\n
![](\"https:\/\/images.cointelegraph.com\/images\/840_aHR0cHM6Ly9zMy5jb2ludGVsZWdyYXBoLmNvbS91cGxvYWRzLzIwMjMtMDMvOGUwY2JmYzUtNTc5YS00MGY3LTg5YTYtMjkyMDY0MTY0MmM5LmpwZw==.jpg\")
<\/p>\n
\n<\/p>\n
Ethereum-based noncustodial lending protocol Euler Finance is trying to cut a deal with the exploiter that stole millions from its protocol, demanding the hacker returns 90% of the funds they stole within 24 hours or face legal consequences.<\/p>\n
Euler Labs sent its ultimatum to the flash loan<\/a> attacker who\u00a0exploited the platform for $196 million<\/a>\u00a0by transferring the hacker 0 Ether (ETH<\/a>)\u00a0with an attached message on March 14:<\/p>\n \u201cFollowing up on our message from yesterday. If 90% of the funds are not returned within 24 hours, tomorrow we will launch a $1M reward for information that leads to your arrest and the return of all funds.\u201d<\/p><\/blockquote>\n euler just sent an on-chain message to the hacker pic.twitter.com\/0wKIW51NjM<\/a><\/p>\n \u2014 0xngmi (llamazip arc) (@0xngmi) March 14, 2023<\/a><\/p><\/blockquote>\n The threat of law enforcement comes as Euler sent<\/a> the hacker a much more civil message the day before.<\/p>\n \u201cWe understand you are responsible for this morning\u2019s attack on the Euler platform,\u201d it read. \u201cWe are writing to see whether you would be open to speaking with us about any potential next steps.\u201d <\/p>\n The request for a 90% fund return would see the hacker send back $176.4 million while holding onto the remaining $19.6 million.<\/p>\n However, many observers have noted that the hacker has very little to no incentive to follow through with the deal.<\/p>\n Look over your shoulder for the rest of your life, or take a $20m deal. No brainer. <\/p>\n Although, they could easily be state actors and aren\u2019t really worried about low levels feds. https:\/\/t.co\/i5zUSDqFca<\/a><\/p>\n \u2014 drnick ️\u00b2 (@DrNickA) March 15, 2023<\/a><\/p><\/blockquote>\n \u201cIf I was the hacker I\u2019d simply say \u2018to anyone who manages to track me down, I will give you $2 million not to tell Euler,\u2019\u201d one observer said<\/a>.<\/p>\n \u201cYeh he has 200 Million they have 2 Million. He wins in a bidding war,\u201d another Twitter user wrote<\/a> in response. <\/p>\n Euler Labs said it was already working with law enforcement in the United States and the United Kingdom, along with engaging blockchain intelligence platforms Chainalysis, TRM Labs and the broader Ethereum community, to help track down the hacker.<\/p>\n An update on our work today to recover funds for Euler protocol users. <\/p>\n Here are a few actions we took immediately:<\/p>\n 1. Stopped the direct attack as soon as possible by helping disable the EToken module, which blocked deposits and the vulnerable donation function<\/p>\n 2. Engaged TRM\u2026 https:\/\/t.co\/6ZClE9uGoH<\/a><\/p>\n \u2014 Euler Labs (@eulerfinance) March 14, 2023<\/a><\/p><\/blockquote>\n Related: <\/em><\/strong>DeFi protocol Platypus suffers $8.5M flash loan attack, suspect identified<\/em><\/strong><\/a><\/p>\n The lending platform added it was able to promptly stop the flash loan attack by blocking deposits<\/a> and the \u201cvulnerable\u201d donation function.<\/p>\n As for the exploited code, the team explained that the vulnerability \u201cwas not discovered\u201d in the audit of its smart contract, which had existed on-chain for eight months until bei exploited on March 13.<\/p>\n Euler Labs works with various security groups to perform audits of the Euler Finance protocol. <\/p>\n While the vulnerable code was reviewed and approved during an outside audit, the vulnerability was not discovered as part of the audit. <\/p>\n The vulnerability remained on-chain for eight\u2026 https:\/\/t.co\/M3PYSOwHhL<\/a><\/p>\n \u2014 Euler Labs (@eulerfinance) March 14, 2023<\/a><\/p><\/blockquote>\n<\/div>\n\n
\n
\n
\n