1. Home
  2. white hat hackers

white hat hackers

White hat: I returned most of the stolen Nomad funds and all I got was this silly NFT

Metagame's founder, who's behind the NFT offering said he has no idea whether it'll actually incentivize hackers to return funds, but it'll "be cool if it does!"

Hackers behind the $190 million Nomad Bridge are now being incentivized with "whitehat" themed non-fungible tokens (NFTs) if they return nearly all of the funds they stole from the protocol at the start of this month.

The exclusive NFT, which simply depicts a white wizard’s hat, is being offered by NFT firm Metagame and can be minted by those that return at least 90% of their stolen funds to Nomad.

“If you haven’t yet returned funds, you can still do so now! Metagame checks your on-chain tx history automatically,” the Nomad team stated via Twitter on Aug. 23.

Speaking with Cointelegraph, Metagame founder Brenner Spear noted that while he has “no idea if it’ll nudge anyone to return funds that wouldn’t have otherwise,” the move is part of a broader attempt to foster and support good behavior in the sector:

“I am supportive of people doing the right things for the wrong reasons. More of the right things will happen, and maybe, people will start doing more of the right things for the right reasons too.”

The non-fungible token doesn’t have any function, as it essentially serves as a trophy to represent an act of good faith. The first 50 people to return the funds in relation to this promo, will also receive 100 FF tokens ($53) from web3 platform Forefront.

The Nomad Bridge was initially hacked on Aug. 2, after bad actors discovered a security loophole in Nomad’s smart contracts which allowed them to extract funds that didn’t belong to them via dubious transactions.

According to a post-mortem analysis earlier this month from Coinbase’s principal blockchain threat intelligence researcher Peter Kacherginsky, and Heidi Wilder, a senior associate of the special investigations team, hundreds of copycats then joined in on the fun by copying the same code used to start the hack but slightly modified the target token, token amount and recipient addresses.

Related: Ethereum advances with standards for smart contract security audits

The concept doesn’t appear to have gone down well on Twitter, however, with many users taking the time to clown on the idea. @Huzmond wrote “Incentive go brrrrr” while @aldy_argr questioned whether this was a “comedian account?”

“That's what the team comes up with to solve the problem? Rewarding a hacker with worthless NFT?” @hinzpak chimed, with the Metagame team responding that “It was Metagame’s idea, and built by Metagame - we just brought it, Nomad. They have much more important things to focus on!.”

As of Aug. 8, Cointelegraph reported that white hat hackers had returned around $32.6 million of the total $190 million that was stolen.

South African Central Bank Chief Criticizes Crypto Lobbying Efforts, Warns of Regulatory Capture

Etherescan adds new messaging feature for anons: ‘Blockscan Chat’

The Blockscan Chat service enables users to message each other via their Ethereum wallet addresses.

The team behind the popular blockchain explorer and analytics platform Etherscan has launched an Ethereum-based wallet-to-wallet instant messaging service dubbed “Blockscan Chat.”

Blockscan is currently in beta testing mode, and it currently enables users to engage in an instant wallet-to-wallet chat, access chats from multiple devices, block spammy or unwanted addresses and get notified on the block explorer when a message has been received.

While the new feature is a great way to talk to other anons — say to negotiate an anonymous purchase — it might come in particularly handy for dealing with whitehat hackers, who have often left messages embedded in Ethereum transactions to communicate with individuals and exploited crypto platforms.

Last week’s Multichain hack, which saw a supposed whitehat hacker return 322 Ether (but keep a hefty finder’s fee) and the $610 million PolyNetwork from last year both involved anon discussion via Ethereum transactions as part of negotiations between the culprit and victims.

Etherescan subtly unveiled the new feature via a Jan. 26 tweet that read “wonder what this is for…?” with a screenshot depicting messenger notifications on the platform.

Apart from pleading with hackers to return funds for a bounty, such as the service could be helpful in the NFT market.

Twitter user “bdmartino” argued that the feature could be utilized for the negotiations of NFTs purchases between buyers and sellers, adding that if the transaction was conducted by a decentralized exchange both parties could reduce the fees associated with NFT platforms such as OpenSea.

In terms of user privacy and data storage, Blockscan notes that its information is stored via “global hosting providers” with servers across multiple regions, with inactive data deleted after 24 months.

It also states that the information will not be traded to third parties, but will be disclosed or transferred to partnered parties such as data warehouses, IT service providers and data analytics agencies.

According to its terms of service any user who violates its acceptable use policies such as providing false, inaccurate or misleading information may be barred from a portion of, or all of Blockscan and Etherscan’s related services.

South African Central Bank Chief Criticizes Crypto Lobbying Efforts, Warns of Regulatory Capture

US Government Now Offers Informants Crypto Rewards in Addition to Bank Wires, Suitcases Full of Cash

US Government Now Offers Informants Crypto Rewards in Addition to Bank Wires, Suitcases Full of CashAttendees of the Black Hat hacker conference in Las Vegas were introduced to a new advertisement crafted by the U.S. State Department. According to individuals who accessed the government advertisement via an open Wi-Fi network called “#Rewardsnotransoms” they discovered the U.S. government is offering to pay crypto rewards to individuals who give up information concerning […]

South African Central Bank Chief Criticizes Crypto Lobbying Efforts, Warns of Regulatory Capture

Immunefi partners with Binance Smart Chain on bug bounties to secure BSC projects

Binance is set to match bug bounties paid by Immunefi to white hat hackers that discover vulnerabilities in Binance Smart Chain projects.

Immunefi, a security service outfit that specialized in decentralized finance (DeFi) projects, has inked a collaboration with crypto exchange giant Binance.

According to a release issued on Friday, Immunefi will work in collaboration with Binance to improve the security of projects on the Binance chain. As part of the partnership, Binance will match bug bounty payments issued by Immunefi to white hat hackers who discover vulnerabilities in BSC-based protocols.

As a security outfit, Immunefi has reportedly paid more than $3 million in bug bounties to ethical hackers. Major BSC protocols such as PancakeSwap, DODO, and Zapper among others are already deploying the company’s bug bounty program to uncover vulnerabilities in their code.

For Mitchell Amador, CEO of Immunefi, DeFi requires proactive security measures are necessary to ensure that DeFi becomes the future of finance.

According to the company, incentivizing smart contract code auditing via bug bounties improves the security of the crypto space beyond the usual code verification and auditing protocols.

The news likely marks a significant investment by Binance towards improving quality assurance on the BSC. Back in May, the company brought in blockchain forensics firm CipherTrace to track high-risk fund transfers on the network.

Related: Growing pains? DeFi exploits plunder BSC, which calls for reinforcements

BSC’s emergence as a major DeFi hub at the start of the year also brought with it several security challenges as the hacks and exploits that were common in the Ethereum space also began happening on the Binance chain.

Back in April, Cointelegraph reported that flash loan attacks, as well as other DeFi hacks and exploits, had totaled $285 million since 2019. Since April, these incidents have only increased with PancakeBunny suffered a massive flash loan attack that saw its native token price plummet 90%.

South African Central Bank Chief Criticizes Crypto Lobbying Efforts, Warns of Regulatory Capture