Unauthorized fund sweep from Ethereum address 0x50dA32E628b45AbB1335924086Ca0013b9d4eC1C with attacker offering whitehat bounty return.
Security & Exploits ·
An onchain message posted from address 0x78059663e8c1e6bebda339fd14797b891125a025 on Ethereum mainnet addresses an unauthorized fund sweep from address 0x50dA32E628b45AbB1335924086Ca0013b9d4eC1C. The message directs the return of stolen funds to a specified clean address (0xeCB9aC0858389Ff69Eb6Fa2dF1199f2636b9Be2C) while offering the attacker a 10% whitehat bounty as an incentive for compliance and promises no further action if terms are met.
The mechanism behind such offers typically aims to resolve security incidents without legal recourse by framing the recovery as a negotiated settlement. The attacker posted the message to a recipient address on mainnet, with full details recorded on the blockchain and visible via Etherscan.
It remains unclear whether the attacker will actually return the funds, who controls the originating address that issued the sweep, or what vulnerability or access mechanism enabled the initial unauthorized movement. The identity and relation of the posting address to the victim entity are not yet established from available onchain data alone.