The Whitehat Hacker’s Dark Side: Connecting Multiple Crypto Hacks

The Prisma Finance Exploit

On March 28, Prisma Finance lost $12 million in a hack. The hacker, claiming to be a “Whitehat” looking out for users, demanded the team change the post-mortem report to remove accusatory terms like “exploit” and “hacker.”

The Bounty Demand

Unsatisfied with the team’s compliance, the hacker asked for a bounty of $3.8 million, triple the industry standard. This raised suspicions about the hacker’s true intentions.

The Whitehat’s Stained Reputation

Investigator ZachXBT revealed that the Prisma hacker is connected to several other exploits, including:

  • Arcade_xyz (March 2023)
  • Pine Protocol (February 2024)

In these incidents, the hacker used the alias “0x77” and made unreasonable demands for funds.

The Suspect Revealed

Through further investigation, ZachXBT identified the suspect behind these exploits as “0x77,” a user linked to the Modulus protocol. The details of the suspect have been shared with the Prisma team, who are considering legal action.