OMG! Hacker Did WHAT?! 😱

by

Right then, gather ’round, you lot! Seems like this KiloEx, a place where folks trade perpetual whatnots (and perpetual what-have-yous), had a bit of a kerfuffle. A right villain made off with a king’s ransom of $7.4 million. That’s enough to buy a small country… or at least a very large pig farm. 🐷

Now, after a few days of silence so thick you could spread it on toast, this digital highwayman, this purloiner of pixels, has coughed up $1.4 million worth of those USDT thingamajigs. Seems even villains have a conscience… or perhaps they just ran out of hard drive space. 🤔

The blockchain boffins over at PeckShield, bless their cotton socks, were the first to shout about it on that X-thingy. Apparently, the ill-gotten gains were sent back to KiloEx’s digital doorstep. KiloEx, you see, is one of them decentralized doohickeys backed by YZi Labs. Which sounds like a place where they invent new flavors of yogurt. 🍦

#PeckShieldAlert #KiloEx exploiter -labeled addresses has returned ~1.4M #USDT to #KiloEx

— PeckShieldAlert (@PeckShieldAlert) April 18, 2025

Turns out, this wasn’t just a simple case of sticky fingers. Oh no, this was a full-blown oracle vulnerability! Sounds nasty, doesn’t it? Essentially, the baddie fiddled with the ETH/USD prices, making them look like they were worth more than they actually were. A bit like when you try to sell your old boots on the market and claim they’re “vintage.” 👢

KiloEx, bless their optimistic little hearts, gave the pilferer a 72-hour ultimatum. A “Return the swag, or else!” kind of deal. They even dangled a whitehat bounty – 10% of the loot! A tempting offer, unless you’re the sort who enjoys sleeping on a bed made of money… which, let’s be honest, probably isn’t very comfortable. 💰

But when the rascal didn’t reply, KiloEx did what any self-respecting victim of grand larceny would do: they called the Hong Kong fuzz! They even hired some cyber-sleuths from SlowMist. Sounds like a firm that specializes in catching snails… or maybe just slow-moving hackers. 🐌

Dear KiloEx Users,
We would like to update you on the latest developments regarding the April 15th hacker incident.

1. We have reported the incident to the Hong Kong police, and a formal case has been filed. KiloEx is working with both the Criminal Division and the Cybercrime…

— KiloEx (@KiloEx_perp) April 17, 2025

Now, while the returned sum is a bit shy of the 90% they were hoping for, it’s still a step in the right direction. Maybe the baddie had to pay off some gambling debts? Or perhaps they just needed a new hat. 🎩 We may never know.

Meanwhile, KiloEx is trying to get back on its feet, promising to settle things based on the pre-heist prices. So, no need to panic sell your digital turnips just yet. They’re also working on a user compensation plan, which is good news for everyone except the hacker, presumably. 🥳

Read More

2025-04-18 12:44