{"id":13385,"date":"2024-05-09T19:34:19","date_gmt":"2024-05-09T16:34:19","guid":{"rendered":"https:\/\/forklog.com\/en\/hacker-returns-51-eth-to-victim-from-stolen-68-million\/"},"modified":"2024-05-09T19:34:19","modified_gmt":"2024-05-09T16:34:19","slug":"hacker-returns-51-eth-to-victim-from-stolen-68-million","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/hacker-returns-51-eth-to-victim-from-stolen-68-million\/","title":{"rendered":"Hacker Returns 51 ETH to Victim from Stolen $68 Million"},"content":{"rendered":"<p>A perpetrator who stole $68 million through an &#8220;address poisoning&#8221; scheme has contacted the victim. The hacker returned 51 ETH (~$153,800) to the user with a message to reach out via Telegram. This is evidenced by <a href=\"https:\/\/etherscan.io\/idm?addresses=0x20cbf5c444d4f07f4cb5c37585e59f4ac1b472f1,0x1e227979f0b5bc691a70deaed2e0f39a6f538fd5&#038;type=1\" title=\"on-chain data\">on-chain data<\/a> on the Etherscan platform.<\/p>\n<div class=\"wp-block-text-wrappers-update-2 article_update\"><time class=\"gtb_text-wrappers_update_time\">May 11, 2024 | 09:37<\/time><span class=\"gtb_text-wrappers_update_head\">Update: <\/span><\/p>\n<p>According to <a href=\"https:\/\/etherscan.io\/address\/0x1e227979f0b5bc691a70deaed2e0f39a6f538fd5\" title=\"\">on-chain data<\/a>, the hacker returned nearly all the stolen funds totaling 22,960 ETH (~$67.1 million). <\/p>\n<\/div>\n<p><!--more--><\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>\n<cite>&#8220;Please leave your Telegram, I will contact you,&#8221; the scammer wrote to the victim twice.<\/cite><\/p><\/blockquote>\n<p>Communication was conducted through the Input Data field in the Ethereum transaction.<\/p>\n<p>The message from the perpetrator came after the victim <a href=\"https:\/\/www.theblock.co\/post\/293526\/poisoning-attack-scammer-who-stole-71-million-asks-victim-for-telegram-sends-51-eth\">requested<\/a> the return of most funds on May 5. The 51 ETH represents only 4.2% of the requested amount.<\/p>\n<p>&#8220;After this, there is no turning back,&#8221; <a href=\"https:\/\/etherscan.io\/idm?addresses=0x1e227979f0b5bc691a70deaed2e0f39a6f538fd5,0xcf049aa810cae4c402908e77bbf14710673cda6d&#038;type=1\">wrote<\/a> the victim, adding:<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>\n<cite>&#8220;We both know it is impossible to clean these funds. You will be tracked down.&#8221;<\/cite><\/p><\/blockquote>\n<p>The user urged the hacker to keep 10% of the stolen amount, returning the rest by May 6.<\/p>\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/u1f987.com\/wp-content\/uploads\/90.webp\" alt=\"90\" class=\"wp-image-232546\"\/><figcaption class=\"wp-element-caption\">Data: <a href=\"https:\/\/etherscan.io\/idm?addresses=0x1e227979f0b5bc691a70deaed2e0f39a6f538fd5,0xcf049aa810cae4c402908e77bbf14710673cda6d&#038;type=1\">Etherscan<\/a>.<\/figcaption><\/figure>\n<div class=\"wp-block-text-wrappers-update-2 article_update\"><time class=\"gtb_text-wrappers_update_time\">May 10, 2024 | 15:28<\/time><span class=\"gtb_text-wrappers_update_head\">Update: <\/span><\/p>\n<p>According to PeckShield, the hacker returned ~50% of the funds \u2014 11,460 ETH worth $34.7 million.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/PeckShieldAlert?src=hash&#038;ref_src=twsrc%5Etfw\">#PeckShieldAlert<\/a> ~50% of the stolen funds (~11,446.87 <a href=\"https:\/\/twitter.com\/search?q=%24ETH&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$ETH<\/a> worth ~$34.7m) has been returned to the victim&#8217;s address <a href=\"https:\/\/t.co\/QRm6ZfWygr\">pic.twitter.com\/QRm6ZfWygr<\/a><\/p>\n<p>\u2014 PeckShieldAlert (@PeckShieldAlert) <a href=\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1788880553653002311?ref_src=twsrc%5Etfw\">May 10, 2024<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div>\n<p>Earlier, on May 3, an unknown user lost 1,155 WBTC.<\/p>\n<p>In &#8220;address poisoning,&#8221; perpetrators deceive or use technical tricks to make the victim send cryptocurrency to an incorrect address, which may resemble the legitimate one by its first and last characters.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A perpetrator who stole $68 million through an &#8220;address poisoning&#8221; scheme has contacted the victim. The hacker returned 51 ETH (~$153,800) to the user with a message to reach out via Telegram. This is evidenced by on-chain data on the Etherscan platform. May 11, 2024 | 09:37Update: According to on-chain data, the hacker returned nearly [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":13384,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"","news_style_id":"","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44],"class_list":["post-13385","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime"],"aioseo_notices":[],"amp_enabled":true,"views":"21","promo_type":"","layout_type":"","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/13385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=13385"}],"version-history":[{"count":0,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/13385\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/13384"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=13385"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=13385"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=13385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}