Euler Exploiter Says ‘Sorry,’ Returns Stolen $177M

The thief had a $1 million bounty on his head and got the attention of North Korean hackers

article-image

SquareMotion/Shutterstock modified by Blockworks

share

The exploiter of DeFi lending protocol Euler Finance has sent a series of messages through the blockchain, apologizing for stealing funds and promising to return all stolen money. 

Euler suffered a $200 million exploit earlier this month in which a hacker used a series of flash loans to trick Euler’s smart contract into believing it had fewer collateral tokens than debt tokens. 

Now, the hacker — who goes by “Jacob” — seems to have had a change of heart.

“Jacob here. I don’t think what I say will help me in any way but I still want to say it. I fucked up. I didn’t want to, but I messed with others’ money, others’ jobs, others’ lives,” the hacker said in an encoded blockchain message, asking for forgiveness.

In its initial recovery efforts, Euler Foundation launched a $1 million reward bounty to incentivize the arrest of the attacker. 

Loading Tweet..

Threats to the culprit came in from multiple angles, as an address associated with the Ronin bridge hacker — believed to be based in North Korea — attempted to trick the Euler hacker into sending over their private key information through a phishing scam.

The Euler team then sent an on-chain message to the Euler hacker, warning them of the probable phishing attempt and again urged the return of the stolen assets, noting “the simplest way out here is to return funds.”

Since then, things have taken a positive turn. On Saturday, the Euler attacker returned 51,000 ETH (about $88 million) to a wallet under the Euler team’s control, and more recently an additional four transactions of 7,800 ETH and $30 million in the DAI stablecoin has been returned to a wallet labelled Euler multisig 2, alongside a pledge to make good on all of it. 

Loading Tweet..

“The rest of the money will be returned ASAP. I only look after my safety, and that is the reason for the delay. I’m sorry for any misunderstanding,” Jacob wrote in a separate on-chain message.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Javits Center North | 445 11th Ave

Tues - Thurs, March 24 - 26, 2026

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research Report Templates (27).png

Research

Solana's spot trading landscape will remain bifurcated: prop AMMs will own the short-tail of highly liquid pairs, while passive AMMs continue drifting toward the long-tail. Both can win via vertical integration, but in opposite directions: passive AMMs are moving closer to users through token issuance platforms (e.g., Pump-PumpSwap, MetaDAO-Futarchy AMM), while prop AMMs are moving down the stack into transaction landing services and infrastructure (e.g., HumidiFi-Nozomi). The venues most at risk are legacy AMMs with limited end-user control and no durable, launch-driven source of order flow.

article-image

BTC finished the week up 1.6%, while L2s, RWAs and the treasury trade continued to grind lower

article-image

DTCC moves DTC-custodied Treasuries onchain via Canton, while Lighter’s LIT launches trading at a fees multiple in Hyperliquid territory

article-image

In the 90s, rapt audiences worldwide watched a coffee pot — will that fascination ever turn to crypto?

article-image

Some systems improve by failing — and crypto has no choice

article-image

Yield Basis introduces an IL-free AMM design that already dominates BTC DEX liquidity

article-image

Maybe tokenholders don’t need the rights that corporate shareholders have come to expect

Newsletter

The Breakdown

Decoding crypto and the markets. Daily, with Byron Gilliam.

Blockworks Research

Unlock crypto's most powerful research platform.

Our research packs a punch and gives you actionable takeaways for each topic.

SubscribeGet in touch

Blockworks Inc.

133 W 19th St., New York, NY 10011

Blockworks Network

NewsPodcastsNewslettersEventsRoundtablesAnalytics