Qubit pleads with hacker to return $80 million of stolen funds

Qubit, a decentralized finance (DeFi) platform, has publicly provided $2,000,000 to a hacker who stole $80 million price of cryptocurrency from it final week.

Late on the night of 27 January, in accordance with an incident report printed by Qubit Finance, a hacker exploited a vulnerability to steal over 206,000 Binance cash from the corporate’s QBridge protocol.

In a tweet, blockchain safety agency PeckShield stated that QBridge was hacked to mint a “big quantity of xETH collateral and drain the pool funds about $80M.”

As safety agency CertiK explains, the attacker exploited “a logical error in Qubit Finance’s code that allowed them to enter malicious knowledge and withdraw tokens on Binance Sensible Chain when none have been deposited on Ethereum.”

Qubit, in the meantime, stated it was monitoring the exploiter and monitoring affected property.  And though it didn’t know the true identification of the hacker, that they had despatched their attacker a message providing to pay a reward within the hope of the secure return of the funds.

Initially Qubit pointed to its bug bounty program, which affords a most $250,000 reward to discoverers of probably the most crucial vulnerabilities.

That is the Qubit Finance crew.

We suggest you to barter immediately with us earlier than taking any additional motion.
The exploit and lack of funds have a profound impact on hundreds of actual folks.
If the utmost bounty supply shouldn’t be what you might be on the lookout for, we’re open to have a dialog. Let’s work out an answer.

Qubit Finance Group

Nevertheless, maybe realising that wasn’t going to be sufficient to coax the attacker into handing over the funds, Qubit later upped its supply to $1 million, after which to $2 million with the promise that the attacker wouldn’t be prosecuted.

We’ve got secured the funds to have the ability to pay a bounty of $2,000,000 according to the traditionally excessive Polygon bounty and our whole restrict, with out prosecution. We proceed to work with safety companies all through the ecosystem and independently to resolve this exploit. The complete Qubit group is hopeful you’ll do the appropriate factor and settle for the supply.

To be trustworthy, if I have been criminally minded and had stolen $80 million from Qubit, I could be very comfortable holding out, and seeing if the corporate might supply me a reward considerably nearer to $80 million…

Information of the hack is, in fact, probably catastrophic for Qubit and really worrying for its customers.  As soon as once more, a cryptocurrency DeFi platform has discovered its safety wanting, and left to beg hackers for the return of stolen funds.  The promise to pay attackers a “bug bounty” reward to its seemingly legal attackers would itself look like legally questionable in some elements of the world.