Euler Exploiter Says ‘Sorry,’ Returns Stolen $177M

The thief had a $1 million bounty on his head and got the attention of North Korean hackers


SquareMotion/Shutterstock modified by Blockworks


The exploiter of DeFi lending protocol Euler Finance has sent a series of messages through the blockchain, apologizing for stealing funds and promising to return all stolen money. 

Euler suffered a $200 million exploit earlier this month in which a hacker used a series of flash loans to trick Euler’s smart contract into believing it had fewer collateral tokens than debt tokens. 

Now, the hacker — who goes by “Jacob” — seems to have had a change of heart.

“Jacob here. I don’t think what I say will help me in any way but I still want to say it. I fucked up. I didn’t want to, but I messed with others’ money, others’ jobs, others’ lives,” the hacker said in an encoded blockchain message, asking for forgiveness.

In its initial recovery efforts, Euler Foundation launched a $1 million reward bounty to incentivize the arrest of the attacker. 

Loading Tweet..

Threats to the culprit came in from multiple angles, as an address associated with the Ronin bridge hacker — believed to be based in North Korea — attempted to trick the Euler hacker into sending over their private key information through a phishing scam.

The Euler team then sent an on-chain message to the Euler hacker, warning them of the probable phishing attempt and again urged the return of the stolen assets, noting “the simplest way out here is to return funds.”

Since then, things have taken a positive turn. On Saturday, the Euler attacker returned 51,000 ETH (about $88 million) to a wallet under the Euler team’s control, and more recently an additional four transactions of 7,800 ETH and $30 million in the DAI stablecoin has been returned to a wallet labelled Euler multisig 2, alongside a pledge to make good on all of it. 

Loading Tweet..

“The rest of the money will be returned ASAP. I only look after my safety, and that is the reason for the delay. I’m sorry for any misunderstanding,” Jacob wrote in a separate on-chain message.

Get the day’s top crypto news and insights delivered to your email every evening. Subscribe to Blockworks’ free newsletter now.

Want alpha sent directly to your inbox? Get degen trade ideas, governance updates, token performance, can’t-miss tweets and more from Blockworks Research’s Daily Debrief.

Can’t wait? Get our news the fastest way possible. Join us on Telegram and follow us on Google News.


upcoming event

MON - WED, MARCH 18 - 20, 2024

Digital Asset Summit (DAS) is returning March 2024. This year’s event will be held in our nation’s capital, where industry leaders, policymakers, and institutional experts will come together to discuss the latest developments and challenges in the ever-evolving world of cryptocurrency. […]

upcoming event

MON - WED, SEPT. 11 - 13, 2023

2022 was a meme.Skeptics danced, believers believed.Eventually, newcomers turned away, drained of liquidity and hope.Now, the tide is shifting and it’s time to rebuild. Permissionless II is the brainchild of Blockworks and Bankless. It’s not just a conference, but a call […]

recent research

Curve's Stablecoin and Lending Market


AMMs are at the root of everything elegant and useful in DeFi.That's why Curve put LLAMMA at the center of its lending protocol.



DeSantis says that the Biden administration will ban Bitcoin. Good luck with that.


Those using crypto to pay for accommodation, restaurants, activities or shopping will be dealt with “firmly,” Bali’s governor reportedly said


Worldcoin brought in the vast majority of the capital this week, but there were other standouts


Criminal behavior will get you to the bottom of this list


As markets teeter with uncertainty, both gold bugs and bitcoin aficionados are perking up, spurred by murmurs of a potential change in policy


OKX has also filed to become a Digital Asset Service Provider in France, which could take up to six months, according to the company