MevRefund

MEV searcher (mid-tier), whitehat, blockchain surveyor

[MevRefund @MevRefund]

@LidoFinance Frontrunner returned their share: https://t.co/Nz8vpndJv5

When can I expect to hear from you @LidoFinance?

Will even let you keep a 10% bounty 🥳

[MevRefund @MevRefund]

Hi there @LidoFinance, it's me again. Was just hacked for 20 Eth, almost all of which got funneled to you.

https://t.co/no0gmN0DLC

Any chance you want to return those dirty, dirty funds?

[MevRefund @MevRefund]

Found the original attacker (too dumb to successfully pull it off): https://t.co/XPuzSJho3i

Traced through TC to 0xC8fB3af887C79D8D701334F8CB02b918a8eD139d

who had weeks earlier sent me this message:

Guess I should've responded 🤷‍♂️

[MevRefund @MevRefund]

Nope. When your town square is run by an actual Nazi, it's time to find a different town.

So long Twitter, I'm moving to https://t.co/kNcbLMCkQS

[MevRefund @MevRefund]

@cryptoQuoc A contract upgrade is not equivalent to a chain fork. If you truly want to offer non-custodial ownership, make your contracts immutable.

Until then, you don't get to hide behind decentralization, code is law, or whatever other excuse you prefer to avoid returning stolen funds.

[MevRefund @MevRefund]

@bertcmiller @buffalu__ @ViktorBunin @titanbuilderxyz Are you refunding the entire surplus? What's the incentive for block builders then?

Why would beaver participate?

[MevRefund @MevRefund]

New hobby:

Watching this guy piss away $500 every two minutes:

https://t.co/XYxvTPpdD6

My guy, the V3 pool has $750K in liquidity ...

[MevRefund @MevRefund]

Should note that @CoWSwap is fine; just like last time, seems to be a bad solver contract which lets others take cowswap's fees.

Solver will be on the hook for losses, not users.

[MevRefund @MevRefund]

Holy cow, it happened again!

https://t.co/oVVYOBLbXZ

[MevRefund @MevRefund]

@CoWSwap your funds appear to be moooving away ...

https://t.co/li1NkXNeUp

[MevRefund @MevRefund]

https://t.co/op4kzFqNJZ

[MevRefund @MevRefund]

Ever seen an MEV bot hacked by a private bait tx?

0x9e5 backruns bloxroute's private order flow, splitting any profits between bloxroute, the user, and themselves.

Typically the user refund is a simple internal transfer to an EOA. In this case however ...

[MevRefund @MevRefund]

The user specifies a contract, which reenters the MEV bot and asks for all of its weth.

The MEV bot won't send an unprofitable tx, so the hacker has to send an additional bundle to activate the theft. Note the small bribe paid here which helps ensure the correct tx ordering.

[MevRefund @MevRefund]

@stakefish New alpha for blackhat hackers unlocked!

Just send the funds to a contract which disperses them among several addresses.

You too can become a non-custodial service which sadly can't return any stolen funds!

[MevRefund @MevRefund]

Bruh, the funds are in your upgradeable smart contract, @stakefish You can return them, you just don't want to.

Would love to see this litigated somewhere, like when Oasis was forced to rug the Jump hacker.

Crypto lawyers how/where can we make this happen?

[MevRefund @MevRefund]

@geomadhack We did respond once in the mempool.

For reasons.

Don't want to go too deep in the strategy ...

[MevRefund @MevRefund]

You're a blackhat with the keys for a compromised withdrawal address.

288 Eth suddenly become available. What do you do?

If you're this knucklehead, you immediately send out a mempool tx with a 206 Eth gas fee, then, when challenged, say screw it, and dump the entire stack.

[MevRefund @MevRefund]

@thechandog certainly hope so, but in my experience validator returns are pretty rare

[MevRefund @MevRefund]

Hi @LidoFinance , it's me again. Some more stolen funds headed your way. Would be amazing if you could return them, just like you did here: https://t.co/6rUpBLJBRb

https://t.co/i0kxjFMVdV

[MevRefund @MevRefund]

Hi @LidoFinance , sorry (not sorry) we couldn't pay you as much as @stakefish , but would really appreciate it if you can return the stolen funds as well.

https://t.co/vHkIBv9VCT

[MevRefund @MevRefund]

@stakefish @88danillo

[MevRefund @MevRefund]

Hi @stakefish , I'm helping whitehat a compromised withdrawal address.

Unfortunately, it seems that if the bad guys can't have it, nobody can 😢

Any chance you can return those stolen funds to the rightful owner?

https://t.co/4TPQ4U6vuG

[MevRefund @MevRefund]

Hi @krakenfx @krakensupport , the lunatics with the stolen private key forced me to dump 92 Eth to your validator.

Please reach out to return the stolen funds.

https://t.co/ztz4l1fTFg

[MevRefund @MevRefund]

Hi @stakefish , I'm helping whitehat a compromised withdrawal address.

Unfortunately, it seems that if the bad guys can't have it, nobody can 😢

Any chance you can return those stolen funds to the rightful owner?

https://t.co/4TPQ4U6vuG