Lending platform Alchemix has announced the return of all stolen funds by the Curve finance hacker. The attack took place on July 30 and resulted in over $61 million in cryptocurrencies drained, including $13.6 million from Alchemix’s alETH-ETH pool.
Along with Alchemix, JPEGd’s pETH-ETH pool saw outflows of $11.4 million, and Metronome’s sETH-ETH pool was drained in over $1.6 million. The hacker targeted stable pools on Curve Finance using vulnerable versions of the Vyper programming language through reentrancy attacks.
We are extremely happy to announce that all funds stolen by the hacker of the Alchemix @CurveFinance pool have now been returned.
Full post mortem coming.
— Alchemix (@AlchemixFi) August 5, 2023
The return of funds started after the hacker accepted a bug bounty offer. Curve, Metronome and Alchemix jointly announced an initiative to recover stolen funds on Aug. 3, offering a 10% bounty of the seized funds as a reward, and urging those responsible for the exploit to return the remaining 90%, which would bring the bounty close to $7 million.
Related – Curve-Vyper exploit: The whole story so far
In less than 24 hours after the offer, the original attacker began returning funds stolen a few days earlier, initially sending back 4,820.55 Alchemix ETH (alETH) to the Alchemix Finance team, before completing the transaction on…
