{"id":68351,"date":"2022-10-10T17:15:01","date_gmt":"2022-10-10T14:15:01","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=68351"},"modified":"2025-09-07T13:40:08","modified_gmt":"2025-09-07T10:40:08","slug":"hacker-agrees-to-return-another-2-74-million-to-transit-swap-for-a-686000-bounty","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/hacker-agrees-to-return-another-2-74-million-to-transit-swap-for-a-686000-bounty\/","title":{"rendered":"Hacker agrees to return another $2.74 million to Transit Swap for a $686,000 bounty"},"content":{"rendered":"<p>The decentralised cross-chain exchange Transit Swap, <a href=\"https:\/\/medium.com\/@TransitSwap\/updates-about-transitfinance-317f4fe67931\">said<\/a> that the hacker agreed to return 10,000 BNB ($2.74 million) to the victims of the exploit.<\/p>\n<p>6,500 BNB ($1.79 million) have already been sent to the platform&#8217;s wallet, PeckShield confirmed.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/hashtag\/PeckShieldAlert?src=hash&#038;ref_src=twsrc%5Etfw\">#PeckShieldAlert<\/a> <a href=\"https:\/\/twitter.com\/TransitFinance?ref_src=twsrc%5Etfw\">@TransitFinance<\/a> Whitehat #1 0x75F2ab\u2026D46 has returned 6,500 <a href=\"https:\/\/twitter.com\/search?q=%24BNB&#038;src=ctag&#038;ref_src=twsrc%5Etfw\">$BNB<\/a> (~$1.79M) to TransitFinance Funds Receiver <a href=\"https:\/\/t.co\/kv7fLBoVE6\">pic.twitter.com\/kv7fLBoVE6<\/a><\/p>\n<p>\u2014 PeckShieldAlert (@PeckShieldAlert) <a href=\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1579448093896241152?ref_src=twsrc%5Etfw\">October 10, 2022<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\n<\/div>\n<\/figure>\n<p>Transit Swap&#8217;s developers allowed the hacker to keep 2,500 BNB ($686,000) as a bounty for the vulnerability discovered. According to <a href=\"https:\/\/bscscan.com\/address\/0x75f2aba6a44580d7be2c4e42885d4a1917bffd46#internaltx\">Etherscan<\/a>, on 10 October these funds were sent to the cryptocurrency mixer Tornado Cash, which had previously been <a href=\"https:\/\/u1f987.com\/en\/news\/us-sanctions-tornado-cash-the-ethereum-mixer\">sanctioned by the U.S. Treasury<\/a>.<\/p>\n<p>If the remaining 3,500 BNB is returned, the exchange promises not to initiate criminal proceedings against the hacker.<\/p>\n<p>Earlier in October, an unknown actor exploited a bug in Transit Swap&#8217;s smart contract and <a href=\"https:\/\/u1f987.com\/en\/news\/decentralized-exchange-transit-swap-loses-21-million-in-hacker-attack\">stole $21 million<\/a> of user funds.<\/p>\n<p>After blockchain-security researchers traced the hacker&#8217;s IP address, he returned 70% of the stolen amount.<\/p>\n<p>On 3 October, the attacker reimbursed the platform a further 2,612 BNB (about $750,000). In doing so, he made <a href=\"https:\/\/u1f987.com\/en\/news\/transit-swap-hacker-sent-assets-to-tornado-cash\">40 transfers of 100 BNB to Tornado Cash<\/a>.<\/p>\n<p>Read ForkLog&#8217;s Bitcoin news in our <a href=\"https:\/\/telegram.me\/forklog\" target=\"_blank\" rel=\"nofollow noopener\">Telegram<\/a> \u2014 cryptocurrency news, prices and analysis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The cross-chain exchange Transit Swap, which was hacked earlier this month, said that the hacker agreed to return 10,000 BNB ($2.74 million) to the victims of the exploit.<\/p>\n","protected":false},"author":1,"featured_media":68352,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1154,1210,1314],"class_list":["post-68351","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-crimes","tag-cross-chain-protocols","tag-tornado-cash"],"aioseo_notices":[],"amp_enabled":true,"views":"24","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/68351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=68351"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/68351\/revisions"}],"predecessor-version":[{"id":68353,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/68351\/revisions\/68353"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/68352"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=68351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=68351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=68351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}