{"id":539005,"date":"2026-06-01T16:52:23","date_gmt":"2026-06-01T15:52:23","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=539005"},"modified":"2026-06-02T08:43:21","modified_gmt":"2026-06-02T07:43:21","slug":"failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/","title":{"rendered":"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path"},"content":{"rendered":"<p>A white-hat researcher's recovery of 1,003.62 <a href=\"https:\/\/cryptoslate.com\/coins\/ethereum\/\">ETH<\/a> from a failed 2016 <a href=\"https:\/\/cryptoslate.com\/news\/ethereum\/\">Ethereum<\/a> ICO has turned an old smart contract flaw into a reminder that Ethereum's earliest technical decisions can remain live for nearly a decade.<\/p>\n<p>The researcher, known as <a href=\"https:\/\/x.com\/0xFlorent_\/status\/2061070356564091258\">0xFlorent<\/a>, said he unlocked the ETH from the HongCoin contract after the funds had been trapped for nine years. Using a June 1 <a href=\"https:\/\/cryptoslate.com\/coins\/ethereum\/\">Ethereum<\/a> price of roughly $1,983, the recovered amount was worth about $1.99 million.<\/p>\n<p>The recovery depended on the original HongCoin multisig. The <a href=\"https:\/\/etherscan.io\/address\/0x9fa8fa61a10ff892e4ebceb7f4e0fc684c2ce0a9\">HongCoin contract<\/a> still required action from that management path for the relevant admin calls.<\/p>\n<p>That made the episode closer to contract archaeology than to a conventional exploit: the same immutable code that preserved the refund failure also preserved a forgotten route around it.<\/p>\n\n<div class=\"cs-article-embed\">\n    <a href=\"https:\/\/cryptoslate.com\/someone-drained-long-forgotten-ethereum-wallets-and-the-cause-may-trace-back-years\/\" class=\"cs-article-embed__link\">\n                    <div class=\"cs-article-embed__media\">\n                <img src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/dormant-ethereum-wallet-drained-1024x576.jpg\" alt=\"Someone just drained long-forgotten dormant Ethereum wallets, and the cause may trace back years\" loading=\"lazy\" decoding=\"async\">\n            <\/div>\n                <div class=\"cs-article-embed__body\">\n            <span class=\"cs-article-embed__related-reading\">Related Reading<\/span>\n            <h3 class=\"cs-article-embed__title\">Someone just drained long-forgotten dormant Ethereum wallets, and the cause may trace back years<\/h3>\n                            <div class=\"cs-article-embed__summary\">Hundreds of long-inactive Ethereum wallets were swept into a tagged address while researchers and users still debate whether old keys, weak wallet tooling, or another exposure opened the door.<\/div>\n                                        <div class=\"cs-article-embed__meta\">\n                                            <span class=\"cs-article-embed__meta-item\">May 1, 2026<\/span>\n                                                                <span class=\"cs-article-embed__meta-divider\">&middot;<\/span>\n                                                                <span class=\"cs-article-embed__meta-item\">Liam &#039;Akiba&#039; Wright<\/span>\n                                    <\/div>\n                    <\/div>\n    <\/a>\n<\/div>\n\n<p>HongCoin's contrast is stark. Ethereum's base layer stayed still. A still-valid permission path and coordinated signing from the original multisig made 48 original investors eligible to claim funds through a refund mechanism that had been broken for years.<\/p>\n\n<aside class=\"cs-why-matters\" role=\"note\" aria-label=\"Why this matters\">\n    <div class=\"cs-why-matters__header\">\n        <span class=\"cs-why-matters__badge\">\n            <span class=\"cs-why-matters__badge-icon\" aria-hidden=\"true\">\n                <i class=\"fa-light fa-radar\"><\/i>\n            <\/span>\n            <span class=\"cs-why-matters__badge-label\">Why this matters<\/span>\n        <\/span>\n    <\/div>\n    <div class=\"cs-why-matters__body\">\n        <p>HongCoin turns a forgotten contract bug into a live investor recovery. It shows that old Ethereum permissions, counters, and admin paths can still affect who can access funds today, which matters for users tracking stuck assets and for teams auditing dormant contracts.<\/p>\n    <\/div>\n<\/aside>\n\n<h2>How the refund path broke<\/h2>\n<p>HongCoin was a 2016 Ethereum project whose public repository described it as a <a href=\"https:\/\/github.com\/hongcoin\/DO\">decentralized venture fund<\/a>. The token sale failed to reach its funding goal, and contributors were supposed to be able to reclaim their ETH through the contract's refund function.