{"id":39071,"date":"2022-10-31T15:29:22","date_gmt":"2022-10-31T19:29:22","guid":{"rendered":"https:\/\/coinscreed.com\/staging\/?p=39071"},"modified":"2022-11-13T15:33:40","modified_gmt":"2022-11-13T19:33:40","slug":"team-finance-hacker-returns-7m-to-projects-after-exploit","status":"publish","type":"post","link":"https:\/\/coinscreed.com\/staging\/team-finance-hacker-returns-7m-to-projects-after-exploit\/","title":{"rendered":"Team Finance Hacker Returns $7M To Projects After Exploit"},"content":{"rendered":"\n<h5 class=\"wp-block-heading\" id=\"h-the-hacker-who-was-responsible-for-the-14-5-million-team-finance-attack-the-individual-intends-to-keep-a-10-bounty-of-the-stolen-funds\">The hacker who was responsible for the $14.5 million Team Finance attack. The individual intends to keep a 10% bounty of the stolen funds.<\/h5>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000-1024x576.jpg\" alt=\"Team Finance Hacker Returns $7M To Projects After Exploit\" class=\"wp-image-39075\" srcset=\"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000-1024x576.jpg 1024w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000-300x169.jpg 300w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000-768x432.jpg 768w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000-150x84.jpg 150w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000-750x422.jpg 750w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000-1140x641.jpg 1140w, https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000.jpg 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Team Finance Hacker Returns $7M To Projects After Exploit<\/figcaption><\/figure>\n\n\n\n<p>The attacker indicated over the weekend in a string of messages that they would retain 10% of the stolen funds as a bounty and give the remaining tokens back to the impacted projects. Through the Uniswap v2-to-v3 conversion, the exploiter\u2014a self-described &#8220;whitehat&#8221;\u2014stole resources from Team Finance. According to a report, the <a href=\"https:\/\/coinscreed.com\/staging\/top-10-blockchain-companies-using-ai.html\" target=\"_blank\" rel=\"noreferrer noopener\">blockchain security company<\/a> PeckShield revealed that liquidity from Uniswap v2 assets on Team Finance was transferred to an attacker-controlled v3 pair with skewed pricing.<\/p>\n\n\n\n<p>USD Coin ($USDC $1.00), CAW, TSUKA, and KNDA tokens were among the stolen money. Due to the exploit and ensuing <a href=\"https:\/\/poshukach.com\/search?q=Team+Finance+Hacker+Returns+%247M+To+Projects+After+Exploit&fr=ps&gp=496724&altserp=1\" target=\"_blank\" rel=\"noreferrer noopener\">liquidity<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><g id=\"wpil-svg-outbound-7-icon-path\" fill=\"none\" clip-path=\"url(#clip0_31_188)\">\r\n                            <path d=\"M9.16724 14.8891L20.1672 3.88908\" stroke-linecap=\"round\"\/>\r\n                            <path d=\"M13.4497 3.53554L20.5208 3.53554L20.5208 10.6066\" stroke-linecap=\"round\" stroke-linejoin=\"round\"\/>\r\n                            <path d=\"M17.5 13.5L17.5 16.26C17.5 17.4179 17.5 17.9968 17.2675 18.4359C17.0799 18.7902 16.7902 19.0799 16.4359 19.2675C15.9968 19.5 15.4179 19.5 14.26 19.5L7.74 19.5C6.58213 19.5 6.0032 19.5 5.56414 19.2675C5.20983 19.0799 4.92007 18.7902 4.73247 18.4359C4.5 17.9968 4.5 17.4179 4.5 16.26L4.5 9.74C4.5 8.58213 4.5 8.0032 4.73247 7.56414C4.92007 7.20983 5.20982 6.92007 5.56414 6.73247C6.0032 6.5 6.58213 6.5 7.74 6.5L11 6.5\" stroke-linecap=\"round\"\/>\r\n                        <\/g>\r\n                        <defs>\r\n                            <clipPath id=\"clip0_31_188\">\r\n                                <rect fill=\"white\" height=\"24\" width=\"24\"\/>\r\n                            <\/clipPath>\r\n                        <\/defs><\/svg><\/span><\/a> crisis, several of the affected tokens, including CAW, experienced significant price drops. On October 30, Kondux, a nonfungible token (NFT) marketplace, declared that it had recovered 548 ETH, or 95% of the stolen money, which amounted to 209 Ether (ETH $1,571). Tsuka's blockchain protocol also confirmed receiving over $ 765, 000 worth of the<a href=\"https:\/\/coinscreed.com\/staging\/market-volatility-and-redemptions-destabilize-major-stablecoins.html\" target=\"_blank\" rel=\"noreferrer noopener\"> stablecoin<\/a> Dai ( Dai $ 1. 00) and 11.8 million Tsuka. The largest victim of the exploit, Caw Coin, earned back $5 million in DAI as well as 74.6 billion of its native CAW coin. <\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"embed-twitter\"><blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\"><p lang=\"en\" dir=\"ltr\">We&#39;re thrilled to announce we have received 95% of the exploited ETH back!