Taipei-based cryptocurrency trading and investment firm Kronos Research has initiated negotiations with the hacker responsible for the recent theft of $25 million from the company’s treasury.
In a public message addressed to the unknown attacker, Kronos Research offered the hacker to return 90% of the stolen funds, and the matter would be dropped, on-chain data shows.
As reported, Kronos Research reported an unauthorized breach of its API key’s last key, which allowed the hacker to gain access to the firm’s funds.
Onchain experts ZachXBT and Lookonchain later confirmed that the attacker absconded with approximately $25 million, primarily consisting of stablecoins.
“At present, we can confirm that the losses are about $26 million in crypto assets, and despite it being a sizable amount, Kronos remains in good standing. All losses will be covered internally, and no partners will be affected,” the firm posted on X.
KronosResearch was attacked and lost ~$25.65M, including 24.57M $USDT, 488.7 $ETH($959K) and 125,056 $USDC.
24.57M $USDT was swapped to 12,457 $ETH, and 125,056 $USDC was changed to 63.6 $ETH.
All 13,010 $ETH was transferred to 7 wallets, of which 1 $ETH to #ChangeNOW. pic.twitter.com/FztcM8YZHS
— Lookonchain (@lookonchain) November 19, 2023
Public Conversation Between Hackers and Victims Become a Trend
This public negotiation between hackers and their victims has become a recurring trend.
Recently, the hacker involved in the KyberSwap exploit even signed one of the transactions that siphoned funds from the decentralized exchange, expressing a willingness to commence discussions when fully rested.
KyberSwap responded by offering a 10% bounty as an incentive for the return of the stolen funds.
Similarly, Curve Finance previously proposed a 10% bounty to hackers in exchange for the restitution of stolen cryptocurrencies. These negotiations were conducted through transaction signatures.
According to DeFiLlama, decentralized finance (DeFi) protocols have suffered thefts amounting to over $1.2 billion this year alone.
Hacks Continue to Take Victims
Hacks and scams have been a significant issue in the crypto space.
According to a report by blockchain security platform Immunefi, there were 76 hacks on crypto and Web3 projects and firms in Q3 2023, a significant increase compared to the 30 hacks reported in the same period in 2022.
Approximately $332 million has been lost to various exploits, hacks, and scams throughout September, marking a record-high month for crypto exploits.
Earlier this month, the DeFi platform Raft also suffered a hack, resulting in the loss of approximately $3.3 million in Ethereum ( ETH).
Raft’s hack marked the second major crypto exploit on the same day. Earlier, an attacker drained approximately $114 million in digital assets from the centralized exchange Poloniex.
Security firm SlowMist recently warned about a wave of crypto thefts orchestrated by fake journalists.
The company said the first instance of this malicious campaign was reported on October 14 when a Twitter user named Masiwei alerted the community about a targeted attack on a friend—Tech, for account theft.