<\/p>\n<p>The problem sat inside the contract's accounting. In the <a href=\"https:\/\/raw.githubusercontent.com\/hongcoin\/DO\/master\/HongCoin.sol\">HongCoin source code<\/a>, the <code>refundMyIcoInvestment()<\/code> function checks whether the caller's token balance is greater than <code>tokensCreated<\/code>. If that condition is true, the refund call fails.<\/p>\n<p>If it passes, the function zeroes the caller's token balance, clears related accounting, reduces <code>tokensCreated<\/code> by that token balance, and then sends the refund.<\/p>\n<p>Over time, earlier refunds reduced the global <code>tokensCreated<\/code> counter. That left larger holders in a strange position: they still had balances tied to their original claims, but those balances could be too large for the contract's remaining counter.<\/p>\n<p>The refund function then treated them as invalid, blocking the very users it was supposed to repay.<\/p>\n<p>The escape path was another old piece of code. The multisig-restricted <code>mgmtIssueBountyToken()<\/code> admin function could add a supplied amount to a recipient's balance and to <code>bountyTokensCreated<\/code>.<\/p>\n<p>That path belonged to the management side of the contract, which is why the original multisig had to participate. Modern <a href=\"https:\/\/docs.solidity.org\/en\/latest\/control-structures.html\">Solidity arithmetic<\/a> reverts by default on overflow.<\/p>\n<p>Before Solidity 0.8.0, arithmetic wrapped on overflow unless developers added their own checks. The older behavior shaped the escape route.<\/p>\n<p>0xFlorent identified a way to use the admin function's arithmetic behavior to reset a holder's balance low enough for the refund check to pass. The result was paradoxical: one stale bug helped undo the practical damage caused by another stale bug.<\/p>\n<table>\n<thead>\n<tr>\n<th>Stage<\/th>\n<th>Key detail<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>2016 token sale<\/td>\n<td>HongCoin collected ETH for a venture-fund-style Ethereum project that later failed to reach its goal.<\/td>\n<\/tr>\n<tr>\n<td>Refund failure<\/td>\n<td>The refund function rejected larger holders once the global token counter fell below their balances.<\/td>\n<\/tr>\n<tr>\n<td>Old admin path<\/td>\n<td>A multisig-restricted function still existed that could change balances using pre-0.8 Solidity arithmetic behavior.<\/td>\n<\/tr>\n<tr>\n<td>Whitehat recovery<\/td>\n<td>0xFlorent coordinated with the original HongCoin multisig to make blocked holders eligible to claim funds.<\/td>\n<\/tr>\n<tr>\n<td>On-chain proof<\/td>\n<td>A May 29 transaction shows a successful <code>refundMyIcoInvestment()<\/code> call producing an internal 96 ETH transfer.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><a href=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ig_0daa150018935898016a1d8beead948191ad60ad4a7c44317e-1.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-539067 size-full\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ig_0daa150018935898016a1d8beead948191ad60ad4a7c44317e-1.png\" alt=\"Flow diagram showing how HongCoin's 2016 failed ICO, refund accounting bug, original multisig, and integer-overflow path unlocked 1,003.62 ETH.\" width=\"1122\" height=\"1402\" \/><\/a><\/p>\n<h2>The multisig made it a coordinated recovery<\/h2>\n<p>The multisig requirement set a boundary for the HongCoin recovery. The sensitive path required HongCoin's original management address to execute the relevant calls, so the practical recovery depended on cooperation between the researcher and the old control path.<\/p>\n<p>The coordination carried as much weight as the code. The recovery involved 41 signed transactions for blocked holders, while another seven smaller holders could refund directly without the workaround.<\/p>\n<p>The ICO began on Aug. 29, 2016, ended on Oct. 28, 2016, and failed to meet its funding goal.<\/p>\n<p>The on-chain record already shows refund activity. A May 29 <a href=\"https:\/\/etherscan.io\/tx\/0xb25a15802a121c8564fd65caaba88c642795f5d15abb1af62b2b54e3f774563d\">on-chain transaction<\/a> called <code>refundMyIcoInvestment()<\/code> and produced an internal transfer of 96 ETH from the HongCoin contract to an investor address.