|&(q

|&(q

Hello,

The tokens you received from 0xAc8f44ceCa92b2a4b30360E5bd3043850a0FFcbE has come from a smart contract exploit, and was taken unrightfully from users. We do not believe this was intentional on your part and there was no malicious intent and hope for cooperation in returning the funds.

In accordance with our SafeHarbor WhiteHat policy we offer up to a 10% bounty for funds rescued by WhiteHats, this makes you eligible to keep up to 10% if the remainder is returned.

Please reach out to [email protected] for coordination.

Or if anonymity is preferred please return stolen tokens directly to 0x624E0Bd3114e333375f10883B0D7621547939cD5 to settle this matter.

If the funds are not returned or no contact was established within 72 hours, we will have to assume there is malicious intent and treat this as a judicial matter.

Failure to return within the stated timeframe will result in immediate escalation, including but not limited to:

• Formal criminal referrals across applicable jurisdictions
• Civil litigation to recover the full amount plus damages
• Active cooperation with centralized exchanges (Coinbase, Binance, Kraken, etc.), bridge operators, and USDC issuer (Circle) to freeze or seize assets
• Public disclosure of wallet addresses, transaction traces, associated addresses, and any attribution findings
• Collaboration with law enforcement and chain analytics firms (Chainalysis, TRM Labs, Elliptic)

Time remaining: 72 hours from block 31582756.

|&(q

Hello, my name is Kacper. I am a whitehat.

I discovered a critical vulnerability in your application and successfully replicated the bug on-chain. As a result, I was able to withdraw 6 ETH from your protocol. I reported this issue to you immediately via a Discord support ticket and ceased all further withdrawals as soon as you requested it.
My actions helped prevent the potential theft of approximately 600 ETH through this exploit. In total, I effectively protected approximately $1.5 million and your project's reputation by not draining the full balance that was vulnerable.
I am cooperating with you in good faith and respectfully request a bug bounty based on the potential impact ($1.5 million). I have been informed in the support ticket that the vulnerability has already been resolved, so the funds are now safe. I will continue our discussions through the Discord ticket.

To the MiniBridge attacker,

We’ve reported the incident to law enforcement and are working with security firms, CEXs, and analytics teams. Your addresses are blacklisted, part of your IP has been identified, and some funds have been traced to exchanges. Moving them won’t be easy.

You have 48 hours to return 90% of the stolen funds to 0x00000000000007736e2F9aA5630B8c812E1F3fc9. If you comply, you may keep 10% as a bounty, and we’ll close the matter as a white hat case.

If not, we’ll escalate with full resources — legal, technical, and reputational — to make this more costly than worthwhile.

MiniBridge Team

To the Attacker,

We, the Comet Team, have reported the incident to law enforcement and are working with security firms, CEXs, and analytics teams. Your addresses are blacklisted, your IP has been identified and connected.

You have 72 hours to return 90% of the stolen funds to the following address: 0xb50ac92d6d8748ac42721c25a3e2c84637385a6b. If you comply, you may retain 10% as a white hat bounty, and we will consider the matter resolved without further escalation. Failure to act will result in a full-scale response  legal, technical, and public  to ensure the consequences far outweigh any potential gains.

The choice is yours. PDF.

Comet Team

To the MiniBridge attacker,

We’ve reported the incident to law enforcement and are working with security firms, CEXs, and analytics teams. Your addresses are blacklisted, part of your IP has been identified, and some funds have been traced to exchanges. Moving them won’t be easy.

You have 72 hours to return 90% of the stolen funds to 0x00000000000007736e2F9aA5630B8c812E1F3fc9. If you comply, you may keep 10% as a bounty, and we’ll close the matter as a white hat case.

If not, we’ll escalate with full resources — legal, technical, and reputational — to make this more costly than worthwhile.

MiniBridge Team

To the MiniBridge attacker,

We’ve reported the incident to law enforcement and are working with security firms, CEXs, and analytics teams. Your addresses are blacklisted, part of your IP has been identified, and some funds have been traced to exchanges. Moving them won’t be easy.

You have 72 hours to return 90% of the stolen funds to 0x00000000000007736e2F9aA5630B8c812E1F3fc9. If you comply, you may keep 10% as a bounty, and we’ll close the matter as a white hat case.

If not, we’ll escalate with full resources — legal, technical, and reputational — to make this more costly than worthwhile.

MiniBridge Team

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"10","targetAddress":"0xD9174c9CE7e70046f8e17A92e45853E0f2A366c2"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"57073","targetAddress":"0xD9174c9CE7e70046f8e17A92e45853E0f2A366c2"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"57073","targetAddress":"0xD9174c9CE7e70046f8e17A92e45853E0f2A366c2"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"8453","targetAddress":"0xD9174c9CE7e70046f8e17A92e45853E0f2A366c2"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"8453","targetAddress":"0xD9174c9CE7e70046f8e17A92e45853E0f2A366c2"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"10","targetAddress":"0xD9174c9CE7e70046f8e17A92e45853E0f2A366c2"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}

data:,{"targetChain":"10","targetAddress":"0xD9174c9CE7e70046f8e17A92e45853E0f2A366c2"}

data:,{"targetChain":"7777777","targetAddress":"0xAaAbFE3bccedA86b51c1958542730Af80d1b7aA4"}