SpankChain Receives Stolen Ethers Back And Pays Reward To Hacker
The anonymous hacker, who stole 165.38 ethers (about $38,000) from SpankChain, returned the funds after a phone conversation with Ameen Soleimani, the platform’s head.
The attacker revealed the private keys of the wallet where the stolen ethers were kept. After that, the company published the transaction data proving the successful return of the funds.
Update on our recent hack: @ameensol spoke with the attacker on the phone, and they sent us the private key with all the funds. We sent them back $5,000 as a reward along with the 5.5 ETH they used as seed capital for the attack.— SpankChain (@SpankChain) 11 октября 2018 г.
Congratulations, anonymous haxor!
The scammer launched a malware smart contract and benefited from the “reentrancy” vulnerability to hack SpankChain. This method triggers the “transfer” function, and the funds are returned to the payment channel contract, what brings tokens to the fraudster.
Apart from the ether theft, the internal BOOTY tokens worth $4000 were blocked on the platform. The developers managed to detect the hack only a day later because they were engaged in the elimination of other errors in smart contracts at that time.
As SpankChain tweeted later, the team sent the hacker a reward of $5000 and 5.5 ethers that he spent to commit the attack. Also the platform paid the scammer $4000 for unfreezing the BOOTY tokens.
Update2: The attacker was also able to retrieve the ~4,000 BOOTY that their hack immobilized. We purchased it back from them for $4,000. Thank you anon!— SpankChain (@SpankChain) 12 октября 2018 г.
BOOTY reclamation tx: https://t.co/7c9udbnBlI
In total, the hacker received $9000 for returning the stolen cryptocurrency. For such a step, SpankChain thanked the scammer on Twitter.
https://t.co/uQsLFgwPDD will be back in just a couple of days!— SPANK.live (@Spank_Live) 11 октября 2018 г.
The previously-audited custodial payment hub will be pulled from cryo-storage, and we'll resurrect tipping in #FIN!
Can't wait to see all of our amazing performers and users again! We will keep you updated pic.twitter.com/cNlI6RmPLa
The Blockchain-based platform, SpankChain, is an ecosystem delivering entertainment content for adults. As stated in their blog, the team aims to solve the underpayment problem of the porn industry workers.
Previously, a hacker promised to livestream a 51% attack.