpool.<\/p>\n\n\n\n<p>Image: Wintermute\/Twitter<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wintermute&#8217;s CEO, Evgeny Gaevoy, shared additional details via Twitter after encountering a $160M DeFi hack\u00a0yesterday. Gaevoy is also offering a 10% bounty to hackers in exchange for stolen funds. After encountering a massive $160M DeFi hack yesterday, Wintermute&#8217;s CEO, Evgeny Gaevoy, took to Twitter to share more details about the exploit, alongside offering a 10% bounty on funds stolen by hackers. Wintermute CEO Offers $10M Bounty To Hackers&nbsp; In a comprehensive Twitter thread, Gaevoy unveiled details about the recent DeFi [&hellip;]<\/p>\n","protected":false},"author":53,"featured_media":577219,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[17,828],"tags":[],"_links":{"self":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/577218"}],"collection":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/comments?post=577218"}],"version-history":[{"count":5,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/577218\/revisions"}],"predecessor-version":[{"id":577231,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/posts\/577218\/revisions\/577231"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media\/577219"}],"wp:attachment":[{"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/media?parent=577218"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/categories?post=577218"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/en.ethereumworldnews.com\/wp-json\/wp\/v2\/tags?post=577218"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}