The post On-chain ransom negotiations show ShibaSwap hacker won’t be low-balled appeared on BitcoinEthereumNews.com. On-chain messages between hacker and victim reveal a ransom standoff, with every demand etched permanently on the blockchain. Last Friday, $2.8 million worth of (mostly dog-themed) crypto tokens were stolen from ShibaSwap, a “next generation decentralized exchange” for the Shiba Inu ecosystem. Among the loot were approximately 250 billion KNINE tokens, from liquid staking protocol K9 Finance. K9 wants them back, and is willing to pay the hacker a bounty. The tokens are ostensibly worth over $600,000 at current market prices. Though a simulated swap, through extremely thin liquidity, paints a rather different picture. The hack was flagged by security firms Peckshield and Tikkala Security and involved using a “flash” loan to buy up enough tokens to achieve “majority validator power.” Then, the hacker signed “a malicious state to drain assets from the bridge.” They subsequently split up most of the stolen assets between various addresses but the stash of KNINE tokens, though, clearly not worth swapping, remains in their primary address. Read more: Circle and Tether bug bounties aren’t enough says LlamaRisk ShibaSwap hack negotiations begin On Monday, an address labelled “k9dev.eth” reached out to their “Dear Shibarium Bridge Hacker” on-chain, offering a five-ether (ETH) “bounty to return stolen KNINE tokens.” Presumably, the K9 team is very keen to avoid the hacker swapping such a large quantity of KNINE which would likely send its price to near zero. The message also contains the address of a bounty contract to facilitate the exchange, piling on the pressure with the warning that the “bounty will start to decrease in seven days.” Not one to be low-balled, however, the hacker has responded, “I can’t accept five ETH.” They instead propose no less than 50 ETH (around $225,000), adding “let me know when you are willing to meet that price.” The full exchange… The post On-chain ransom negotiations show ShibaSwap hacker won’t be low-balled appeared on BitcoinEthereumNews.com. On-chain messages between hacker and victim reveal a ransom standoff, with every demand etched permanently on the blockchain. Last Friday, $2.8 million worth of (mostly dog-themed) crypto tokens were stolen from ShibaSwap, a “next generation decentralized exchange” for the Shiba Inu ecosystem. Among the loot were approximately 250 billion KNINE tokens, from liquid staking protocol K9 Finance. K9 wants them back, and is willing to pay the hacker a bounty. The tokens are ostensibly worth over $600,000 at current market prices. Though a simulated swap, through extremely thin liquidity, paints a rather different picture. The hack was flagged by security firms Peckshield and Tikkala Security and involved using a “flash” loan to buy up enough tokens to achieve “majority validator power.” Then, the hacker signed “a malicious state to drain assets from the bridge.” They subsequently split up most of the stolen assets between various addresses but the stash of KNINE tokens, though, clearly not worth swapping, remains in their primary address. Read more: Circle and Tether bug bounties aren’t enough says LlamaRisk ShibaSwap hack negotiations begin On Monday, an address labelled “k9dev.eth” reached out to their “Dear Shibarium Bridge Hacker” on-chain, offering a five-ether (ETH) “bounty to return stolen KNINE tokens.” Presumably, the K9 team is very keen to avoid the hacker swapping such a large quantity of KNINE which would likely send its price to near zero. The message also contains the address of a bounty contract to facilitate the exchange, piling on the pressure with the warning that the “bounty will start to decrease in seven days.” Not one to be low-balled, however, the hacker has responded, “I can’t accept five ETH.” They instead propose no less than 50 ETH (around $225,000), adding “let me know when you are willing to meet that price.” The full exchange…

On-chain ransom negotiations show ShibaSwap hacker won’t be low-balled

3 min read

On-chain messages between hacker and victim reveal a ransom standoff, with every demand etched permanently on the blockchain.

Last Friday, $2.8 million worth of (mostly dog-themed) crypto tokens were stolen from ShibaSwap, a “next generation decentralized exchange” for the Shiba Inu ecosystem.

Among the loot were approximately 250 billion KNINE tokens, from liquid staking protocol K9 Finance. K9 wants them back, and is willing to pay the hacker a bounty.

The tokens are ostensibly worth over $600,000 at current market prices. Though a simulated swap, through extremely thin liquidity, paints a rather different picture.

The hack was flagged by security firms Peckshield and Tikkala Security and involved using a “flash” loan to buy up enough tokens to achieve “majority validator power.”

Then, the hacker signed “a malicious state to drain assets from the bridge.”

They subsequently split up most of the stolen assets between various addresses but the stash of KNINE tokens, though, clearly not worth swapping, remains in their primary address.

Read more: Circle and Tether bug bounties aren’t enough says LlamaRisk

ShibaSwap hack negotiations begin

On Monday, an address labelled “k9dev.eth” reached out to their “Dear Shibarium Bridge Hacker” on-chain, offering a five-ether (ETH) “bounty to return stolen KNINE tokens.”

