A pseudonymous white hat hacker, known only as “0xflorent,” has achieved a remarkable feat by unlocking nearly $2 million in investor funds trapped for almost a decade in a malfunctioning smart contract related to the failed Hong Coin initial coin offering (ICO). This groundbreaking recovery not only highlights the complexities of blockchain technology but also emphasizes the hacker's innovative approach to problem-solving in the decentralized finance landscape.
Discovered through a detailed investigation, the contract originally housed over 1,000 Ether (ETH), which became stranded due to a bug in its refund functionality. As 0xflorent explained in a revelation shared on X, investors who contributed to the Hong Coin project back in 2016 found their funds inaccessible, as the smart contract failed to execute automatic refunds that were promised after the ICO fell short of its funding goal.
“The contract held all the investors' ETH and was supposed to auto-refund them,” 0xflorent said. “However, a bug in the refund function quietly broke that, and the funds got stuck.” Recent data from the Ethereum block explorer Etherscan verified the hacker’s success, showing one investor received a refund of 96 ETH—equivalent to approximately $192,500—while another received 0.5 ETH.
Launched on August 29, 2016, Hong Coin was envisioned as a community-led venture capital initiative, promoting shared decision-making among members of its decentralized autonomous organization (DAO). However, due to insufficient investments, the ICO culminated on October 28, 2016, without achieving its funding target, leaving many investors in limbo.
Collaborating with the project's original creators, 0xflorent demonstrated how to exploit a particular admin function that inadvertently reset token holders’ balances, thereby activating the refund mechanism. “The way out was an admin function with an integer overflow vulnerability,” the hacker elaborated. “Calling it with a specific input resets a holder's balance and unblocks the refund check.” This unexpected approach not only recovered funds but also reinstated hope for other investors caught in similar predicaments.
In a related incident earlier this month, 0xflorent also recovered 19.33 ETH (valued at around $40,600) from another stalled ICO project, showcasing a promising trend in the realm of white hat hacking and its potential to rectify the misfortunes of the past.
As the cryptocurrency market continues to evolve, stories like that of the Hong Coin recovery underscore the importance of rigorous smart contract audits and the invaluable role of ethical hackers in safeguarding investor interests. This recovery not only marks a significant milestone for the Hong Coin investors but raises questions about the accountability of past projects in the ever-volatile crypto landscape.
For further details, visit Cointelegraph.
More Recommended
Robinhood Shares Plunge as Q1 Earnings Fall Short,...
Visa Expands Stablecoin Settlement Pilot, Surpasse...