<\/p>\n<p>The top-level transaction value was 0 ETH because the actual movement happened inside the contract call.<\/p>\n<p>Anyone following the money should separate eligibility from completed distribution. The contract state and multisig execution reopened a claim path for funds that had been inaccessible for years.<\/p>\n<p>The visible on-chain examples show refund activity rather than a full accounting of every eligible investor's claim.<\/p>\n<p>The HongCoin case should be read carefully before anyone generalizes it to other old stuck funds. The ingredients were unusually specific: identifiable contract logic, an admin function still usable by the original control path, a whitehat willing to coordinate, and enough remaining on-chain value to make the effort worthwhile.<\/p>\n<p>The practical detail is ownership and permission. The old function could change balances, but only the management path could call it.<\/p>\n<p>That gives the recovery its ethical and operational boundary: outside research found the path, original signers executed it, and the claim route reopened for investors.<\/p>\n\n<div class=\"cs-article-embed\">\n    <a href=\"https:\/\/cryptoslate.com\/aave-says-creditors-are-trying-to-seize-stolen-eth-before-victims-get-their-71m-back\/\" class=\"cs-article-embed__link\">\n                    <div class=\"cs-article-embed__media\">\n                <img src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/05\/ethereum-court-1024x576.jpg\" alt=\"Aave warns $71M exploit recovery could be seized before victims are repaid\" loading=\"lazy\" decoding=\"async\">\n            <\/div>\n                <div class=\"cs-article-embed__body\">\n            <span class=\"cs-article-embed__related-reading\">Related Reading<\/span>\n            <h3 class=\"cs-article-embed__title\">Aave warns $71M exploit recovery could be seized before victims are repaid<\/h3>\n                            <div class=\"cs-article-embed__summary\">The dispute could decide whether DeFi recovery funds go back to users first or become targets for outside creditors.<\/div>\n                                        <div class=\"cs-article-embed__meta\">\n                                            <span class=\"cs-article-embed__meta-item\">May 5, 2026<\/span>\n                                                                <span class=\"cs-article-embed__meta-divider\">&middot;<\/span>\n                                                                <span class=\"cs-article-embed__meta-item\">Gino Matos<\/span>\n                                    <\/div>\n                    <\/div>\n    <\/a>\n<\/div>\n\n<p>The same facts also make the case hard to generalize. Many dormant contracts lack an active control key, a clean claimant set, or a public trail that makes responsible recovery plausible.<\/p>\n<p>That boundary also reduces the temptation to treat the episode as a broad exploit template. The technical mechanism explains why the refund gate reopened, but the story's consequence comes from the combination of old code, living permissions, and public settlement.<\/p>\n<p>Similar archaeology becomes riskier when a contract lacks one of those elements, because discovery can expose a weakness before it creates a usable recovery route.<\/p>\n<h2>Ethereum keeps the mistake and the remedy<\/h2>\n<p>The broader Ethereum history makes the HongCoin recovery more than a curiosity. A 2025 <a href=\"https:\/\/cryptoslate.com\/insights\/over-3-4-billion-in-ethereum-lost-forever-due-to-user-mistakes-and-contract-bugs\/\">analysis citing Coinbase's Conor Grogan<\/a> put permanently lost ETH at more than 913,111, framed as a conservative estimate across user and contract-related errors.<\/p>\n<p>That category includes funds sent to burn addresses, contract bugs, and major historical incidents.<\/p>\n<p>Some of Ethereum's most consequential early moments were also recovery debates. In 2016, the <a href=\"https:\/\/blog.ethereum.org\/2016\/07\/20\/hard-fork-completed\">DAO hard fork<\/a> moved roughly 12 million ETH from DAO-related contracts into a recovery contract after the network's defining governance crisis.<\/p>\n<p>In 2017, Parity Technologies' multisig library self-destruct incident <a href=\"https:\/\/medium.com\/paritytech\/a-postmortem-on-the-parity-multi-sig-library-self-destruct-63daca3a4cf7\">blocked 513,774.16 ETH<\/a> across 587 wallets.<\/p>\n<p>Those episodes were larger and politically heavier than HongCoin. They still help frame why this smaller recovery resonates.