Presumably, the K9 team is very keen to avoid the hacker swapping such a large quantity of KNINE which would likely send its price to near zero.

The message also contains the address of a bounty contract to facilitate the exchange, piling on the pressure with the warning that the “bounty will start to decrease in seven days.”

Not one to be low-balled, however, the hacker has responded, “I can’t accept five ETH.”

They instead propose no less than 50 ETH (around $225,000), adding “let me know when you are willing to meet that price.”

The full exchange can be read via Etherscan’s input data message viewer, here.

The K9 team’s initial offer comes in at over $20,000, over 500 times the execution price on ShibaSwap itself. However, it’s just 3.6% of the purported value of the KNINE tokens.

Bounties offered by hacked crypto projects are typically set at 10% of the value stolen. Seemingly insulted by the initial offer, the hacker has called K9 Finance’s bluff and asked for over a third.

The price of KNINE took a sharp dive following the hack. Strangely, given the potential effects of the outcome of the on-chain negotiations, there haven’t been many large moves since.

Shiba Inu was one of the top-performing memecoins of crypto’s last bull cycle. It is currently down 85% from its all-time-high in October 2021, per CoinMarketCap data.

Got a tip? Send us an email securely via Protos Leaks. For more informed news, follow us on X, Bluesky, and Google News, or subscribe to our YouTube channel.

Source: https://protos.com/on-chain-ransom-negotiations-show-shibaswap-hacker-wont-be-low-balled/

Disclaimer: The articles reposted on this site are sourced from public platforms and are provided for informational purposes only. They do not necessarily reflect the views of MEXC. All rights remain with the original authors. If you believe any content infringes on third-party rights, please contact [email protected] for removal. MEXC makes no guarantees regarding the accuracy, completeness, or timeliness of the content and is not responsible for any actions taken based on the information provided. The content does not constitute financial, legal, or other professional advice, nor should it be considered a recommendation or endorsement by MEXC.

You May Also Like

Recovery extends to $88.20, momentum improves

Recovery extends to $88.20, momentum improves

The post Recovery extends to $88.20, momentum improves appeared on BitcoinEthereumNews.com. Silver price extended its recovery for the second straight day, up by
Share
BitcoinEthereumNews2026/02/05 07:34
Saudi Awwal Bank Adopts Chainlink Tools, LINK Near $23

Saudi Awwal Bank Adopts Chainlink Tools, LINK Near $23

The post Saudi Awwal Bank Adopts Chainlink Tools, LINK Near $23 appeared on BitcoinEthereumNews.com. SAB adopts Chainlink’s CCIP and CRE to expand tokenization and cross-border finance tools. SAB and Wamid target $2.32T Saudi capital markets with blockchain-based tokenization plans. LINK price falls 2.43% to $22.99 despite higher trading volume and steady liquidity ratios. Saudi Awwal Bank has added Chainlink’s Cross-Chain Interoperability Protocol (CCIP) and the Chainlink Runtime Environment (CRE) to its digital strategy. CCIP links assets and data across multiple blockchains, while CRE provides banks with a controlled framework to test and deploy new financial applications. The lender, with more than $100 billion in assets, is applying the tools to tokenized assets, cross-border settlement, and automated credit platforms. The move signals that Chainlink’s infrastructure is being adopted at scale inside regulated finance. Related: Chainlink’s Deal with SBI Is a Major Win, But Chart Shows LINK’s Battle at $27 Resistance Wamid Partnership Aims at $2.32 Trillion Markets In parallel, SAB signed an agreement with Wamid, a subsidiary of the Saudi Tadawul Group, to pilot tokenization of the Saudi Exchange’s $2.32 trillion capital markets. The focus is on equities and debt products, opening the door for blockchain-based issuance and settlement. SAB has already executed the world’s first Islamic repo on distributed ledger technology, in collaboration with Oumla earlier this year. That transaction gave regulators a template for compliant on-chain contracts. The Wamid deal builds directly on that precedent, shifting from single-instrument pilots toward broader capital markets integration. Saudi Blockchain Buildout Gains Pace Saudi institutions are building multiple layers of digital infrastructure. Oumla is working with Avalanche to develop the Kingdom’s first domestically hosted Layer 1 blockchain. SAB’s Chainlink adoption adds an interoperability and execution layer on top. Together, these projects are shaping a domestic framework for tokenization, with global connectivity added only where liquidity requires it. LINK Price and Liquidity Snapshot While institutional adoption progresses, Chainlink’s…
Share
BitcoinEthereumNews2025/09/18 08:49
U.S. regulator declares do-over on prediction markets, throwing out Biden era 'frolic'

U.S. regulator declares do-over on prediction markets, throwing out Biden era 'frolic'

Policy Share Share this article
Copy linkX (Twitter)LinkedInFacebookEmail
U.S. regulator declares do-over on prediction
Share
Coindesk2026/02/05 03:49