Wintermute's CEO tweeted "Karma Is a Bitch" five days before karma took $162 Million


Wintermute is one of crypto's biggest market makers
Their hot wallet used a vanity address generated by a tool called Profanity
On September 15 2022 security researchers at 1inch publicly disclosed that Profanity addresses could be exploited
CEO Evgeny Gaevoy saw the disclosure and moved ETH off the compromised wallet but he forgot to remove it as admin of the vault
He quote tweeted a reference to the vulnerability with "Karma is a bitch :)"
Five days later someone hacked the address and drained $162.3 million
The hacker deposited $114 million into Curve's 3CRV pool making it nearly impossible to freeze
A scammer then spoofed a fake "WinterMuteInu" honeypot token from the exploiter's address and drained $225,000 from people trying to front run the situation
The attack was executed using repurposed GPU mining rigs that had just become useless after Ethereum's switch from proof of work to proof of stake
Miners who lost their income found a new use for their hardware: hacking vanity wallets
Gaevoy used a vanity address to save on gas fees
That cost cutting move cost $162 million
ETH2,61%
1INCH1,49%
CRV0,13%
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin