This Hacker Is Making It Rain ETH—And Hiding In Plain Sight?! 🕵️‍♂️💸

Raise your hand if you’ve ever just, you know, woken up from a two-year nap and thought, “How about a little light money laundering to start my week?” No? Just the hacker who lifted $4.67 million from Voltage Finance? Well, he’s apparently back and moving 100 ETH (which is $182K—thanks for doing the math, CertiK, now please do my taxes) straight to Tornado Cash, because nothing says “subtle” like using a service named after a natural disaster.

According to CertiK (think the Sherlock Holmes of crypto, except with more caffeine and less tweed), the Ether took a jaunt through an address straight from the original 2022 epic heist—because, you know, hackers love to recycle.

Flashback to March 2022: Some enterprising villain realized the ERC677 token had a little “callback function.” To mere mortals, that’s as mysterious as why Crocs keep trending, but hackers know it means “drain the lending pool” time! Voltage Finance’s pool was left drier than my potted plant after vacation (RIP, Fern).

The loot wasn’t just ETH. There was USDC, BUSD, WBTC—basically, this person’s wallet is so diverse, it could host a reality show called “Keeping Up with the Crypto-ians.”

The address used for the transfer went full Sleeping Beauty for the last 166 days, which in crypto years is… wait, it’s still just 166 days, but it FEELS like forever.

Voltage Finance, doing their best Liam Neeson impression, flagged the hacker’s address on Etherscan, begged the exchanges to play defense, and even tried some polite DMs (“Hey, would love it if you could return my millions, k thx”).

Voltage Finance Staking Pools: 2024 Is Not Their Year

Because every DeFi story needs a sequel, Voltage Finance’s Simple Staking pools got hit in March 2024 for another $322K. The “whoops” heard ’round the blockchain.

Voltage responded by offering a $50,000 bounty—which is basically, “Here’s a coupon for 15% off your next robbery if you please bring back the rest.” Meanwhile, they also cut off a developer’s access just in case he was feeling “inspired” by Ocean’s Eleven. Cops were notified. Law & Order: DeFi Unit, coming soon to a streaming service near you.

Meanwhile, crypto losses in April absolutely spiked—by 1,163%, because why aim for small numbers when you can attempt to break math? This was mostly due to a single massive heist where one individual lost 3,520 BTC, or $330.7 million. Somewhere, a grandma is clutching her hardware wallet in existential terror.

Subtracting that mega-heist, April’s crypto oopsies still topped $34M, which—let’s face it—would bankroll several reality shows. On the plus side, hackers sometimes have a heart: one returned $7.5M after just four days. Maybe he misplaced his conscience, then found it under the couch with $18M in loose change.

ZKsync Association also recovered $5 million after their airdrop contract got bamboozled, so, you know, progress!

Read More

2025-05-07 09:41