UPDATED 00:13 EDT / JULY 21 2017

EMERGING TECH

‘White hat’ hackers claim they stole $85M in Ethereum tokens for safekeeping

There’s a strange new twist to the Parity Ethereum wallet hacking story Wednesday in which 150,000 ETH tokens ($31 million) was stolen from three companies that had recently raised funds through an initial coin offering.

Now, so-called “white hat” hackers are claiming to have stolen an additional 377,000 ETH tokens ($85 million) for safekeeping and are promising to return the tokens to their owners at a later date.

A spokesperson using the name of “jbaylina” on Reddit claimed that “The White Hat Group” became aware of the vulnerability in the Parity “multisig” Ethereum wallet, so members “took the necessary action to drain every vulnerable multisig they could find as quickly as possible.” Providing evidence of their actions, the user also linked to an Ethereum block explorer address where the stolen, or saved, Ethereum tokens are detailed. The link shows a balance of about 377,105 ETH, proving that they have possession of the funds but not necessarily that they will return to them to their rightful owners.

“If you hold a multisig contract that was drained, please be patient. We will be creating another multisig for you that has the same settings as your old multisig but with the vulnerability removed and we will return your funds to you there,” jbaylina wrote, explaining the process in which the Ethereum tokens will be returned. “We will be using the donations sent to us from The DAO Rescue to pay for gas,” he or she added, suggesting that they will be raising money for their alleged “white hat” service.

One interesting part from the Reddit post is the claim that the funds will not be returned until the vulnerability in the Parity wallets is fixed. Parity itself claims to have fixed the problem, suggesting that the hackers may have discovered another vulnerability in the code for the Ethereum multisig wallets that has not yet been publicly disclosed.

Should the putative white hat hackers return the Ethereum tokens to the rightful owners, it could be claimed that they have provided a public service and should be congratulated for doing so. That said, the idea that anyone can take money from a private Ethereum wallet under any circumstances remains a disturbing concept.

Photo: Maxpixel

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

  • 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
  • 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network.
About SiliconANGLE Media
SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios — with flagship locations in Silicon Valley and the New York Stock Exchange — SiliconANGLE Media operates at the intersection of media, technology and AI.

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.