<\/p>\n<p><a href=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ig_0daa150018935898016a1d8c8485fc81919fab8fd1f05ce849-1.png\" target=\"_blank\" rel=\"noopener\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-539068 size-full\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ig_0daa150018935898016a1d8c8485fc81919fab8fd1f05ce849-1.png\" alt=\"Timeline matrix showing Ethereum stuck-fund history, including The DAO, Parity, lost ETH estimates, and the 2026 security endowment plan.\" width=\"1122\" height=\"1402\" \/><\/a><\/p>\n<p>Ethereum's promise that code and state persist is a security property and a memory system. It preserves errors, half-forgotten assumptions, old permissions, and the occasional remedy whose future relevance was invisible at deployment.<\/p>\n\n<div class=\"cs-article-embed\">\n    <a href=\"https:\/\/cryptoslate.com\/thedaos-leftover-rescue-money-sat-for-a-decade-now-its-becoming-ethereums-permanent-security-budget\/\" class=\"cs-article-embed__link\">\n                    <div class=\"cs-article-embed__media\">\n                <img src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/01\/ethereum-vault-1024x538.jpg\" alt=\"TheDAO\u2019s leftover rescue money sat for a decade now it\u2019s becoming Ethereum\u2019s permanent $220M security budget\" loading=\"lazy\" decoding=\"async\">\n            <\/div>\n                <div class=\"cs-article-embed__body\">\n            <span class=\"cs-article-embed__related-reading\">Related Reading<\/span>\n            <h3 class=\"cs-article-embed__title\">TheDAO\u2019s leftover rescue money sat for a decade now it\u2019s becoming Ethereum\u2019s permanent $220M security budget<\/h3>\n                            <div class=\"cs-article-embed__summary\">Veterans want to stake 69,420 ETH from leftover 2016 recovery funds, generating millions yearly for smart contract security.<\/div>\n                                        <div class=\"cs-article-embed__meta\">\n                                            <span class=\"cs-article-embed__meta-item\">Jan 30, 2026<\/span>\n                                                                <span class=\"cs-article-embed__meta-divider\">&middot;<\/span>\n                                                                <span class=\"cs-article-embed__meta-item\">Gino Matos<\/span>\n                                    <\/div>\n                    <\/div>\n    <\/a>\n<\/div>\n\n<p>That long memory now sits beside a maturing security culture. In January, Ethereum veterans <a href=\"https:\/\/cryptoslate.com\/thedaos-leftover-rescue-money-sat-for-a-decade-now-its-becoming-ethereums-permanent-security-budget\/\">announced plans<\/a> to convert roughly 75,000 ETH in leftover TheDAO recovery funds into a staked endowment for Ethereum security.<\/p>\n<p><a href=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-539044 size-full\" src=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic.jpg\" alt=\"Comic-style image of an Ethereum treasure chest marked HongCoin ICO, showing explorers recovering 1,003.62 ETH.\" width=\"1280\" height=\"720\" srcset=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic.jpg 1280w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic-300x169.jpg 300w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic-1024x576.jpg 1024w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic-768x432.jpg 768w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic-480x270.jpg 480w, https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-comic-1200x675.jpg 1200w\" sizes=\"(max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>The HongCoin case works on a much smaller scale, but points to the same afterlife of early Ethereum decisions.<\/p>\n<p>The next test is recoverability: whether other old contracts contain paths that can be used responsibly. A white-hat recovery needs more than a bug. It needs a rightful control path, public on-chain evidence, careful disclosure, and a way to avoid turning contract archaeology into a playbook for opportunistic attacks.<\/p>\n<p>HongCoin shows that some trapped funds can remain suspended inside old logic, waiting for someone to understand both the flaw and the permission structure around it. That is a hopeful result for the 48 investors now eligible to claim.<\/p>\n<p>It is also a warning for the rest of the ecosystem: Ethereum remembers bad code, and sometimes it remembers the escape hatch too.