Only ten days after the Platypus hack on the Avalanche blockchain, the National Police arrested two suspects who are believed to be behind the facts. Nevertheless, a large part of the stolen funds would have been lost.
Two suspects apprehended by the National Police for the Platypus hack
This weekend, the National Police said they had arrested two peoplesuspected of being behind the hack suffered by the decentralized finance protocol (DeFi) Platypus (PTP) about ten days ago:
[#Cybercriminalité]There #National Police puts an end to a major scam for a loss of 9.5 million 💰 on an American cryptocurrency exchange company.
Arrest and summons to court of 2 individuals
👉seizure of €210,000 in cryptocurrencies#Federal police pic.twitter.com/rKKuG95cWh– National Police (@NationalPolice) February 24, 2023
If the height of the damage had been initially announced at 8.5 million dollars, it was reassessed at 9.5 million.
Although as such, this attack is far from breaking records in terms of stolen funds, it is a case particularly notable for the speed of the investigation.
As a reminder, the onchain investigator ZachXBT had managed to trace back to the attackerby finding a link between the different addresses, pointing to an Ethereum Name Service (ENS) using the same nickname as its social networks:
Hi @retlqw since you deactivated your account after I messaged you.
I’ve traced addresses back to your account from the @Platypusdefi exploit and I am in touch with their team and exchanges.
We’d like to negotiate returning of the funds before we engage with law enforcement. pic.twitter.com/oJdAc9IIkD
— ZachXBT (@zachxbt) February 17, 2023
👉 To go further – Find our guide on best practices to limit the risk of hack
The best way to secure your cryptocurrencies 🔒
🔥 The world leader in crypto security
Are the majority of stolen funds lost?
The recklessness of the attacker, as well as the responsiveness of the various stakeholders, led to this quick arrest which took place on Wednesday. For their part, the Platypus teams also thanked the National Police, ZachXBT, but also Binance:
Update: @National Police have arrested and summoned 2 suspects who were reportedly exploiting our platform.
Thanks to the assistance of @binance and @zachxbt in tracing their identities.
Kudos to the prompt action by the authorities!— Platypus 🔺 (🦆+🦦+🦫) (@Platypusdefi) February 25, 2023
The two suspects are two brothers aged 18 and 20, the eldest would have carried out the attack, while the younger would have benefited from the stolen money. In total, they could have recovered “only” the equivalent of 270,000 euros, and the Police were able to seize 210,000, most certainly on the Binance account of the person concerned. These two people were placed under judicial supervision pending a summons to court, following police custody.
For its part, Platypus had already been able to recover 2.4 million USDC. As for the remaining sum, it was relayed to our colleagues at AFP that it was “out of everyone’s reach“.
In fact, it seems that these words refer to multi-million dollar stablecoins, stored on a smart contract created by the attacker. We can see this on Snowtrace, the explorer of the C-Chain of Avalanche, the blockchain on which Platypus operates:
Address of a smart contract involved in the Platypus hack
The real question is therefore whether law enforcement just waiting for a court decision to confiscate the private keys giving control of these funds, or if the attacker actually lost control over this smart contractin which case those stablecoins would effectively be lost forever.
For its part, Platypus announces that the USP pool targeted by the attack will resume operation tomorrow. In addition, impacted users will have access to a page offering them a visual of their assets before the hack, so that they can claim compensation in the future:
We’re pleased to inform our users that we are now working on a page that will enable you to check your pre-attack balance, post-attack USP-related actions, and the amount you’ll be eligible to claim once the first compensation is ready.
It will be available on Feb 27th. 🧵— Platypus 🔺 (🦆+🦦+🦫) (@Platypusdefi) February 25, 2023
👉 Also in the news – Wormhole hack: the thief of 120,000 ETH gets hacked in turn
🎁 Cryptoast Research Launch Offer
1st Newsletter Free with the code TOASTNL
👉 Listen to this article and all other crypto news on Spotify
Sources: Snowtrace, AFP
Newsletter 🍞
Receive a summary of crypto news every Monday by email 👌
What you need to know about affiliate links. This page presents assets, products or services relating to investments. Some links in this article are affiliated. This means that if you buy a product or register on a site from this article, our partner pays us a commission. This allows us to continue to offer you original and useful content. There is no impact on you and you can even get a bonus by using our links.
Investments in cryptocurrencies are risky. Cryptoast is not responsible for the quality of the products or services presented on this page and could not be held responsible, directly or indirectly, for any damage or loss caused following the use of a good or service highlighted in this article. Investments related to crypto-assets are risky by nature, readers should do their own research before taking any action and only invest within the limits of their financial capabilities. This article does not constitute investment advice.
AMF recommendations. There is no guaranteed high return, a product with high return potential involves high risk. This risk-taking must be in line with your project, your investment horizon and your ability to lose part of this savings. Do not invest if you are not ready to lose all or part of your capital.
To go further, read our Financial Situation, Media Transparency and Legal Notices pages.