.jpg)
The team behind the Renegade.fi protocol said a white hat hacker returned around $190,000 after exploiting one of its Arbitrum-based decentralized dark pools and later complying with instructions in an onchain message to return 90% of the funds.
The rebel certain Funds returned on Sunday after blockchain analytics platform Blockaid It has been marked the $209,000 Exploit 8:27 AM UTC. The hacker injected malicious logic into a flawed function linked to his dark pool V1 Arbitrum to steal 27 ERC-20 tokens.
Data from Arbitrum block explorer Arbiscan shows that white hat He came back About $190,000 to the Arbitrum wallet address “0xE4A…5CFBE”, which includes $84,370 worth of USDC, $27,885 worth of wrapped Bitcoin and $23,950 worth of wrapped Ether.
source: The rebel
White hat hackers have come to play a crucial role in combating these attacks Exploiters who continue to do so Exploiting encryption protocols Despite the tightened security measures in recent years.
Industry initiatives such as cryptocurrency security non-profit Security Alliance’s Safe Harbor framework have been created to enable white hats to steal funds for… Temporary saving While enjoying legal protection.
In an onchain message, Renegade he asked The hacker must return 90% of the funds and keep the remaining 10% as a “blank reward” to avoid facing possible “civil or criminal action.”
The onchain message that Renegade sent to the hacker. source: Arabescan
The white hat hacker sent more than 90% of the stolen funds within 45 minutes, and said in response to the onchain message that action had been taken to protect DeFi users:
“I saw a lot of disdain towards my actions. Although I understand that what I did was unethical, in today’s DeFi cybersecurity, I believe this was the best solution to protect users’ funds and ensure their safety.”
The white hat hacker also hinted that Renegade should tighten its security measures, noting that the vulnerability exploited was “very simple and bad.”
Related to: Cryptocurrency hackers have stolen $17 billion over the past 10 years: DefiLlama
north korea They added that state-backed hackers “will never come to negotiate.”
Renegade said the exploit appears to have resulted from a failure of the deployment code to assign an explicit owner and from a faulty migration in an April 2025 software update, enabling anyone to rewrite the smart contract associated with its V1 Arbitrum dark pool.
Dark Pools are proprietary trading platforms that allow large trades to be made without exposing or influencing their intentions to the broader market.
Renegade added that it will publish a post-mortem report that includes a “full root cause analysis” explaining the security incident.
Renegade said it would fully compensate affected users, that only 7% of its trading volume was routed through the V1 Arbitrum Dark Pool and that it would contact “a small number of affected users directly.”
magazine: AI-driven hacks could wipe out decentralized finance – unless projects act now