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A whitehat and HongCoin&#8217;s original multisig used a preserved overflow bug to reopen refunds trapped since 2016.<\/p>\n","protected":false},"author":1264,"featured_media":539045,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[120,80281,77419,77968,35372,60206],"tags":[],"prediction_market_topic":[],"post_folder":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v21.9 (Yoast SEO v21.9.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path<\/title>\n<meta name=\"description\" content=\"A failed Ethereum ICO from 2016 unlocked 1,003 ETH after a self-exploit exposed a flaw in its own smart contract.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path\" \/>\n<meta property=\"og:description\" content=\"A failed Ethereum ICO from 2016 unlocked 1,003 ETH after a self-exploit exposed a flaw in its own smart contract.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/\" \/>\n<meta property=\"og:site_name\" content=\"CryptoSlate\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-01T15:52:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-02T07:43:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-hongcoin.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"720\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Liam &#039;Akiba&#039; Wright\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@akibablade\" \/>\n<meta name=\"twitter:site\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Liam 'Akiba' Wright\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/\"},\"author\":{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/#person\",\"name\":\"Liam 'Akiba' Wright\",\"url\":\"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/\"},\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/#authorimage\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam.jpg\",\"caption\":\"Liam 'Akiba' Wright\"},\"jobTitle\":\"Editor-in-Chief\",\"description\":\"Liam \u201cAkiba\u201d Wright is CryptoSlate\u2019s Editor-in-Chief, reporter and podcast producer, focused on decentralized tech\u2019s positive impact.\",\"worksFor\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"sameAs\":[\"https:\/\/www.akiba.gg\",\"https:\/\/x.com\/akibablade\",\"https:\/\/www.linkedin.com\/in\/liamandrewwright\",\"https:\/\/muckrack.com\/liam-wright\/articles\"]},\"headline\":\"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path\",\"datePublished\":\"2026-06-01T15:52:23+00:00\",\"dateModified\":\"2026-06-02T07:43:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/\"},\"wordCount\":1293,\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"articleSection\":[\"Analysis\",\"Community\",\"DAOs\",\"Featured\",\"Investments\",\"Wallets\"],\"inLanguage\":\"en-US\",\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/\",\"url\":\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/\",\"name\":\"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/#website\"},\"datePublished\":\"2026-06-01T15:52:23+00:00\",\"dateModified\":\"2026-06-02T07:43:21+00:00\",\"description\":\"A failed Ethereum ICO from 2016 unlocked 1,003 ETH after a self-exploit exposed a flaw in its own smart contract.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptoslate.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptoslate.com\/#website\",\"url\":\"https:\/\/cryptoslate.com\/\",\"name\":\"CryptoSlate\",\"description\":\"Cryptocurrency News and Real-time Coin Data\",\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"inLanguage\":\"en-US\"},{\"@type\":\"NewsMediaOrganization\",\"@id\":\"https:\/\/cryptoslate.com\/#organization\",\"name\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"CryptoSlate\"},\"image\":{\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/cryptoslate\",\"https:\/\/www.instagram.com\/cryptoslate\",\"https:\/\/www.linkedin.com\/company\/cryptoslate\",\"https:\/\/www.youtube.com\/c\/cryptoslate\",\"https:\/\/cryptoslate.substack.com\",\"https:\/\/t.me\/cryptoslatenews\",\"https:\/\/www.crunchbase.com\/organization\/cryptoslate\",\"https:\/\/iq.wiki\/wiki\/cryptoslate\",\"https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ\",\"https:\/\/muckrack.com\/media-outlet\/cryptoslate\",\"https:\/\/www.tiktok.com\/@cryptoslatenews\"],\"publishingPrinciples\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"ownershipFundingInfo\":\"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/\",\"correctionsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"ethicsPolicy\":\"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles\",\"foundingDate\":\"2017-08-04\",\"founder\":[{\"@type\":\"Person\",\"name\":\"Nate