“It is also more than you deserve.” KyberSwap hacker demands to transfer complete control over the protocol to him
In this case, he promised to buy out the shares of the executives and double the salaries of the employees
30.11.2023 - 15:10
508
2 min
0
What’s new? The hacker who stole $47 million from the decentralized exchange KyberSwap, has again addressed the project’s participants. A day earlier, he reprimanded them for their hostile attitude, threatening to postpone negotiations on the return of funds indefinitely. Now he has demanded full control over the protocol, followed by the dismissal of the management, a complete restructuring of the project, the provision of the native token, and only partial compensation to the community. “This is my best offer. This is my only offer,” the hacker stated.
What else is known? For example, the hacker demanded that he be given control over the development company and all its assets, including tokens and shares, as well as internal financial documents and intellectual property, passwords, servers, and social media pages. His wallet must also be given the exclusive right to manage the protocol, which is currently handled by a decentralized autonomous organization (DAO) through a vote among native coin holders.
Once the hacker’s demands are met, he pledges to buy out executives’ stakes in the company at a fair price and to double employees’ salaries or pay a year’s severance pay while helping them find new jobs.
The hacker added that under his leadership, KyberSwap will be rebuilt into “an entirely new cryptographic project” and will cease to exist as the seventh-largest decentralized exchange. As a result of these actions, token holders and investors will be further harmed, as the exchange coin’s value will collapse to zero. “Is this not sweet enough?” the statement reads.
The hacker undertook to reimburse 50% of the damage to the liquidity providers:
“I know this is probably less than what you wanted. However, it is also more than you deserve.”
The hacker emphasized that this is his “best” and “only offer,” it is valid until December 10 and will be withdrawn if the police come out on it.
Previously, a similar situation occurred with the crypto mixer Tornado Cash, which was banned by the US authorities. In May this year, the hacker seized control of the protocol, but later voluntarily handed it over to the community.
Useful material?
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026
Incidents
According to Blockaid, the attack may have been carried out by the same hacker behind the 1inch Fusion V1 exploit.
May 7, 2026
Incidents
The attacker gained administrative access and altered contracts to drain user funds
Apr 30, 2026
Telegram
Twitter