Victor is victor! I am encouraged by your stand of keeping the proceeds in your wallet and giving the CRV team a lesson. Let me celebrate your victory with you. Cheers!
Hacker. I have your IP address. I give you until 08/10/23 8:00 AM UTC to return: 7,000,000 CRV and 7,000 WETH to this address: 0xC6a194f5F08352C6aD0B9Dcff1C7A5Ef9f8A7802. After this time I will reveal your IP address. This is your last chance to make the right choice.
Hacker. I have your IP address. I give you until 08/10/23 8:00 AM UTC to return: 7,000,000 CRV and 7,000 WETH to this address: 0xC6a194f5F08352C6aD0B9Dcff1C7A5Ef9f8A7802. After this time I will reveal your IP address. This is your last chance to make the right choice.
Dear Mr.Hacker,
Thankfully, Curve Finance finally stopped bragging.This clearly shows that Curve Finance lacks a rigorous attitude towards loopholes.
DeFi is in the midst of the heaviest storm since blockchain was created, and users are in jeopardy.On the ship of the DeFi stood the captain of the Titanic, like the Curve Finance developer, who turned a blind eye to the iceberg and reassured users with empty notices, which is what developers see from the fact that developers want hackers to "return 90 percent of the funds". They do not blame the mistake on themselves. With such a crew, DeFi is doomed to end in tragedy.
Curve Finance developers are blind and blind to loopholes, and as for them, they clearly decide to do something only when their interests are threatened. "No matter what the security of the user will be", this is obviously similar to the motto of Curve Finance developers. The original intention of decentralized financial developers to protect users from the threat of centralization has become false.Because they themselves are a threat, this loophole is the best proof. They destroyed DeFi on security issues.
The project and its developers have to address security issues related to DeFi in order to survive this crisis, but I don't seem to mention it in the messages sent to you by the developers.The theft is self-inflicted by developers, and it is a direct consequence of insecurity. The consequences are obvious, but developers avoid talking about it and don't take action before the loopholes are exploited.What the developers are doing has put the entire DeFi in jail, and if they don't have the ability to stop the vulnerability, they should be let go bankrupt, which is the best way to reduce the burden on DeFi.
Sir, the ridiculous reward offered by developers does not pose any threat to you, which only reflects the anxiety and exhaustion of some people, because if they can really find you, why bother to send you messages so hard?
Don't be a white hat, because if you return the funds to them this time, developers will always rely on hackers instead of reviewing code loopholes if any project is stolen after that. And if you don't return it to them this time, the developers will realize that if there is a bug in the code, they will lose all their funds, thus preventing the loopholes from happening before. From this point of view, the white hat is not a moral thing.
Here are some suggestions.
If you need this funds, then using crypto mixer is definitely a good choice, as I mentioned earlier. On the other hand, I noticed that your money comes from binance, maybe you should transfer all the cryptocurrencies in binance, otherwise it is likely to be frozen.
If you don't need the stolen funds, please don't return it to the idiots of Curve Finance. It is a good choice to transfer it to zero address or to help people in need, or to help invaded countries.
If you must return it to the idiots of Curve Finance, please ask them for a reward of more than 50%.
Stay safe and contact.
The deadline for the voluntary return of funds in the Curve exploit passed at 0800 UTC. We now extend the bounty to the public, and offer a reward valued at 10% of remaining exploited funds (currently $1.85M USD) to the person who is able to identify the exploiter in a way that leads to a conviction in the courts.
If the exploiter chooses to return the funds in full, we will not pursue this further.
Contact us at curvenegotiation@protonmail.com.
As you can see, Alchemix/CurveFinance Exploiter has recovered all the stolen funds. Now it's your turn to return the funds that don't belong to you. We are sure that you are also a worthy person.
I admire your generosity and rationality. Yes, you are wealthier and more capable than most of us. Compared to you, my life feels like that of a sewer rat, and I envy you and need your help, Please.
I take advantage of this speaker to say that I am a victim of Luna and several other scams. My mother has an illness and I wish I could take better care of her but I don't have money. I would appreciate donations to my address. Greetings
Dear Mr. Hacker, forget to tell you another thing, whether you believe me or not, but don't trust them (Curve Finance). Just imagine, if they (Curve Finance) can really pay a 10% reward to others to find you, then why bother to contact you? The founders of Curve Finance are selling 72 million $CRV to repay their debts. They can't even afford to pay their own debts. They may not even be able to pay the reward paid to others who are looking for you. When a project has a big loophole, then they can no longer be trusted, otherwise, when the next loophole appears, more people will be affected. So if you want to protect other users, your best option is to let them go bankrupt. In fact, the project developer shamefully deceives others into thinking that they are credible, and letting them go bankrupt is the best choice for this phenomenon. You don't have to pity anyone,they should pay for their choices. If you want to return the money to the project developer and ask them to increase the compensation to more than 60%, do not accept 10%, that is not your due reward, because the reward is too low.If you don't want to return the money to the project developer, then it's a good idea to use a crypto mixer and create a new contract as I said earlier.You can contact this address and I will try my best to help you. No one in a decentralized world should be threatened by a centralized collective. Stay contact and safe.
