The attacker responsible for the Curve Finance attack on July 30 has returned $8.9 million of the stolen funds. They claim to have done so in order to avoid “ruining” the protocols they exploited. The returned funds consist of 4,820.55 Alchemix ETH (alETH) worth approximately $8,889,118, which was sent to the Alchemix Finance team, and 1 Ether (ETH) worth approximately $1,844, which was sent to the Curve Finance team. The attack affected the Alchemix Finance alETH-ETH, JPEG’d pETH-ETH, and Metronome sETH-ETH pools. The JPEG’d pool was front-run by a miner extractable value (MEV) bot, resulting in the proceeds going to the bot instead of the attacker. The total losses from the exploit were initially estimated at $47 million but were later updated to $61.7 million. The attacker’s return of funds represents approximately 15% of the total amount drained. It is unclear if the MEV bot will also return the funds it acquired.
Summary:
– Attacker behind Curve Finance attack returns $8.9 million of stolen funds
– Funds returned to Alchemix Finance and Curve Finance teams
– Attack affected multiple pools, including Alchemix Finance alETH-ETH and JPEG’d pETH-ETH
– Total losses from exploit initially estimated at $47 million, later updated to $61.7 million
– Attacker’s return represents approximately 15% of total amount drained
– Uncertainty regarding return of funds acquired by MEV bot
