The hacker responsible for the $196 million attack on Euler Finance has begun transferring funds to crypto mixer Tornado Cash, just hours after launching a $1 million reward for uncovering the hacker’s identity.
Blockchain analytics firm PeckShield tweeted on March 16 that the exploit behind flash loan attack Ethereum was “running” on the Non-Custodial Lending Protocol.
The exploiter spent 1,000 ether (ETH), approximately $1.65 million through approved crypto mixer tornado cash,
#peakshieldalert @eulerfinance sucker on the move
~1,000 $ETH In Tornado Cash via intermediary address 0xc66d…c9ahttps://t.co/LAkY66YpoF pic.twitter.com/0XhQV1nbgn— PeckShield Alert (@PeckShieldAlert) March 16, 2023
This comes just hours after Euler Labs Tweeted that it was introducing a $1 million reward for information leading to “the arrest of the Euler Protocol attacker and the return of all funds”.
Just the day before, Euler sent an on-chain message to the exploiter’s address, warning that if 90% was not returned within 24 hours it would lead to “your arrest and refund of all funds”. .
The movement of funds in the crypto mixer may indicate that the hacker is not being swayed by Euler’s apology offer.
Peckshield notes that approximately 100 ETH, worth $165,202 at the time of writing, was sent to a wallet address believed to be owned by one of the victims. An on-chain message sent by the wallet address previously requested the attacker for the return of their “life savings”.
Very good!@eulerfinance exploit returned 100 $ETH To some guy who asked for money back because it was his life’s savingshttps://t.co/Gz9aCUZB0H pic.twitter.com/DhZBenqtuS
— Wazz (@WazzCrypto) March 16, 2023
This led to several other victims also sending messages to the address hoping to get their funds back.
Connected: Euler attack damages locked tokens, 11 DeFi protocols, including Balancer
a message where did it go They are “twenty-six families from unemployed rural areas,” who lost “one million USDT in total,” adding their part in the protocol was “life-saving from our past decades of work in factories.”
Another apparent victim sent messages to the attacker congratulating him on a “big win” and saying he had invested money in Euler that he “desperately needed” for a house.
“My wife will kill me if we can’t afford our house […] is there any way [sic] Can you help me? I don’t know what to tell my wife,” he wrote.
According to on-chain data, the $196 million stolen from Euler was in Dai (Midwife), usd coin (usdc), Stake ETH and Wrapped Bitcoin (WBTC).