Whitehill\"},{\"@type\":\"Person\",\"name\":\"Matthew Blancarte\"}],\"contactPoint\":[{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\/\/cryptoslate.com\/contact\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"sales\",\"url\":\"https:\/\/cryptoslate.com\/advertising\/\",\"availableLanguage\":\"en-US\"},{\"@type\":\"ContactPoint\",\"contactType\":\"newsroom\",\"url\":\"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback\",\"email\":\"tips@cryptoslate.com\",\"availableLanguage\":\"en-US\"}],\"masthead\":\"https:\/\/cryptoslate.com\/about\/#masthead\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/ea2b02b41a7478e18d903ca8eec4979e\",\"name\":\"Liam 'Akiba' Wright\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam-150x150.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam-150x150.jpg\",\"caption\":\"Liam 'Akiba' Wright\"},\"description\":\"Also known as \\\"Akiba,\\\" Liam Wright is the Editor-in-Chief at CryptoSlate and host of the SlateCast. He believes that together decentralized blockchain and AI technology have the potential to make widespread positive change.\",\"sameAs\":[\"https:\/\/www.akiba.gg\",\"https:\/\/www.instagram.com\/akibablade\",\"https:\/\/twitter.com\/akibablade\"],\"award\":[\"Most improved footballer - 1992\"],\"knowsAbout\":[\"Python\",\"Javascript\",\"PHP\",\"HTML\",\"Agentic Software\",\"Machine Learning\",\"2000s emo music\",\"Manchester United\"],\"knowsLanguage\":[\"English\",\"Spanish\"],\"url\":\"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path","description":"A failed Ethereum ICO from 2016 unlocked 1,003 ETH after a self-exploit exposed a flaw in its own smart contract.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/","og_locale":"en_US","og_type":"article","og_title":"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path","og_description":"A failed Ethereum ICO from 2016 unlocked 1,003 ETH after a self-exploit exposed a flaw in its own smart contract.","og_url":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/","og_site_name":"CryptoSlate","article_published_time":"2026-06-01T15:52:23+00:00","article_modified_time":"2026-06-02T07:43:21+00:00","og_image":[{"width":1280,"height":720,"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2026\/06\/ethereum-hongcoin.jpg","type":"image\/jpeg"}],"author":"Liam 'Akiba' Wright","twitter_card":"summary_large_image","twitter_creator":"@akibablade","twitter_site":"@cryptoslate","twitter_misc":{"Written by":"Liam 'Akiba' Wright","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/#article","isPartOf":{"@id":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/"},"author":{"@type":"Person","@id":"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/#person","name":"Liam 'Akiba' Wright","url":"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/"},"image":{"@type":"ImageObject","@id":"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/#authorimage","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam.jpg","caption":"Liam 'Akiba' Wright"},"jobTitle":"Editor-in-Chief","description":"Liam \u201cAkiba\u201d Wright is CryptoSlate\u2019s Editor-in-Chief, reporter and podcast producer, focused on decentralized tech\u2019s positive impact.","worksFor":{"@id":"https:\/\/cryptoslate.com\/#organization"},"sameAs":["https:\/\/www.akiba.gg","https:\/\/x.com\/akibablade","https:\/\/www.linkedin.com\/in\/liamandrewwright","https:\/\/muckrack.com\/liam-wright\/articles"]},"headline":"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path","datePublished":"2026-06-01T15:52:23+00:00","dateModified":"2026-06-02T07:43:21+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/"},"wordCount":1293,"publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"articleSection":["Analysis","Community","DAOs","Featured","Investments","Wallets"],"inLanguage":"en-US","copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/cryptoslate.