Crypto Finance Firm Offers $2m Bug Bounty to Hackers

A decentralized lending platform that lost $80m to hackers has presented them an astonishing multimillion-dollar bug bounty in return for the stolen funds.

Qubit Finance uncovered at the conclude of past 7 days that an attacker experienced exploited a vulnerability in its QBridge deposit function.

In undertaking so, they managed to get away with a big amount of Ethereum, which they transformed to Binance coins with a benefit of tens of hundreds of thousands of pounds. In effect, they had been ready to exploit a oversight in Qubit Finance’s code to withdraw Binance tokens with no depositing any Ethereum.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The company pleaded with its attacker to return the funds, addressing them on Twitter as “dear exploiter.”

“We propose you to negotiate immediately with us prior to having any additional action,” it wrote on Friday. “The exploit and loss of cash have a profound outcome on countless numbers of genuine men and women. If the greatest bounty is now what you are wanting for, we are open to have a conversation. Let us determine out a alternative.”

A adhere to-up take note verified the business would supply a “maximum” bug bounty and not seek to push charges if the attacker returned the money.

Subsequent messages more than the weekend then enhanced this ‘maximum’ bounty to $1m and then on Sunday to $2m.

It is unclear no matter if the tactic was merely meant to acquire investigators More time or if the business was genuinely geared up to hand above a significant bug bounty to a cyber-prison.

A new put up issued hrs in the past exposed the organization is operating on a new website that will enable affected end users to entry their electronic wallets to file stories with regional law enforcement. Nonetheless, they have tiny hope of having their funds again except if the cyber-thieves make a decision to cooperate with Qubit Finance.

A report from Chainalysis very last 7 days claimed that decentralized finance (DeFi) protocols ended up attacked most previous yr, losing more than $2bn.