Updates about TransitFinance
Through the joint efforts of multiple teams, more data were analyzed and tracked, and more effective information was found.
The hacker made a second refund at 06:00 AM UTC on October 3rd. Refund related links:
Ethereum：
https://etherscan.io/tx/0x3da1843247070fbcfcf9c8d0e02dcd660ea882640fc842625b675aabc45e6a2a
BNB Smart Chain：
https://bscscan.com/tx/0xd941c6012656dae9fe16882becffdf41d91836b19bbcea659cad65f5049c5f83
https://bscscan.com/tx/0x53495bd2fddefd179ef107e43d5d2dea922ceda4bb1c9bc183e265dcc6474e02
As of the current statistics, the total amount hacked is $28.9M, and about $18.9M has been returned ( all refunds are from the same hacker that with the largest amount involved ). The incident is still being progressed and resolved, and we will continue to communicate and try our best to recover more assets for users.
At the same time, we are formulating bug bounty rules. We hope that other hackers who participated in this incident will return the user’s assets as soon as possible to avoid escalating the situation. The relevant hacker addresses are as follows:
#1. $24.1M (78% returned)
0x75f2aba6a44580d7be2c4e42885d4a1917bffd46
0xfa71e31efa184e3948c486e7f411707b4da290fb
#2. $1.07M
0xA957910Cb426Cb52dfc6DFf5E582860A22Db70d2
0x90b50cab27ede09a0d59743e4112d6e87e838ff4
#3. $0.36M
0x87be7fa8ff8a945cb56158b7972036731c363c4c
0x99334c17a9b93c9bc729b88121edad68621b038c
0x16ff631fe296e04bc9e5dcf84ef6b816cab32dc3
#4. $0.24M
0x0000000038b8889b6ab9790e20FC16fdC5714922
0x313051063d387623673b915512a0b267c24921a7
0x8ab713888ba2b70c7bd3f43aacb17731e9a1ec47
#5. $0.58M
0xcc3d51c137e2360a34d58840e65a501cfc33ae7d
0x8021e721beb839ffdc80502e27014933aa6deaa6
#6. $2.34M
0x6e6046851f6f44622538e8b836dcb00b042cc5ea
0x00000000050c19633e921bca8ca99523b7637d48
Due to the large number of users and funds affected by the incident, the relevant hacked data will be publicized within 2 days, and the return plan will be improved. We will properly return the user assets as soon as possible. We sincerely appreciate all the users’ trust and patience.
Please be alert to the fraudulent activities that take advantage of this incident, and do not trust anyone who chats with you privately, and do not share your private key and mnemonic with anyone! Please refer to the official announcement!
