Share this article
The self-labeled “white hat” hacker involved in the $11.6 million exploit of Prisma Financ is demanding unusual concessions before returning the stolen funds.
This hacker, one of multiple attackers in the recent exploit of liquid staking protocol Prisma Finance, sent the communication through an on-chain message. In the message, the hacker criticized the Prisma Finance core developers for not catching the smart contract vulnerability that led to the theft. Along with the criticism, the hacker demanded a public apology from the developers, adding that they should reveal their identities.
“I like to see your faces lying sincere words,” the hacker said. “I hope you could spend time thinking thoroughly and sincerely of what mistakes you made.”
Prisma Finance has since paused the protocol and published a detailing the lack of input validation on a smart contract function that enabled the exploit. The team stated that retrieving user funds is their main focus, and unpausing the protocol will follow once all positions are deemed safe.
According to the published post-mortem report, the pause was done as a security measure to block out certain operations in the case of such an emergency. Functions such as opening new vaults, increasing collateral debt, and depositing into Prisma’s Stability Pools are disabled. Despite this, the developers from Prisma Finance assure their users that they may still withdraw c
Go to Source to See Full Article
Author: Vince Dioquino