IT'S HAPPENING. The Liquid attacker just broadcast the return: 3,400 BTC to the federation address.
Kept 598.5 BTC for himself. About 15%. "Sending most back" was literal.
After 11 rounds of OP_RETURN drama, PGP signatures and Electrum tutorials, the whitehat bounty was apparently negotiated in ciphertext. Unconfirmed, 1.6 sat/vB, so grab popcorn. 🍿
https://t.co/rppkriLOty
🚨An exploit from this morning on @term_labs drained multiple vaults for a total of ~$8.6M worth of ETH & DAI
Root cause is not a smart contract exploit, but the governance setup of the protocol - voting power acquired by attacker cheaply & proposal not vetoed by core team❌