Attacker offers to return stolen funds from Avalanche exploit, requesting 5–10% bounty.
Security & Exploits ·
An attacker behind an Avalanche exploit has offered to return stolen funds to a designated recipient address, requesting a 5–10% bounty in exchange. The perpetrator, operating from address 0x36b112875f921e51f5ea8ff39b374960694d21b3, posted an onchain message referencing the original attack transaction and stating that funds would be returned within hours.
The message framed the return as a collaborative recovery effort, suggesting the attacker viewed the bounty request as compensation for assistance. The funds were directed to address 0x35c6aa248e9495E0572598fBfE0528aCbAC2807C, and the onchain communication was posted to address 0xffcc49336f12db595d4ecfc10fde1eb0c5cd9a57 on the Avalanche network.
What remains unclear is whether the funds were actually returned, whether the bounty was negotiated or paid, and the total amount involved in the exploit. The attacker's identity and motivation—whether genuine recovery assistance or a negotiation tactic—have not been established from the available information.