Rocket Foundation issued a whitehat recovery ultimatum for a ~$287k exploit, offering 90% return by 2026-09-10 or escalating to criminal/civil action.
Security & Exploits ·
Rocket Foundation has issued an onchain message offering a whitehat recovery path following an exploit that resulted in approximately $287,000 in withdrawn funds. The entity has made the recovery address public and set a deadline of September 10, 2026 at 23:59 UTC for the attacker to return 90% of the stolen amount, with the remaining 10% framed as a bounty for cooperation under whitehat terms.
The message indicates that fund flows have been tracked and documented, with transaction paths identified and forwarded to law enforcement. Rocket Foundation has signaled that resolution under these terms would close the matter without further prosecution, establishing a clear incentive structure tied to the deadline and return threshold.
Should the attacker decline or miss the deadline, the foundation has stated it will shift from recovery negotiations to pursuing criminal and civil remedies. The offer remains conditional on full compliance with the 90% return requirement by the specified date, with inquiries directed to info@rocketfoundation.io or via the onchain channel itself. It remains unclear whether contact has been made with the attacker or whether any response is forthcoming.