ChainCatcher news reports that an address starting with 0x2d4, marked as one of the attackers of Prisma Finance, stated 17 hours ago: "The team needs to hold an online press conference, during which all team members must present their identification and apologize and thank all users, investors, and me. In this meeting, the team must specify the mistakes made, which party reviewed the smart contract, and the plans for improving security in the future. After the meeting, I will discuss the amount I have retained and the amount I can return to the project party, and I will send the notes to the email."Subsequently, Prisma Finance responded: "We have no evidence to prove your sincerity in returning the assets. Most genuine white hats have returned at least some funds by now. If you do not believe we can manage the return of user assets, please hand it over to a respected public third party. Or return it directly to the affected users yourselves. But you should do this immediately to prevent further harm to those you claim to protect."

ChainCatcher message, the attacker of Prisma Finance left a message on-chain for the Prisma Finance team, mainly stating: "You (Prisma Finance) lack sincerity (you did not respond to messages in a timely manner, nor did you address the issues), gratitude (you did not thank me and other users for waiting), and remorse (you did not apologize to users, nor did you propose a solution or improvement plan). I want to emphasize again that my actions are purely white hat, but I find it hard to believe in the Prisma Finance team.Prisma Finance needs to hold a public meeting to disclose the team's identity, apologize to all users and me, explain future plans, and announce that the attacker bears no responsibility. After the meeting, I will discuss with you the amount I will retain and the amount that can be returned to you (rest assured, most of it will be returned)."

ChainCatcher message, according to the Cyvers Alerts system monitoring, the attacker of Prisma Finance has once again left a message on-chain to the project team stating: Before proceeding to the next step, I would like to transfer the funds to a safer place. Please answer my questions.What are your thoughts on the term "smart contract"?Was this contract audited before deployment?In this case, what is the developer's responsibility? I am not doing this for any other reason but to raise awareness about serious contract audits, the developer's attitude towards their work, and project accountability.