Hacker returns stolen funds to Tender.fi, gets $97K bounty reward
The hacker behind the exploit of the decentralized finance (DeFi) lending platform Tender.fi has returned the stolen funds for a $97,000 bounty reward in Ether (ETH).
The exploit was executed at 10:28 am UTC on Mar. 7, with Tender.fi confirming the incident on Twitter soon after citing “an unusual amount of borrows,” and adding it has paused all borrowing.
Blockchain data showed the exploiter used a price oracle glitch to borrow $1.59 million worth of assets from the protocol by depositing 1 GMX token, valued at around $71.
“It looks like your oracle was misconfigured. contact me to sort this out,” wrote the hacker in an on-chain message.
Eight hours later, the DeFi protocol announced it had come to an agreement with the “White Hat” exploiter, in which the hacker would repay all loans minus a 62.16 ETH “bounty,” worth around $97,000 at current prices.
Translation: The White Hat will repay all loans minus 62.158670296 ETH, which will be kept as a Bounty for helping secure the protocol. The https://t.co/H4ZMPLH9pz Team will repay the Bounty s value to the protocol, so that there will be no bad debt and users will remain… https://t.co/5bbmKu7zEe
Another hour later, Tender.fi confirmed on Twitter that the exploiter had completed the loan repayments.
“Funds are officially SaFu, post mortem on the way,” it wrote.
Related: DeFi lender Tender.fi suffers exploit, white hat hacker suspected
Last year in August, cross-chain Nomad Bridge appealed to exploiters that participated in a smart contract exploit that extracted $190 million in funds from the bridge in less than three hours.
Mere hours later, approximately $32.6 million worth of funds were already returned, suggesting some of the exploiters may have been white hat
Read more on cointelegraph.com
