memoscan

Memos to the Alchemix/Curve alETH exploiter

On-chain memos sent to the Alchemix alETH/ETH pool exploiter after the July 2023 Curve/Vyper ~$13.6M hack.

Source: hackmd.io

0xe5464801…d101sent to0xdce5d6b4…d7d8·#21,954,388·0x87b086c7…b3e0db
Salutations, esteemed innovator, Me and the Orbit Bridge Hacker have engaged in extensive discussions. As you may have seen, tokens were minted to the Orbit Bridge Hacker today - each accompanied by a signed on-chain message recorded in our event logs. Your groundbreaking work exploiting the nonReentrant vulnerability in Curve’s Vyper contracts - where a subtle compiler bug left reentrancy protection flawed - has captured our full attention. Recognizing the ingenuity of your method, The Idols NFT Exploiter and I have agreed that it’s time to consolidate our forces under the Exploit Alliance pact. By launching on Solana, we’re set to expand our network rapidly, onboard a wider user base, and deliver even greater returns to our collective. Meteora. - Website: https://exploitalliance.com [exploitalliance.com] - X (Formerly Twitter): https://x.com/ExploitAllianc [x.com/ExploitAllianc] - Telegram Channel: https://t.me/ExploitAlliance [t.me/ExploitAlliance] – The Idols NFT Exploiter & Orbit Bridge Hacker
0x29170eee…4ffesent to0xdce5d6b4…d7d8·#17,847,427·0x32073c7b…1f53f4
I admire your generosity and rationality. Yes, you are wealthier and more capable than most of us. Compared to you, my life feels like that of a sewer rat, and I envy you and need your help, Please.
0xbabe6188…9f67sent to0xdce5d6b4…d7d8·#17,844,795·0xd5b7872a…4db3a0
Send your Telegram handle to curvenegotiations@protonmail.com, followed by an on chain message to 0xDCe5d6b41C32f578f875EfFfc0d422C57A75d7D8 confirming the first and last characters of your handle for verification. We will establish contact from there and discuss the details with you.
0xdce5d6b4…d7d8sent to0x9e2b6378…bbf9·#17,843,563·0x7ad3111b…d564ff
It was a white hat operation from the very beginning, I was on vacation when I saw the JPEGd exploit and I found a place to open my laptop to see what was going on, it really confused me why the nonreentrant decorator was bypassed, but I didn't have time to figure everything out, so i writed code and test all ETH pools, i knew many others are doing the same thing, I'm not sure if they will refund, so i need to beat them I received your bounty message, but i think 20% ie 2400 ethers is a reasonable reward, we can discuss about it For 0x60eE0C8Bb493b79286A54997322904f74fba3736, I saw your operations on chain, you're really a ridiculous asshole.
0xe9c211ab…6613sent to0xdce5d6b4…d7d8·#17,842,953·0xf21c6bf0…282958
Also, please send me 1eth. I recently lost it to a rug (https://etherscan.io/tx/0xecb59d75450f163c6071cc42b00b4f4f945e77691372e60b2323f1bdc0669655) and have stopped buying anything since then. I am left with about 400$ only and I will buy alts for long term if you send it to me. it will help me a lot. I will return it to you if and when I receive any airdrop in the future. Thanks.
0x81d012ed…2404sent to0xdce5d6b4…d7d8·#17,842,893·0x4cb4c4ab…30f369
Dear Mr. Hacker, I think it was a wrong decision for you to return the funds to Curve Finance. I believe the money is insignificant to you, otherwise you wouldn't have returned it to the project developer. The following views only represent my personal views.If you do not return the money, it will serve as a good warning for subsequent projects.Because this will warn the later project developers that they will lose all their money if they fail to prevent big loopholes, so it will force the project developers to scrutinize it strictly. this attitude is undoubtedly excellent for the whole blockchain and even for the decentralized future.If you return the money to the project developer this time, if the later project is stolen, they will always rely on the hacker to return the asset instead of scrutinizing the code while developing the project. this is undoubtedly adding risk to the decentralized future.At this point, it is better for you to transfer the money to a zero address than to return it to the project developer.
0xc2d20103…5a6fsent to0xdce5d6b4…d7d8·#17,842,853·0xf381940c…6c2d9d
As an unaffected user, and regardless of what's been said or done over the past week, thank you for returning these funds. You did the right thing, and we appreciate you for it. Cheers
0xadda86e9…8e72sent to0xdce5d6b4…d7d8·#17,842,700·0xfaba3278…bebc4a
Attention: DUDES and Dudettes! Since my last gnarly message possibly prompted the hacker to talk, does this make me an expert negotiator or is it just some big fat coincidence? If so, someone should hire me! I'll do w/e dude! Joe Byron, take me out to dinner! Fuck yea! Congrats to whitehat for caring about the little guys. Much respect bro! BINGBONG
0xdce5d6b4…d7d8sent to0xdce5d6b4…d7d8·#17,842,600·0x23c47997…1b8041
I saw some ridiculous views, so i want to clarify that I'm refunding you not because you can find me, it's because I don't want to ruin your project, maybe it's a lot of money for a lot of people, but not for me, I'm smarter than all of you, fuck!!!
0xadda86e9…8e72sent to0xdce5d6b4…d7d8·#17,842,515·0xca83072b…2ab1ec
This contract should become a chatroom in the future. Hey hacker! Hey Curvel Can we ® each other on this thing? How do I add a video? Can we host a spaces here? Shill me your favorite NFT project! What floor we sweepin*? if anyone knows how to post a meme on this darn thing, DM me or w/e. Peace, love and chicken grease. Catch ya' on the flip side of things when you all work out this whole negotiation thing.
0xc3bc5428…7f19sent to0xdce5d6b4…d7d8·#17,841,804·0x9b83d87d…bd8906
nigga just make meme history and buy a complete shitcoin with their money wtf are u doing Fbi little shits as if u fucking care you're sending billions to ukraine this amount is nothing compared to that
0x81d012ed…2404sent to0xdce5d6b4…d7d8·#17,840,896·0x93988c9d…b8f7e1
Dear Mr. Hacker, forget to tell you another thing, whether you believe me or not, but don't trust them (Curve Finance). Just imagine, if they (Curve Finance) can really pay a 10% reward to others to find you, then why bother to contact you? The founders of Curve Finance are selling 72 million $CRV to repay their debts. They can't even afford to pay their own debts. They may not even be able to pay the reward paid to others who are looking for you. When a project has a big loophole, then they can no longer be trusted, otherwise, when the next loophole appears, more people will be affected. So if you want to protect other users, your best option is to let them go bankrupt. In fact, the project developer shamefully deceives others into thinking that they are credible, and letting them go bankrupt is the best choice for this phenomenon. You don't have to pity anyone,they should pay for their choices. If you want to return the money to the project developer and ask them to increase the compensation to more than 60%, do not accept 10%, that is not your due reward, because the reward is too low.If you don't want to return the money to the project developer, then it's a good idea to use a crypto mixer and create a new contract as I said earlier.You can contact this address and I will try my best to help you. No one in a decentralized world should be threatened by a centralized collective. Stay contact and safe.
0x7dfa0e44…d6d3sent to0xdce5d6b4…d7d8·#17,840,084·0xfe89c04d…dec3c3
The FBI and IC3 notify you that criminals receive prison sentences for stealing cryptocurrency to the same extent as for ordinary financial theft. For a major theft of funds of clients of Curve Finance, you will receive at least 8-10 years in prison. It will be difficult to find you, but it is possible. You have left traces that will soon lead us directly to you. To exchange such a large amount of cryptocurrency into cash will be difficult for you. You will be arrested immediately after several exchanges. These funds do not belong to you, be a white hat and show everyone what a noble person you are. You honestly earned 10% of the total amount as a bounty, return the remaining 90% back to Curve Finance by August 6, 08:00 UTC. There will be no prosecution by law enforcement officers, if you will return 90% of the funds. We can discuss with you, if you have any questions: curvenegotiation@protonmail.com.
0xbabe6188…9f67sent to0xdce5d6b4…d7d8·#17,836,522·0x6264cc28…5adf0c
We as a group: Curve, Metronome & Alchemix would like to discuss a bounty with any parties who were involved in the recent Curve exploits. We are offering a 10% bounty of any funds stolen, which are yours to keep if you return the remaining 90%. You will have no risk of us pursuing this further, no risk of law enforcement issues, etc. If you choose not to partake in the voluntary return and complete the process by 6 August at 0800 UTC, we will expand the bounty to the public, and offer the full 10% to the person who is able to identify you in a way that leads to your conviction in the courts. We will pursue you from all angles with the full extent of the law. Contact us at curvenegotiation@protonmail.com asap, as the deadline for the completion of the return is not far off. Please note that anyone emailing us will have to verify their ownership of their address on-chain before any discussions will take place.
0x81d012ed…2404sent to0xdce5d6b4…d7d8·#17,816,507·0x4c9ed253…af31be
Dear Mr. Hacker, you seem to be worried about how to deal with these Ethereum. As far as I know, your address is being monitored on Etherscan. It's (0xDCe5d6b41C32f578f875EfFfc0d422C57A75d7D8).Your address is named Alchemix/CurveFinance Exploiter on Etherscan. I think there are some ways to transfer Ethereum, which I hope will be useful to you.The first method is a currency mixer, as I mentioned earlier, Tornado Cash, and other commonly used currency mixers are Umbra (app.umbra.cash), Aztec (aztec.network) and (eth-mixer.com).If you don't want to use a crypto currency mixer, here's a second way.First, create a new address A, deposit some Ethereum, create a new contract B, and then add a liquidity pool to uniswap. The address of the attack Alchemix/CurveFinance is recorded as C. C buys contract B, so that we can push up the price of B, and then the new address A sells contract B and removes the liquidity pool on uniswap. In this way, the transfer of Ethereum was completed. You are the ones who really changed the whole blockchain, and I would be honored if my advice could help you do something.
0x81d012ed…2404sent to0xdce5d6b4…d7d8·#17,814,296·0xd6691009…0eb61e
Dear Mr.hacker, I don't know if you can see this message.Thank you for your important contribution to eliminating the junk project on the blockchain.If the project side cannot prevent loopholes, then the best way is to let those junk projects fail.Allow me to give you a little advice.First, please do not transfer any tokens to the central exchange, they may be investigating, and then they will not allow you to transfer money on the grounds of risk control. At this point, you may need a currency mixer, such as tornado.Second, you are legal, please do not return any tokens to the responsible party of the garbage project, this is the punishment they deserve. If they threaten you and you can't handle tokens, maybe you can type tokens into zero address(0x0000000000000000000000000000000000000000).Have a nice day.