Share this article

dForce Hacker Returns Almost All of Stolen $25M in Crypto

The hacker had drained $25 million in cryptocurrency from decentralized finance protocol dForce over the weekend.

Updated Sep 14, 2021, 8:31 a.m. Published Apr 21, 2020, 7:47 a.m.
Refund transactions from the Lendf.Me hacker. Data via Etherscan.io
Refund transactions from the Lendf.Me hacker. Data via Etherscan.io

The hacker that drained $25 million in cryptocurrency from decentralized finance protocol dForce over the weekend has sent back almost all the stolen assets.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

According to data visible on the Ethereum blockchain, multiple transactions were initiated from 6:00 UTC on Tuesday from an address labelled "Lendf.Me Hack" to the admin address for the Lendf.Me project.

The transactions included some extremely large amounts, such as one for 57,992 ether , the native cryptocurrency of the Ethereum blockchain – an amount worth around $10 million at press time.

Additional transactions involved various U.S. dollar-linked stablecoins – such as USDT, BUSD, TUSD, DAI, USDC, HUSD and PAX – totaling nearly $10 million.

Further, a total of 581 units of WBTC, HBTC and imBTC – ethereum tokens that peg to bitcoin as an underlying collateral – have also been returned. The sum of these is worth around $4 million at bitcoin's current price.

Curiously, the hacker did not return exactly the same balance of assets as were stolen, but returned some of the value in other types of tokens. All told, however, they handed back crypto assets worth roughly $24 million as of press time.

See also: Weekend Attack Drains Decentralized Protocol dForce of $25M in Crypto

It’s unknown at this stage why the hacker didn't simply return the assets that were stolen, or indeed why they were returned at all.

Lendf is one of two protocols supported by the dForce Foundation. It saw $25 million in cryptocurrencies exit its wallets over three hours on Sunday morning Asia time.

The dForce Foundation recently received a $1.5 million strategic investment led by Multicoin Capital and joined by Huobi Capital and Chinese bank CMB International (CMBI), with a goal to grow the foundation's staff and to launch additional DeFi products in the coming year.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

IREN Raises $2.3B, Repurchases Debt in Balance Sheet Overhaul

IREN (TradingView)

The bitcoin miner extended maturities, reduced coupon costs and strengthened its capital structure.

What to know:

  • IREN completed a refinancing deal involving a $2.3 billion convertible senior notes offering and a $544.3 million repurchase of existing notes.
  • The new notes include $1 billion of 0.25% notes due 2032, $1 billion of 1% notes due 2033, and a $300 million greenshoe allotment.
  • The transactions provided $2.27 billion in net proceeds, reduced IREN's cash coupon burden, and extended its debt maturity profile.