$2.26M Exploit on
foom.cash
On February 27th at 7:30 AM,
foom.cash was hit for $2.26M.
We have successfully recovered ~81% of the funds ($1.84M) thanks to an elite white-hat response.
The Damage & Recovery
Total Drained: $2.26M
Recovered: $1.84M (90% of Ethereum funds) via
@DecurityHQ.
Bounty/Costs: $420k total.
$320k to
@duha_real (White-hat/Researcher).
$100k to
@DecurityHQ (Security fee).
From Contestant to White-hat
The exploit was first triggered by
@duha_real. Interestingly, he was the winner of our Bitcointalk hacking contest held a year ago. He identified the vulnerability and moved to secure the funds on Base before malicious actors could strike, while
@DecurityHQ handled the rescue operation on Ethereum.