In the aftermath of a $52 million hack on Sunday that affected several DeFi projects and the decentralized exchange Curve Finance, a compassionate hacker helped recover and return some of the targeted funds.
In the first exploit, attackers leveraged a vulnerability in the Vyper programming language, which led to funds being drained from DeFi projects including JPEG’d, Metronome, and Alchemix. Another attack later drained millions from a Curve liquidity pool, according to blockchain security company PeckShield.
But in what might’ve been just luck, an anonymous crypto trader, c0ffeebabe.eth, was able to use an Ethereum-arbitrage trading bot to front-run the malicious hackers and recover $5.4 million the hackers were attempting to steal from Curve. The Curve team communicated with the benevolent hacker, who returned the money.
Despite the goodwill created by the anonymous hacker helping to return millions of dollars, the exploit has shaken confidence in Curve—and in DeFi as a whole. The Curve DAO token, associated with the decentralized autonomous organization behind the protocol, has fallen more than 15% over the past 24 hours and was trading on Monday morning near 60 cents, according to CoinMarketCap.
The worst thing about the Curve hack is this is not something a typical researcher would have looked for, they dug *deep* in our release history to find an exploitable issue for a large protocol with many millions at stake
— señor doggo 🏴🏴☠️ in his wartime ceo era (@fubuloubu) July 31, 2023
This took a significant amount of time to identify
In the second quarter of 2023 alone, $204 million in crypto was stolen by hackers, according to a June report by De.Fi Security.