Share this article

KyberSwap Offers 10% Bounty to Attacker Who Made Off With $50M

The attacker had said negotiations would start when they are "fully rested," and hasn't been heard from since.

Updated Mar 8, 2024, 5:33 p.m. Published Nov 24, 2023, 9:06 a.m.
Hands of two people are seen holding pencils over a pad of paper placed between two open laptops
Negotiations are taking place. (Scott Graham/Unsplash)

The decentralized autonomous organization (DAO) running the KyberSwap decentralized exchange (DEX) reached out to the attacker who walked off with $50 million on Nov. 22 with a message: We want to negotiate.

(Etherscan)
(Etherscan)
STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

The attack targeted KyberSwap's liquidity pools (LPs). The DEX, which had a total value locked (TVL) of around $80 million before the attack, now just has $7.78 million.

"You have done one of the most sophisticated hacks ser. That was high EV, and everyone missed it," the DAO wrote via a message from a contract deployer wallet, using an initialism for expected value. "On the table is a bounty equivalent to 10% of users' funds taken from them by your hack, for the safe return of all of the users' funds."

KyberSwap gave the attacker a deadline of Nov. 25, 06:00 UTC, to return the funds.

Hackers teasing their victims via signing transactions with strings of text is an increasingly common trend with decentralized finance exploits. It is also a way for protocol teams to negotiate with their attackers.

There has been over $290 million lost in DeFi hacks this month, and around $1.2 billion so far this year, according to DefiLlama.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

From Wall Street to the World Cup: How Football Became Crypto’s Biggest Gateway Drug

Soccer ball (Unsplash/Peter Glaser/Modified by CoinDesk)

As institutions are laying the groundwork for wider crypto adoption from the top down, it’s being met by rising interest from football fans from the ground up.