Euler Exploiter Says ‘Sorry,’ Returns Stolen $177M

The thief had a $1 million bounty on his head and got the attention of North Korean hackers

article-image

SquareMotion/Shutterstock modified by Blockworks

share

The exploiter of DeFi lending protocol Euler Finance has sent a series of messages through the blockchain, apologizing for stealing funds and promising to return all stolen money. 

Euler suffered a $200 million exploit earlier this month in which a hacker used a series of flash loans to trick Euler’s smart contract into believing it had fewer collateral tokens than debt tokens. 

Now, the hacker — who goes by “Jacob” — seems to have had a change of heart.

“Jacob here. I don’t think what I say will help me in any way but I still want to say it. I fucked up. I didn’t want to, but I messed with others’ money, others’ jobs, others’ lives,” the hacker said in an encoded blockchain message, asking for forgiveness.

In its initial recovery efforts, Euler Foundation launched a $1 million reward bounty to incentivize the arrest of the attacker. 

Loading Tweet..

Threats to the culprit came in from multiple angles, as an address associated with the Ronin bridge hacker — believed to be based in North Korea — attempted to trick the Euler hacker into sending over their private key information through a phishing scam.

The Euler team then sent an on-chain message to the Euler hacker, warning them of the probable phishing attempt and again urged the return of the stolen assets, noting “the simplest way out here is to return funds.”

Since then, things have taken a positive turn. On Saturday, the Euler attacker returned 51,000 ETH (about $88 million) to a wallet under the Euler team’s control, and more recently an additional four transactions of 7,800 ETH and $30 million in the DAI stablecoin has been returned to a wallet labelled Euler multisig 2, alongside a pledge to make good on all of it. 

Loading Tweet..

“The rest of the money will be returned ASAP. I only look after my safety, and that is the reason for the delay. I’m sorry for any misunderstanding,” Jacob wrote in a separate on-chain message.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

Explore the growing intersection between crypto, macroeconomics, policy and finance with Ben Strack, Casey Wagner and Felix Jauvin. Subscribe to the Forward Guidance newsletter.

Get alpha directly in your inbox with the 0xResearch newsletter — market highlights, charts, degen trade ideas, governance updates, and more.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 18 - 20, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates (2).png

Research

This reports analyzes the competitive dynamics of the Solana DEX landscape, identifying sustainable moats per protocol. We also find that Raydium (RAY), Orca (ORCA), and Lifinity (LFNTY) are valued very similarly on a P/S basis and what this could mean for Meteroa's (MET) valuation, which is still pre-TGE.

article-image

With $800 million now flowing to creditors, some expect a market boost — yet many remain cautious after years of waiting

article-image

There’s more to do on Solana than memecoins, but the market isn’t seeing it that way

article-image

Galaxy’s Alex Thorn said that the saga, paired with TRUMP and MELANIA, could lead to “further destruction of the memecoin complex”

article-image

Anatoly Yakovenko in 2017 embarked on the technical challenge of solving blockchain’s scalability problem

article-image

Grayscale Investments has historically had a four-stage lifecycle for its products, but there’s an indicator this could be changing

article-image

Brian Quintenz and Jonathan Gould are two recent Cabinet nominees with ties to crypto