Yesssssss!
Have fun in court with the "bank robber left a sack of money in my taxi so I should get to keep it" legal defense.
Searchers return funds. Builders return funds. Welcome to the party, validators.
Oleksii Trofimchuk has filed a lawsuit against @LidoFinance and us in Santa Clara County Superior Court on September 8, alleging that after his wallet was compromised, competing MEV bots submitted high-priority-fee transactions to claim the ETH.
As a validator, @stakefish includes valid transactions under Ethereum’s protocol rules. We do not and cannot determine off-chain ownership or adjudicate competing claims to assets.
Requiring protocol-following validators to claw back rewards based on off-chain claims would set a dangerous precedent. It would pressure validators to filter transactions based on legal or ownership claims they cannot independently verify, put staking rewards in legal uncertainty, and undermine Ethereum’s decentralization and credible neutrality. This is something we believe is important to defend.
Hi there @LidoFinance, it's me again. Was just hacked for 20 Eth, almost all of which got funneled to you.
etherscan.io/txs?block=21839…
Any chance you want to return those dirty, dirty funds?
Frontrunner returned their share: etherscan.io/tx/0xd8fb9df82f…
When can I expect to hear from you @LidoFinance?
Will even let you keep a 10% bounty 🥳
Found the original attacker (too dumb to successfully pull it off): etherscan.io/tx/0x9788043bef…
Traced through TC to 0xC8fB3af887C79D8D701334F8CB02b918a8eD139d
who had weeks earlier sent me this message:
Guess I should've responded 🤷♂️
Nope. When your town square is run by an actual Nazi, it's time to find a different town.
So long Twitter, I'm moving to mevrefund.bsky.social
New hobby:
Watching this guy piss away $500 every two minutes:
etherscan.io/address/0xad080…
My guy, the V3 pool has $750K in liquidity ...
Holy cow, it happened again!
etherscan.io/tx/0x2fc9f2fd39…
Replying to @CoWSwap
@CoWSwap your funds appear to be moooving away ...
etherscan.io/tx/0x90b468608f…
Should note that @CoWSwap is fine; just like last time, seems to be a bad solver contract which lets others take cowswap's fees.
Solver will be on the hook for losses, not users.
Ever seen an MEV bot hacked by a private bait tx?
0x9e5 backruns bloxroute's private order flow, splitting any profits between bloxroute, the user, and themselves.
Typically the user refund is a simple internal transfer to an EOA. In this case however ...
Bruh, the funds are in your upgradeable smart contract, @stakefish You can return them, you just don't want to.
Would love to see this litigated somewhere, like when Oasis was forced to rug the Jump hacker.
Crypto lawyers how/where can we make this happen?
You're a blackhat with the keys for a compromised withdrawal address.
288 Eth suddenly become available. What do you do?
If you're this knucklehead, you immediately send out a mempool tx with a 206 Eth gas fee, then, when challenged, say screw it, and dump the entire stack.
Hi @LidoFinance , it's me again. Some more stolen funds headed your way. Would be amazing if you could return them, just like you did here: snapshot.org/#/lido-snapshot…
etherscan.io/tx/0xb265f672e1…
Hi @LidoFinance , sorry (not sorry) we couldn't pay you as much as @stakefish , but would really appreciate it if you can return the stolen funds as well.
etherscan.io/tx/0x0ab9e37dc8…
Hi @krakenfx @krakensupport , the lunatics with the stolen private key forced me to dump 92 Eth to your validator.
Please reach out to return the stolen funds.
etherscan.io/tx/0x660aebf26b…
Hi @stakefish , I'm helping whitehat a compromised withdrawal address.
Unfortunately, it seems that if the bad guys can't have it, nobody can 😢
Any chance you can return those stolen funds to the rightful owner?
etherscan.io/tx/0x3718e52997…
Hi @LidoFinance , sorry (not sorry) we couldn't pay you as much as @stakefish , but would really appreciate it if you can return the stolen funds as well.
etherscan.io/tx/0x0ab9e37dc8…
Hi @stakefish , I'm helping whitehat a compromised withdrawal address.
Unfortunately, it seems that if the bad guys can't have it, nobody can 😢
Any chance you can return those stolen funds to the rightful owner?
etherscan.io/tx/0x3718e52997…
Hi @stakefish , I'm helping whitehat a compromised withdrawal address.
Unfortunately, it seems that if the bad guys can't have it, nobody can 😢
Any chance you can return those stolen funds to the rightful owner?
etherscan.io/tx/0x3718e52997…
Funny thing about the mev blocker vic was that he was never going to land that 250 Eth arb.
If you simulate his tx ahead of the frontrun, it turns out he didn't supply enough gas and the V3 sale reverts.
Would've landed and then been frontrun to shreds in the next block.
Would you like their contact info?
Pretty sure I've got Discord and TG user names.
They're the mev blocker vic in this thread: xitter.cf/MevRefund/status/18430…
About 7 hours ago our Staking Rewards timeLock contract, deployed almost 4 years ago, was exploited for a loss of 475k XFT (~152k USD), the remaining tokens that were allocated for staking rewards at launch.
etherscan.io/address/0x54e3c…











