The dForce protocol was hacked and the assets were successfully recovered

On April 19, the decentralized lending protocol Lendf.Me was hacked, and about $25 million in crypto assets were stolen. For the next 48 hours, the team went all out to track down the hackers and stolen assets.

Timeline of events

• At 8:58 a.m. on April 19, hackers began attacking Lendf.Me contracts.
• At 11:32 on the same day, the attack was completed and about $25 million in crypto assets were stolen.
• At 12:57, the Lendf.Me and USDx contracts were closed.

Team response

• The team quickly contacted major stablecoin issuers, financial protocol teams, exchanges, wallets, and other partners to monitor and freeze the accounts involved in the case.
• Worked with multiple security teams to form an interim security team to begin tracking assets.
• Apply for assistance from the Singapore Police for support from all parties.
• Through on-chain analysis, successfully lock down the hacker portrait and obtain key clues.

Interaction with hackers

• On the evening of April 19, the hacker left a message on the chain saying "Better Future" and returned part of the assets in a small amount.
• On April 20, the team responded to the hackers on the chain and expressed their willingness to communicate.
• At 13:33 on April 21, under pressure from many parties, the hacker took the initiative to contact the team and began to return the assets.

Results

As of 17:00 on April 21, all stolen assets have been successfully recovered. The team submitted an application to the Singapore Police to withdraw the case.

The team solemnly declares that it has not obtained sensitive user information from any of its partners. At the same time, I would like to express my sincere gratitude to the partners, users and investors who have helped in this process.