ChainCatcher message, CAT Protocol announced on platform X that the recent security incident has been amicably resolved, with the parties involved acting in good faith, demonstrating ethical intentions, and returning the affected assets.Therefore, CAT Protocol considers this incident to be a white hat action and confirms that no user funds were lost. Strengthening measures are currently being implemented.

ChainCatcher message, Slow Mist's Yuxian posted on platform X stating that a well-known bot platform was discovered to have a related vulnerability by a white hat, which could lead to private key leakage. The white hat provided feedback, but it seems there was some controversy regarding the bounty for the vulnerability. The white hat is concerned that this bot platform may face risks similar to DEXX being hacked in the future, and if that happens, the investigation may trace back to the evidence he left at that time, so he seeks to clear his name.Yuxian stated that to avoid being non-neutral, it is specifically noted: the term "white hat" mentioned here does not necessarily mean a white hat, and it is not possible to verify who is right or wrong, or who is more right or less right. If this bot platform is hacked in the future, there will be some information shared by this white hat that can be used for verification.

ChainCatcher news, the Web3 vulnerability bounty platform Immunefi has imposed a 90-day suspension on the white hat security company Trust Security. This decision was made after the latter accused Immunefi of unfairly refusing to pay a bounty for a critical vulnerability that could lead to funds being stolen.On November 12, Trust Security revealed on X that its bounty team had discovered a significant fund theft vulnerability on the forked mainnet of an unnamed project. The proof of concept for the vulnerability has been shared with Immunefi, which acts as an intermediary between white hats and projects to ensure bounties are paid for credible vulnerability identification.However, Immunefi stated that Trust Security detected a vulnerability that was out of scope. Trust claimed that Immunefi erroneously sided with the project’s "nonsense," only offering a "meager goodwill bounty" without providing the full reward for identifying the critical vulnerability.Immunefi rebutted Trust's claims of unfair compensation and issued a 90-day suspension order on the grounds of "misrepresentation of the current issue." Immunefi stated that if Trust commits any further violations, it will impose a permanent ban.

ChainCatcher message, according to Immunefi's 2024 report, although interest in Ethereum among respondents has declined compared to 2023, it remains the preferred blockchain for crypto white hat hackers. Additionally, Polygon, Arbitrum, Optimism, and Solana have also gained attention.Specifically, 87% of respondents are attracted to Ethereum, down from 94% in 2023. Interest in Polygon has risen to 59%, ranking it second, followed by Arbitrum (47%) and Optimism (45%). Interest in Solana has also increased from 32% in 2023 to 42% in 2024, ranking fifth.

ChainCatcher message, Ronin stated on platform X that white hat hackers have returned approximately 10 million USD worth of ETH, and USDC is expected to be returned later.The bug bounty program will reward the white hats with a bounty of 500,000 USD.The Ronin bridge will undergo an audit before reopening, and updates will be provided as the audit progresses.

ChainCatcher news, Ronin posted on social media that earlier today, white hats notified Ronin that there might be a vulnerability in the Ronin bridge. After verifying the report, the bridge was paused about 40 minutes after the first on-chain operation was detected. The attacker extracted approximately 4000 ETH and 2 million USDC, worth about 12 million dollars, which is the maximum amount of ETH and USDC that can be withdrawn in a single transaction from the bridge. The bridging limit is an important safeguard to enhance the security of large fund withdrawals and effectively prevent further damage caused by this vulnerability.Ronin stated that due to an issue introduced during the bridge upgrade after the governance process was deployed, the cross-chain bridge misunderstood the voting threshold required by the bridging operators to withdraw funds. Efforts are currently underway to find a solution to the root cause, and the bridge update will undergo strict review before being decided upon by a vote from the bridging operators. Negotiations are ongoing with these seemingly white hat actors, who have responded in good faith. Regardless of the outcome of the negotiations, all user funds are safe, and any shortfall will be re-deposited when the bridge reopens. A post-incident analysis will be shared next week, detailing the technical aspects and planned measures to prevent similar incidents in the future.

ChainCatcher news, Indian crypto trading platform WazirX stated on the X platform that, based on feedback from on-chain detective ZachXBT, it has increased the white hat bounty to 10% of the recovered funds, and will also invite white hat hackers, blockchain forensics experts, and cybersecurity professionals from around the world to join this mission.

ChainCatcher message, the Indian cryptocurrency exchange WazirX, which was previously hacked, announced the details of a bounty program on the X platform to seek community assistance in recovering stolen assets.Bounty Program 1: Track and Freeze ------ Identify, track, and provide actionable intelligence to freeze stolen funds, with a reward of up to $10,000 in USDT.Bounty Program 2: White Hat Recovery ------ Offer 5% of the recovery amount as a white hat reward.It is reported that the bounty program will last for three months from the date of the announcement, but may be modified based on requests and results, either extended or shortened, without further notice to participants.

ChainCatcher message, Velocore stated on X that after the recent exploitation incident, most of Velocore's functionalities have been disabled to prevent further losses, leaving only the withdrawal function. The front-end exchange was unable to correct the imbalance and de-pegging of the stable pool through arbitrage, resulting in additional losses for LPs.On the Linea chain, since the admin privileges of the Diamond Proxy contract have been revoked, we can only change the exchange rate to zero and cannot make fundamental updates. This requires us to prevent further potential damage and provide a unified withdrawal method for all users. Upon re-examining the contract, we discovered another vulnerability that could lead to the theft of all assets. To mitigate this risk, we conducted a white-hat operation and securely deposited the assets into a separate Safe vault. Affected LPs can now claim funds based on the LP snapshots of the relevant blocks.The Telos chain was not attacked and was patched without waiting for a time lock. Assets will be returned 1:1 to their owners, unrelated to the overall LP compensation. Efforts are underway to accurately capture snapshots and update the claims functionality accordingly. Regarding compensation for LP victims from the previous exploitation, it will be decided by community vote whether to restart or liquidate. All remaining assets will be consolidated into a single vault for collective decision-making.

ChainCatcher news, Kraken's Chief Strategy Officer Nick Percoco stated that the trading platform considers the recent loss of nearly $3 million as a "criminal case" and is coordinating with law enforcement to recover the funds.Percoco mentioned that these unnamed researchers stole millions of dollars in cryptocurrency from Kraken by withdrawing funds that had already been deposited into their accounts before the deposit was completed. He wrote that the attackers could effectively print assets.Previous news, the blockchain security firm CertiK announced on social media that a series of serious vulnerabilities were discovered on the Kraken exchange, which could lead to potential losses of hundreds of millions of dollars.

ChainCatcher news, according to information from Velocore communicating with the hacker on-chain, if the hacker returns the remaining funds before 4 PM Beijing time on June 3, they are willing to offer a 10% white hat bounty. The hacker has not yet responded.Previous news, Velocore released a vulnerability incident analysis report, stating that the protocol encountered a security vulnerability on June 2, resulting in a loss of approximately 6.8 million dollars worth of ETH.

ChainCatcher news, according to on-chain messages, the mastermind behind the theft of $11.6 million using the DeFi protocol Prisma Finance claims it was a "white hat rescue" and is inquiring about the return of the funds.About 6 hours after the attack, a message was sent from the address "0x2d4...7507a" (identified as one of the three addresses related to the attack) stating: "Hello, this is a white hat rescue, who can I contact to refund?" Prisma replied: "Please contact us at negotiations@prismafinance.com."

ChainCatcher message, Super Sushi Samurai officials stated on social media that the attacker is a white hat hacker, and they have contacted him on Blockscan, and may collaborate to resolve the issue in the future.

ChainCatcher message, SlowMist YuXian posted on platform X reminding: Users of the DEX protocol ParaSwap need to pay attention to revoke the fund authorization for the following address (multi-chain): 0x00000000FdAC7708D0D360BDDc1bc7d097F47439. The related risk funds have been rescued by white hats, and the loss is minimal.Previously, the DEX aggregator ParaSwap posted on platform X stating that it discovered a critical vulnerability affecting users authorized to the Augustus V6 contract. ParaSwap has suspended the V6 API and conducted a white hat attack to ensure the safety of user funds. These funds are now safely stored in a Safe wallet starting with 0x66E90 and will be returned to users soon.In addition, users must revoke permissions for the Augustus V6 contract. Currently, 4 addresses are affected, with a total loss of $24,000.

ChainCatcher news, the Blast ecosystem LaunchPad and yield aggregator BLASTOFF announced that its fund pool Future Yield Minter Vault was hacked, resulting in the theft of approximately 150 ETH (about $600,000). The official team has currently disabled staking in the fund pool and is conducting a thorough investigation.The BLASTOFF team expressed willingness to offer a 20% white hat bounty to the hacker, hoping they will contact them promptly. Additionally, BLASTOFF stated that its CEO will compensate affected users, and refunds have already been completed. The fund pool will only be restarted after an audit.

ChainCatcher message, the full-chain CDP protocol Seneca stated on social media that it is working with third-party security providers and law enforcement to track the stolen funds and identify the recipient's wallet. The team urges the hacker to return the funds as soon as possible to avoid further legal action, and a 20% white hat bounty will be granted if the funds are returned.

ChainCatcher message, the Shield team stated that the Poloniex theft incident seems to have made promising progress in tracking, and Sun Yuchen left a message on the chain stating:"We have confirmed your identity, and the police from China, the United States, and Russia have intervened. All stolen funds have been marked and cannot be used; the counterparties will be frozen. Return the assets by November 25, 2023, and we will provide a $10 million white hat reward. If not returned by then, police from multiple countries will take action."

ChainCatcher message, Sun Yuchen stated on platform X, "We are offering a 5% white hat bounty to the Poloniex hacker. Please return the funds to the following ETH/TRX/BTC wallets. We will give you 7 days to consider this proposal before law enforcement gets involved."ETH: 0x176F3DAb24a159341c0509bB36B833E7fdd0a132TRX: TUgSgCQL6pMSy9zByn4sgxqrJa95sZExBGBTC: 14XKsv8tT6tt8P8mfDQZgNF8wtN5erNu5D

ChainCatcher news, according to monitoring by ZachXBT, HTX has sent a white hat bounty of 250 ETH, worth $410,000, to the HTX Global attacker, with the message: "You made the right decision. Please submit a security vulnerability analysis report via email so that we can avoid similar incidents in the future. Your privacy will be protected."Earlier, ChainCatcher reported that the hacker who attacked HTX returned 4,999 ETH (approximately $8.2 million) of the stolen funds.