<p class="is-style-lead">WazirX co-founder Nischal Shetty has announced a bounty program to help the exchange recover or freeze funds stolen in the exchange’s recent hack.</p> 
<p>As <a href="https://crypto.news/indian-exchange-wazirx-loses-234m-in-recent-exploit/" data-type="link" data-id="https://crypto.news/indian-exchange-wazirx-loses-234m-in-recent-exploit/" target="_blank" rel="noreferrer noopener">reported</a> earlier this week by crypto.news, the exploit saw losses amounting to more than $234 million in several cryptocurrencies.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">WazirX Team is actively working on next steps.<br><br>1. We’re preparing a bounty program to help us freeze/recover the stolen assets<br>2. Further discussions on continuous tracing of fund movements, we’re in touch with a few teams that claim to be experts at this.<br>3. We’ve informed all…</p>— Nischal (Shardeum) 🔼 (@NischalShetty) <a href="https://twitter.com/NischalShetty/status/1814568500473606386?ref_src=twsrc%5Etfw" target="_blank" rel="">July 20, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>According to an X post from Shetty, the bounty program was launched earlier today. WazirX had initially proposed a $11.5m total bounty for recovering the assets, but the co-founder later said it was updated to $23m after the intercession of crypto security sleuth ZachXBT.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">The total bounty has been updated to $23M thanks <a href="https://twitter.com/zachxbt?ref_src=twsrc%5Etfw" target="_blank" rel="">@zachxbt</a> for the suggestion 🙏 <a href="https://t.co/qzaqwAuLod" target="_blank" rel="">https://t.co/qzaqwAuLod</a></p>— Nischal (Shardeum) 🔼 (@NischalShetty) <a href="https://twitter.com/NischalShetty/status/1814998149347369069?ref_src=twsrc%5Etfw" target="_blank" rel="">July 21, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Shetty said the bounty program was a way for the exchange to get assistance from the crypto community in its quest to recover the money stolen in the July 18 cyberattack.</p> 
<p>According to WazirX’s official <a href="https://wazirx.com/blog/wazirx-bounty-program/" target="_blank" data-type="link" data-id="https://wazirx.com/blog/wazirx-bounty-program/" rel="">blog</a>, the program consists of two initiatives. The first is a track and freeze bounty, aimed at helping locate and freeze the stolen assets. The second is a white hat recovery bounty, offering a reward of 10% of the recovered amount to those who assist in retrieving the funds.</p> 
<p>The exchange has publicly shared an ERC20 wallet address for the return of the stolen funds as can be seen below.&nbsp;</p> 
<figure class="wp-block-image">
 <picture loading="lazy" decoding="async" class="wp-image-14286129"> 
  <source type="image/webp" srcset="https://crypto.news/app/uploads/2024/07/image.png.webp"> 
  <img loading="lazy" decoding="async" width="846" height="214" src="https://crypto.news/app/uploads/2024/07/image.png" alt="WazirX co-founder preps bounty program to recover stolen funds - 25"> 
 </picture> 
 <figcaption class="wp-element-caption">
  Source: WazirX
 </figcaption>
</figure> 
<p> You might also like: <a href="https://crypto.news/wazirx-publishes-230m-hack-post-mortem/"> WazirX publishes $230m hack post-mortem </a> </p> 
<p>The crypto community on X has raised concerns over how “sluggish” measures taken to recover the funds have been, with some speculating on how the hack happened. Plenty of guesses have leaned towards the Lazarus Group’s involvement.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">$10M bounty means nothing if it is indeed Lazarus Group as they are not going to just hand over the funds or be located and held legally accountable.<br><br>5% is lower than 10%+ industry standard</p>— ZachXBT (@zachxbt) <a href="https://twitter.com/zachxbt/status/1814992654968709288?ref_src=twsrc%5Etfw" target="_blank" rel="">July 21, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Although the exchange is optimistic some of the funds can be recovered, blockchain analytics firm Arkham confirmed the hacker sold $102m worth of SHIB, which was part of the funds stolen.&nbsp;</p> 
<h2 class="wp-block-heading" id="strong-speculation-on-wazirx-exploit-method-strong"><strong>Speculation on WazirX exploit method</strong></h2> 
<p>An X user gave a breakdown on how the hack might have happened, insinuating that Shetty and the security team at WazirX were “sleeping while all these happened.”&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Allow me to elaborate this WazirX Hack.<br><br>1. Attacker changed the contract which defines how the transactions are carried out. ( how the hell your key holders upgrade without cross checking the file)<br><br>2. When your key holder 1 signed first USDT transaction ,the attacker got 1st…</p>— Engineer Xplains (@engineer_inside) <a href="https://twitter.com/engineer_inside/status/1814973105627963576?ref_src=twsrc%5Etfw" target="_blank" rel="">July 21, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>The X user believes the hacker modified the contract defining transaction procedures without detection. It’s reported that the attacker then captured signatures from three separate keyholders during failed transactions.</p> 
<p>These signatures were subsequently used to create a test transaction that met Laminal’s approval criteria, paving the way for larger unauthorized <a href="https://crypto.news/wazirx-hack-sees-200m-in-crypto-swapped-for-eth-to-thwart-blocking/" target="_blank" data-type="link" data-id="https://crypto.news/wazirx-hack-sees-200m-in-crypto-swapped-for-eth-to-thwart-blocking/" rel="noreferrer noopener">transfers</a>.</p> 
<p>Shetty disagreed with the allegations, insisting Liminal’s security measures verify transaction correctness and checks for whitelisted addresses before signing. Furthermore, he went on to say Liminal only signs transactions initiated within its own system, not external ones, regardless of other signatures.&nbsp;</p> 
<p>WazirX co-founder said the exchange is now awaiting Liminal’s detailed report on the incident, as well as forensic analysis of the three WazirX devices involved.</p> 
<p> Read more: <a href="https://crypto.news/the-wazirx-hack-is-wreaking-havoc-on-crypto-heres-how/"> The WazirX hack is wreaking havoc on crypto — here’s how </a> </p>

WazirX co-founder preps bounty program to recover stolen funds

Table of Contents

crypto.news

Other articles published on Jul 22, 2024

MoonBag Leading the Charge in Crypto While Sei Faces Investor Doubts

Trump on Bitcoin 2024 Conference: Crypto Veteran’s Plan for Gains

Elon Musk Jokes He's An 'Alien Scientist With A Japanese Pseudonym,' But Dogecoin Designer Clarif...

How Biden’s Exit Affects Trump Themed Coins

TOKEN2049 Singapore: The Largest Web3 Event With 20K Attendees & 500+ Side Events

Binance Destroys $971 Million Worth Tokens as BNB Chain Completes 28th Quarterly Burn

Join our free newsletter for daily crypto updates!