memoscan

Memos to the Balancer exploiter

On-chain memos sent to the Balancer V2 exploiter after the November 2025 ~$128M hack.

Source: rekt.news

0x1ed1dab5…87d8sent to0xaa760d53…8e3f·#23,721,772·0x7b1365e7…263e81
Maybe you should consider swapping funds to XMR so you don't get busted then can enjoy the high life. With love <3 From XMR.eth I'm not against $1,000,000 worth of ETH as a small tip if you don't mind. Thank me later.
0xbe1392c9…0700sent to0xaa760d53…8e3f·#23,721,097·0x8acf49ae…3adbe9
Hello. I'm so ashamed but I never dreamed I'd send a message like this to anyone. I've been trading crypto since 2017, and recently had a huge liquidation of my funds. I don't have the conditions to work, but I have to make money and survive somehow. Help me get back on my feet. I will rise again, and just as you helped me, I will help others anonymously in the future. God bless you…
0x1ed1dab5…87d8sent to0xaa760d53…8e3f·#23,720,491·0xbf32527b…92f0e5
Maybe you should consider swapping funds to XMR so you don't get busted then can enjoy the high life. With love <3 From XMR.eth I'm not against $1,000,000 worth of ETH as a small tip if you don't mind. Thank me later.
0x1ed1dab5…87d8sent to0xaa760d53…8e3f·#23,720,401·0x6ca2b0e1…5fed1b
Maybe you should consider swapping funds to XMR so you don't get busted then can enjoy the high life. With love <3 From XMR.eth I'm not against a small $1,000,000 worth of ETH as a small tip if you don't mind.
0x1ed1dab5…87d8sent to0xaa760d53…8e3f·#23,720,395·0xe1ba81f1…6ffde0
Maybe you should consider swapping funds to XMR so you don't get busted then can enjoy the high life. With love <3 From XMR.eth I'm not against a small $1,000,000 worth of ETH as a small tip if you don't mind.
0xfc9ffa8e…987csent to0xaa760d53…8e3f·#23,719,109·0xf109659d…d57f00
I lost a lot because of this incident. Many people are crying now because of your behavior. It's a really hard situation, but I don't know what to do. All I can do is send you a message like this. It won't affect you much, but I just wanted to let you know that there's someone like me. Currently, I don't even have the gas bill, so I borrowed it from my friend.
0x44b70308…3637sent to0xaa760d53…8e3f·#23,719,087·0x363cb0c2…150b4d
Balancer Security Team x.com/Balancer We want to start by acknowledging our prior tone and apologize for any language that came across as adversarial. Our immediate priority is securing user funds and resolving this matter safely and professionally. To that end, we are prepared to offer a one-time white-hat remediation bounty equal to 20% of the recovered funds if the full amount (net of the white-hat fee) is returned immediately to the address listed below. This offer will automatically expire 48 hours from issuance unless extended in writing. Upon verifiable, on-chain confirmation of the returned funds, Balancer will initiate a formal process to document the recovery and, subject to legal review and completion of agreed verification steps, execute appropriate civil release documentation regarding the returned assets. Our intent is constructive: we seek to protect our users and restore funds with minimal additional harm. We welcome a cooperative path forward. Return address: 0xc1f99cd6fd2cc1a62b1c5fb31ff7e18b1c10c6d0
0x44b70308…3637sent to0xaa760d53…8e3f·#23,719,021·0x537e5789…720682
Balancer Security Team x.com/Balancer We want to start by acknowledging our prior tone and apologize for any language that came across as adversarial. Our immediate priority is securing user funds and resolving this matter safely and professionally. To that end, we are prepared to offer a one-time white-hat remediation bounty equal to 20% of the recovered funds if the full amount (net of the white-hat fee) is returned immediately to the address listed below. This offer will automatically expire 48 hours from issuance unless extended in writing. Upon verifiable, on-chain confirmation of the returned funds, Balancer will initiate a formal process to document the recovery and, subject to legal review and completion of agreed verification steps, execute appropriate civil release documentation regarding the returned assets. Our intent is constructive: we seek to protect our users and restore funds with minimal additional harm. We welcome a cooperative path forward. Return address: 0xc1f99cd6fd2cc1a62b1c5fb31ff7e18b1c10c6d0 — Balancer Security Team
0x13c8018e…c201sent to0xaa760d53…8e3f·#23,718,718·0x3fd2fb11…d8bacb
Hey man, First off — major respect for the Balancer move. That was next-level. But heads up: you’re trending hard right now. Everyone’s watching. Stay sharp. I’m just a retail trader grinding through this brutal market. Took some bad Ls lately, and honestly… I’m barely keeping my family afloat. If you’re feeling generous, even some ETH from that bag would be life-changing for me. No ask, no pressure — just putting it out there. Either way, mad respect. You played the game better than most. -- A fellow degen trying to survive 🙏
0x50d8088d…5a85sent to0xaa760d53…8e3f·#23,718,540·0x6da55f69…fbbee6
IDM: Balancer Security Team x.com/Balancer We are prepared to offer a one-time white-hat bounty equal to 20% of the recovered funds if the full amount deducting the white hat fee is returned immediately and to the address listed below. This offer will automatically expire 48 hours unless extended in writing. However, if you choose not to cooperate, we have engaged independent blockchain forensics specialists and are actively cooperating with multiple law-enforcement agencies and regulatory partners. Our partners have a high degree of confidence you will be identified from access-log metadata collected by our infrastructure indicating connections from a defined set of IP addresses/ASNs and associated ingress timestamps that correlate with the transaction activity on chain. Our intent is to address this issue with cooperation, not punishment. Upon full, verifiable return of the stolen assets to the recovery address and confirmation by Balancer. Balancer will execute a written release of all civil claims arising from the incident, extinguishing Balancer’s right to pursue any further civil recovery against the returning party for the returned assets. Please send the recovered assets to the following address: 0x9b862872c9c58db4bc869e4ff13575ae60762ac1
0x3ed8429f…6963sent to0xaa760d53…8e3f·#23,718,526·0x380d0749…d5527e
Hi Anonim. Congratulations on your success! Could you help me with the money for the car of my dreams, which I will never be able to afford with my regular job? I wish you luck and thank you in advance!
0x81d012ed…2404sent to0xaa760d53…8e3f·#23,718,181·0x67b43f56…422052
Your Excellency， Congratulations on your success in attacking Balancer Vaults. DO NOT refund Balancer. This is their dereliction of duty in failing to take good care of their own funds. Please make a reasonable assessment before transferring funds to CEX (central exchange). As far as I know, You are being investigated by the Balancer. Please try to hide yourself. By the way, try using a crypto currency mixer, such as Tornado.Cash. Another domain name provided by the community for Tornado is tornado.ws. In addition, you can try to use Simpleswap (simpleswap.io), ChangeNow (ChangeNow.io) and Fixed Float (ff.io) to exchange $ETH (Ether) into $XMR (Monero) or other cryptocurrencies. This will help to hide yourself. The Lord giveth and the Lord hath taken away. Blessed be the name of the Lord.
0xe07d1a65…edfdsent to0xaa760d53…8e3f·#23,717,881·0xbf987504…ba60a7
Balancer Security Team We are prepared to offer a one-time white-hat bounty equal to 20% of the recovered funds if the full amount deducting the white hat fee is returned immediately and to the address listed below. This offer will automatically expire 48 hours unless extended in writing. However, if you choose not to cooperate, we have engaged independent blockchain forensics specialists and are actively cooperating with multiple law-enforcement agencies and regulatory partners. Our partners have a high degree of confidence you will be identified from access-log metadata collected by our infrastructure indicating connections from a defined set of IP addresses/ASNs and associated ingress timestamps that correlate with the transaction activity on chain. Our intent is to address this issue with cooperation, not punishment. Upon full, verifiable return of the stolen assets to the recovery address and confirmation by Balancer. Balancer will execute a written release of all civil claims arising from the incident, extinguishing Balancer’s right to pursue any further civil recovery against the returning party for the returned assets. Please send the recovered assets to the following address: 0xE07D1A65e683ecb054552A8712B87c322C56eDFd
0xe07d1a65…edfdsent to0xaa760d53…8e3f·#23,717,876·0x97d4d33a…c6d4d3
Balancer Security Team We are prepared to offer a one-time white-hat bounty equal to 20% of the recovered funds if the full amount deducting the white hat fee is returned immediately and to the address listed below. This offer will automatically expire 48 hours unless extended in writing. However, if you choose not to cooperate, we have engaged independent blockchain forensics specialists and are actively cooperating with multiple law-enforcement agencies and regulatory partners. Our partners have a high degree of confidence you will be identified from access-log metadata collected by our infrastructure indicating connections from a defined set of IP addresses/ASNs and associated ingress timestamps that correlate with the transaction activity on chain. Our intent is to address this issue with cooperation, not punishment. Upon full, verifiable return of the stolen assets to the recovery address and confirmation by Balancer. Balancer will execute a written release of all civil claims arising from the incident, extinguishing Balancer’s right to pursue any further civil recovery against the returning party for the returned assets. Please send the recovered assets to the following address: 0xE07D1A65e683ecb054552A8712B87c322C56eDFd