pull down to refresh

I guess not indeed. They're declining a $1.5M bounty, which would be a top 10 (3?) all-time bounty payout across everything that ever was coded in the history of mankind. 10% makes it the top1 by 3.2x, because currently the biggest bounty ever was $10M for a responsibly disclosed wormhole vuln.

168 sats \ 7 replies \ @ek 9 Sep

As I read it, Blockstream wants everything back and is thus not willing to pay anything. Is that a wrong interpretation of the situation?

reply

Wrong interpretation. You should always put everything back and get the bounty paid with non-stolen funds. The 1.5M is the bounty offered, I'm 99% sure. So "they're not willing to pay anything" is a bad assumption on your part, I think.

reply

He doesn't want to give everything back hoping to get something in return because he doesn't want to trust, he wants to verify 😅

reply
147 sats \ 3 replies \ @ek 9 Sep

The “(maybe even 0)” made it sound like it might not be a bad assumption.

reply

That refers to them not having received it yet? I wouldn't pay squat to anyone holding 15% of funds hostage either.

As little as 3 months ago my former security list got blackmailed for 500k USDC including ethereum address. And that was one of countless. So I guess I am biased.

reply

The hacker is afraid that they won't pay him the bounty if he releases he remaining coins.

1.5 million for 5 billion assets is kinda 0 in hacker's eyes. Because he isn't sure...maybe the blockstream guys indicated something to him with disrespect.

reply

Hacker must be from India?

reply

100% this is the interpretation

reply