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/","url":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/","name":"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path","isPartOf":{"@id":"https:\/\/cryptoslate.com\/#website"},"datePublished":"2026-06-01T15:52:23+00:00","dateModified":"2026-06-02T07:43:21+00:00","description":"A failed Ethereum ICO from 2016 unlocked 1,003 ETH after a self-exploit exposed a flaw in its own smart contract.","breadcrumb":{"@id":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cryptoslate.com\/failed-ethereum-ico-from-2016-just-unlocked-1003-eth-by-exploiting-itself\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptoslate.com\/"},{"@type":"ListItem","position":2,"name":"Dormant Ethereum ICO unlocks 1,003 ETH as old contract bug becomes recovery path"}]},{"@type":"WebSite","@id":"https:\/\/cryptoslate.com\/#website","url":"https:\/\/cryptoslate.com\/","name":"CryptoSlate","description":"Cryptocurrency News and Real-time Coin Data","publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"inLanguage":"en-US"},{"@type":"NewsMediaOrganization","@id":"https:\/\/cryptoslate.com\/#organization","name":"CryptoSlate","url":"https:\/\/cryptoslate.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","width":1000,"height":1000,"caption":"CryptoSlate"},"image":{"@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/cryptoslate","https:\/\/www.instagram.com\/cryptoslate","https:\/\/www.linkedin.com\/company\/cryptoslate","https:\/\/www.youtube.com\/c\/cryptoslate","https:\/\/cryptoslate.substack.com","https:\/\/t.me\/cryptoslatenews","https:\/\/www.crunchbase.com\/organization\/cryptoslate","https:\/\/iq.wiki\/wiki\/cryptoslate","https:\/\/news.google.com\/publications\/CAAqKggKIiRDQklTRlFnTWFoRUtEMk55ZVhCMGIzTnNZWFJsTG1OdmJTZ0FQAQ","https:\/\/muckrack.com\/media-outlet\/cryptoslate","https:\/\/www.tiktok.com\/@cryptoslatenews"],"publishingPrinciples":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","ownershipFundingInfo":"https:\/\/cryptoslate.com\/disclaimers\/how-cryptoslate-makes-and-spends-money\/","correctionsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","ethicsPolicy":"https:\/\/cryptoslate.com\/editorial-policy\/#editorial-principles","foundingDate":"2017-08-04","founder":[{"@type":"Person","name":"Nate Whitehill"},{"@type":"Person","name":"Matthew Blancarte"}],"contactPoint":[{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/cryptoslate.com\/contact\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"sales","url":"https:\/\/cryptoslate.com\/advertising\/","availableLanguage":"en-US"},{"@type":"ContactPoint","contactType":"newsroom","url":"https:\/\/cryptoslate.com\/editorial-policy\/#corrections-feedback","email":"tips@cryptoslate.com","availableLanguage":"en-US"}],"masthead":"https:\/\/cryptoslate.com\/about\/#masthead"},{"@type":"Person","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/ea2b02b41a7478e18d903ca8eec4979e","name":"Liam 'Akiba' Wright","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam-150x150.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/10\/about-liam-150x150.jpg","caption":"Liam 'Akiba' Wright"},"description":"Also known as \"Akiba,\" Liam Wright is the Editor-in-Chief at CryptoSlate and host of the SlateCast. He believes that together decentralized blockchain and AI technology have the potential to make widespread positive change.","sameAs":["https:\/\/www.akiba.gg","https:\/\/www.instagram.com\/akibablade","https:\/\/twitter.com\/akibablade"],"award":["Most improved footballer - 1992"],"knowsAbout":["Python","Javascript","PHP","HTML","Agentic Software","Machine Learning","2000s emo music","Manchester United"],"knowsLanguage":["English","Spanish"],"url":"https:\/\/cryptoslate.com\/author\/liam-akiba-wright\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/539005"}],"collection":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/users\/1264"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/comments?post=539005"}],"version-history":[{"count":8,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/539005\/revisions"}],"predecessor-version":[{"id":539148,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/539005\/revisions\/539148"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media\/539045"}],"wp:attachment":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media?parent=539005"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/categories?post=539005"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/tags?post=539005"},{"taxonomy":"prediction_market_topic","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/prediction_market_topic?post=539005"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/post_folder?post=539005"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}