Dear Mr. Hacker, you seem to be worried about how to deal with these Ethereum. As far as I know, your address is being monitored on Etherscan. It's (0xB1C33b391C2569B737eC387E731E88589e8ec148).Your address is named CRV/ETH Exploiter 2 on Etherscan. I think there are some ways to transfer Ethereum, which I hope will be useful to you.The first method is a currency mixer, as I mentioned earlier, Tornado Cash, and other commonly used currency mixers are Umbra (app.umbra.cash), Aztec (aztec.network) and (eth-mixer.com).If you don't want to use a crypto currency mixer, here's a second way.First, create a new address A, deposit some Ethereum, create a new contract B, and then add a liquidity pool to uniswap. The address of the attack CRV/ETH is recorded as C. C buys contract B, so that we can push up the price of B, and then the new address A sells contract B and removes the liquidity pool on uniswap. In this way, the transfer of Ethereum was completed. You are the ones who really changed the whole blockchain, and I would be honored if my advice could help you do something.
Dear Mr.hacker, I don't know if you can see this message.Thank you for your important contribution to eliminating the junk project on the blockchain.If the project side cannot prevent loopholes, then the best way is to let those junk projects fail.Allow me to give you a little advice.First, please do not transfer any tokens to the central exchange, they may be investigating, and then they will not allow you to transfer money on the grounds of risk control. At this point, you may need a currency mixer, such as tornado.Second, you are legal, please do not return any tokens to the responsible party of the garbage project, this is the punishment they deserve. If they threaten you and you can't handle tokens, maybe you can type tokens into zero address(0x0000000000000000000000000000000000000000).Have a nice day.
The FBI and IC3 notify you that criminals receive prison sentences for stealing cryptocurrency to the same extent as for ordinary financial theft. For a major theft of funds of clients of Curve Finance, you will receive at least 8-10 years in prison. It will be difficult to find you, but it is possible. You have left traces that will soon lead us directly to you. To exchange such a large amount of cryptocurrency into cash will be difficult for you. You will be arrested immediately after several exchanges.
These funds do not belong to you, be a white hat and show everyone what a noble person you are. You honestly earned 10% of the total amount as a bounty, return the remaining 90% back to Curve Finance by August 6, 08:00 UTC. There will be no prosecution by law enforcement officers, if you will return 90% of the funds. We can discuss with you, if you have any questions: curvenegotiation@protonmail.com.
We as a group: Curve, Metronome & Alchemix would like to discuss a bounty with any parties who were involved in the recent Curve exploits. We are offering a 10% bounty of any funds stolen, which are yours to keep if you return the remaining 90%.
You will have no risk of us pursuing this further, no risk of law enforcement issues, etc. If you choose not to partake in the voluntary return and complete the process by 6 August at 0800 UTC, we will expand the bounty to the public, and offer the full 10% to the person who is able to identify you in a way that leads to your conviction in the courts. We will pursue you from all angles with the full extent of the law.
Contact us at curvenegotiation@protonmail.com asap, as the deadline for the completion of the return is not far off.
Please note that anyone emailing us will have to verify their ownership of their address on-chain before any discussions will take place.
You are truly a genius for executing such an attack. from coder to coder, I really give you kudos for that.
The problem is, if you keep all the funds, you will essentially kill DeFi and on top of that, you can never really cash out your bag to fiat, because exchanges would freeze you / law enforcement would get you at some point.
So how about you keep a nice 1000 WETH white hat bounty (which is 10% of the total amount you exploited) and send back all CRV and the remaining ~6800 WETH to the Curve Deployer? This will set you up for the next decades or even for life, depending on where you live.
Because I can assure you if Curve/Aave are going down because of you, there are lots of whales who want to see you dead and trust me some of them will act on it, hiring hitmen etc.
I am just a smaller curve holder but maybe I can help you not being too greedy and risk your young precious life. In heaven, you can’t pay with ETH, only with good karma.
Have a nice day and hope to hear from you soon.
Hello. Hackers are unrecognized geniuses. I am ready to take all the blame for hacking the Curve and I will sit in prison instead of you for 500 eth. You will send 500 eth to me and I plead guilty to theft and I will disclose all the information about MYSELF: place of residence, passport data and place of work. Yeah, I'm crazy. YeeeeearrrrRRRrrrrrrgggghhhhhh......
Bro please change my life. I want to have a chicken farm & be fully independent.
I ready got the land but I do not have any money to build the farm, buy chicks & chicks food.
I asked for help but not nobody as help me so far. I'm not asking for million just $10K so I can start from somewhere