JPEG’d confirms return of 5,495 ETH from Curve hacker

Nonfungible token finance (NFT-Fi) protocol JPEG’d has confirmed that 5,495 Ether (ETH), price roughly $10 million at present costs, has been returned by the Curve Finance hacker.

In alternate for returning the funds that had been stolen on July 30, the hacker obtained a 610.6 ETH ($1.1 million) bounty.

JPEG’d exploit replace:

Appears 5495 ETH was returned simply now for a ten% whitehat bounty.

0x003b00378ac52c10200d8fcac0e42138a34e46b9d7c3350ad3372ae0eb141df3

Michael Razum shouldn’t be the exploiter however was linked on-chain bc a couple of of his contracts had been drained by this particular person. pic.twitter.com/mc3GGx2gyd

— ZachXBT (@zachxbt) August 4, 2023

JPEG’d is a decentralized lending protocol that allows customers to borrow funds in opposition to their collateralized NFTs. As a part of the most important hack on Curve Finance, the protocol misplaced $11.6 million price of crypto.

In an Aug. 4, X (Twitter) thread, the group acknowledged that the funds have been returned to the JPEG’d decentralized autonomous group multisig pockets tackle.

“Any additional investigations or authorized issues in opposition to the entity will finish. We view this prevalence as a white-hat rescue,” the JPEG’d group acknowledged.

The JPEG’d DAO confirms receipt of 5,494.4 WETH again to the JPEG’d Multisig for a complete of 5,495.4 WETH. A ten% white-hat bounty of 610.6 WETH was awarded to the proprietor of the tackle that recovered funds from the pETH exploit.https://t.co/nIBwHHxfQU

— JPEG’d (@JPEGd_69) August 4, 2023

The decentralized finance (DeFi) ecosystem copped a significant hit in late July, after a number of liquidity pools on Curve Finance had been drained.

The hacker managed to take advantage of a safety vulnerability within the Vyper sensible contract programming language that these explicit swimming pools had been coded with, and the full losses had been estimated to be round $70 million price of crypto.

The exploit impacted initiatives similar to decentralized alternate Ellipsis, lending platform Alchemix, JPEG’d and artificial protocol Metronome, which all noticed hundreds of thousands of {dollars} price of belongings stolen from liquidity swimming pools, whereas Curve Finance additionally misplaced round $22 million price of Curve DAO (CRV) tokens.

Associated: CRV exposure risk throws a curveball at the DeFi ecosystem: Finance Redefined

On Aug. 3, Curve, Metronome and Alchemix collectively introduced an initiative to retrieve the stolen funds, providing the hacker a ten% bounty and no authorized motion in the event that they returned the opposite 90% of the funds.

In lower than 24 hours, the hacker seemingly agreed to the deal, and has progressively began returning the stolen funds to the assorted initiatives.

Other than JPEG’d, they’ve to this point returned 4,820.55 Alchemix ETH (alETH), price roughly $8.8 million to the Alchemix Finance group, and 1 ETH ($1,829) to the Curve Finance group.

Journal: Deposit risk: What do crypto exchanges really do with your money?