SlowMist Cosine: The "white hat negotiation" messages posted on the blockchain after the Yearn attack were fake.
TL;DR
SlowMist founder reveals that 'white hat negotiation' messages after the Yearn attack were fake phishing attempts, similar to a past Balancer incident. Attackers used Railgun and Tornado Cash to hide identities and transfer funds, with their address holding around $6 million in crypto.
Tags
According to Foresight News , Yu Xian, founder of SlowMist, tweeted that the "white hat negotiation" messages that appeared on the blockchain after Yearn was attacked were fake and were actually a phishing attack, consistent with the previous Balancer incident.
Furthermore, the Yearn attackers used the Railgun protocol to conceal their identities, prepared a low-gas-fee address 28 days in advance, and ultimately transferred 1,000 ETH via Tornado Cash. The attackers' address currently holds approximately $6 million in crypto assets.