cryptopotato.com
The hacker who exploited Solana’s cross-chain bridge Wormhole a year ago has moved another $61 million in ether ($ETH) of the stolen funds.
Blockchain security firm PeckShield disclosed Sunday that the exploiter moved some of the assets to the Ethereum-based decentralized protocol MakerDAO.
Wormhole Attacker Moves Stolen Funds Again
Recall that Wormhole Bridge was exploited in February 2022 after a vulnerability on the platform enabled an attacker to mint wrapped $ETH (wETH) without depositing $ETH themselves.
The perpetrator made away with 120,000 wETH valued at roughly $320 million, making it one of the biggest hacks in 2022.
Although Wormhole developers offered a $10 million bounty in exchange for returning the stolen assets, the exploiter remained silent, and the account was dormant.
After nearly a year, CryptoPotato reported last month that the attacker moved $155 million worth of $ETH from the wallet, for the first time, to the decentralized exchange (DEX) OpenOcean.
The exploiter has now moved another batch of the assets to MakerDAO for algorithmic stablecoin $DAI and staked $ETH (stETH) purchases.
According to PeckShield, the attacker first moved $46 million worth of assets, including 24,400 wrapped staked $ETH (wstETH) valued at $41.4 million and 3,000 Rocket Pool $ETH (rETH) worth roughly $5 million.
The hacker swapped the moved tokens for 16.6 million $DAI and used them to buy 9,750 $ETH at $1,537 each and 1,000 stETH tokens at $1,543 each. Afterward, the exploiter wrapped the purchased tokens for 9,700 wstETH.
PeckShield also noted that the attacker moved an additional 8,800 wstETH worth approximately $15 million to MakerDAO.
#PeckShieldAlert The Wormhole Network Exploiter 0x629e supplied $46M worth of cryptos, including 24.4k $wstETH ($41.4M) & 3k $rETH (~$5M), to MakerDAO for 16.6M $DAI & used them to buy 9.75k $ETH ($ETH at $1,537) & 1k $stETH ($ETH at $1,543), then wrapped them for ~9.7k $wstETH pic.twitter.com/BRfygHgpit
— PeckShieldAlert (@PeckShieldAlert) February 12, 2023
$216M Moved So Far
Altogether, the exploiter has moved $216 million out of the stolen $320 million deposited in the wallet associated with the hack.
Notably, during the first fund transfer in January, Wormhole developers reiterated their previous $10 million bounty offer in a message embedded in one of the transactions but received no response from the attacker.