Cryptocurrency exchange KiloEx has returned $7.5 million stolen after a hacker attack

The incident occurred on April 14, when Cyvers, a company specializing in the security of blockchain platforms, recorded suspicious transactions. As a result of the investigation, it turned out that the attacker used a vulnerability in the exchange's price oracle mechanism. Thanks to this, he was able to influence quotes in several networks at once, including BNB, Base, and Taiko.

It was established that preparations for the attack were carried out through Tornado Cash, a service widely known in the crypto community as a tool for anonymization and money laundering. It was through this wallet that the attack on KiloEx was subsequently carried out.

After the incident was detected, the platform's management took an unconventional step - they offered the hacker to voluntarily return the stolen funds in exchange for 10% of the amount as a reward. This practice, known as a "white hat bounty", involves a peaceful resolution of the incident without the participation of law enforcement agencies.

Later, KiloEx representatives confirmed that the funds were returned in two stages: first, $1.4 million was received, and then another $5.5 million. The total amount of returned assets was $6.9 million, after which another part was transferred separately, bringing the amount to the full amount of stolen funds.

The platform team said that they would fulfill their promise and give the hacker 10% of the returned assets as a token of gratitude for their cooperation. At the same time, the company emphasized that they do not intend to take any legal action against the hacker.

"We strive to build open and long-term relationships with experts in the field of ethical cybersecurity. We see this case as an important step in strengthening trust between us and the defenders of the crypto space," KiloEx noted.

Thus, the situation was resolved peacefully, and the platform avoided protracted litigation and loss of reputation.