<br><br>Please bear with us in the coming 48 hours \u23f3 as we await the <a href=\"https:\/\/twitter.com\/search?q=%24KNDX&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$KNDX<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> to return so we can plan our next move forward. \u23e9 \ud83d\udc2e<br><br>Massive thanks to the community for their unwavering support \ud83d\udc96<a href=\"https:\/\/twitter.com\/search?q=%24FEG&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$FEG<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> <a href=\"https:\/\/twitter.com\/search?q=%24CAW&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$CAW<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a> <a href=\"https:\/\/twitter.com\/search?q=%24TSUKA&src=ctag&ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">$TSUKA<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/p>&mdash; Kondux (@Kondux_KNDX) <a href=\"https:\/\/twitter.com\/Kondux_KNDX\/status\/1586858508258971649?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener\">October 30, 2022<span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a><\/blockquote><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<\/div><\/figure>\n\n\n\n<p>The protocol advised the hacker to get in touch for a reward payout on Twitter. Team Finance claimed that its smart contract had previously been inspected and that protocol developers had <a href=\"https:\/\/www.google.com\/search?q=Team+Finance+Hacker+Returns+%247M+To+Projects+After+Exploit&oq=Team+Finance+Hacker+Returns+%247M+To+Projects+After+Exploit&aqs=chrome..69i57j69i61.872j0j7&sourceid=chrome&ie=UTF-8\" target=\"_blank\" rel=\"noreferrer noopener\">momentarily <span class=\"wpil-link-icon\" title=\"Link goes to external site.\" style=\"margin: 0 0 0 5px;\"><svg width=\"24\" height=\"24\" style=\"height:16px; width:16px; fill:#000000; stroke:#000000; display:inline-block;\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" xmlns:svg=\"http:\/\/www.w3.org\/2000\/svg\"><use href=\"#wpil-svg-outbound-7-icon-path\"><\/use><\/svg><\/span><\/a>suspended all activities. TrustSwap, a startup that offers project leaders token liquidity lockup and vesting services, established the business in 2020.<\/p>\n\n\n\n<p> According to the protocol, $3 billion was safely stored on 12 different blockchains. The exploit came after the Mango Markets attack on October 11 when a hacker increased the price of <a href=\"https:\/\/coinscreed.com\/staging\/mango-market-to-approve-47-million-hacker-settlement.html\" target=\"_blank\" rel=\"noreferrer noopener\">MNGO<\/a>, the platform's native token. The assailant subsequently borrowed a sizable sum against the falsified collateral, depleting Mango's funds. The hacker was permitted to keep $47 million as a &#8220;bug bounty&#8221; after a proposal on Mango's governance forum was approved, and $67 million was paid back to the treasury.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The hacker who was responsible for the $14.5 million Team Finance attack. The individual intends to keep a 10% bounty of the stolen funds. The attacker indicated over the weekend in a string of messages that they would retain 10% of the stolen funds as a bounty and give the remaining tokens back to the [&hellip;]<\/p>\n","protected":false},"author":43,"featured_media":39075,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11476],"tags":[1612,197,2118],"class_list":["post-39071","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacks-and-scams","tag-altcoins","tag-defi","tag-hacker"],"jetpack_featured_media_url":"https:\/\/coinscreed.com\/staging\/wp-content\/uploads\/2022\/10\/jpg_20221031_200215_0000.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/39071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/users\/43"}],"replies":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/comments?post=39071"}],"version-history":[{"count":0,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/posts\/39071\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media\/39075"}],"wp:attachment":[{"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/media?parent=39071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/categories?post=39071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinscreed.com\/staging\/wp-json\/wp\/v2\/tags?post=39071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}