pull down to refresh

I think Blockstream should def pay some percentage, one way or the other. See also #1566044. I guess I’m not a whitehat.

240 sats \ 8 replies \ @optimism 23h

I guess not indeed. They're declining a $1.5M bounty, which would be a top 10 (3?) all-time bounty payout across everything that ever was coded in the history of mankind. 10% makes it the top1 by 3.2x, because currently the biggest bounty ever was $10M for a responsibly disclosed wormhole vuln.

reply
168 sats \ 7 replies \ @ek 22h

As I read it, Blockstream wants everything back and is thus not willing to pay anything. Is that a wrong interpretation of the situation?

reply
121 sats \ 5 replies \ @optimism 22h

Wrong interpretation. You should always put everything back and get the bounty paid with non-stolen funds. The 1.5M is the bounty offered, I'm 99% sure. So "they're not willing to pay anything" is a bad assumption on your part, I think.

reply
33 sats \ 0 replies \ @nichrome 20h

He doesn't want to give everything back hoping to get something in return because he doesn't want to trust, he wants to verify šŸ˜…

reply
147 sats \ 3 replies \ @ek 22h

The ā€œ(maybe even 0)ā€ made it sound like it might not be a bad assumption.

reply
115 sats \ 0 replies \ @optimism 22h

That refers to them not having received it yet? I wouldn't pay squat to anyone holding 15% of funds hostage either.

As little as 3 months ago my former security list got blackmailed for 500k USDC including ethereum address. And that was one of countless. So I guess I am biased.

reply

The hacker is afraid that they won't pay him the bounty if he releases he remaining coins.

1.5 million for 5 billion assets is kinda 0 in hacker's eyes. Because he isn't sure...maybe the blockstream guys indicated something to him with disrespect.

reply

Hacker must be from India?

reply

100% this is the interpretation

reply