We do the research, you get the alpha!
We’ve been hacked for about $160M in our defi operations. Cefi and OTC operations are not affected
— wishful cynic (@EvgenyGaevoy) September 20, 2022
$71,042.00
-4.00%$2,190.72
-5.59%$1.56
-3.29%$1.46
-4.12%$651.46
-2.75%$0.999952
0.00%$90.32
-5.05%$0.304142
-0.73%$1.022
-0.91%$0.095169
-5.47%$56.82
-2.13%$0.999693
-0.02%$0.273841
-5.71%$41.75
0.28%$455.79
-3.76%$9.07
0.12%$9.21
-6.49%$344.64
-6.71%$0.999305
-0.05%$0.169383
-2.83%$0.145706
-2.96%$0.999229
-0.01%$56.07
-3.92%$0.00890441
-0.10%$9.69
-5.33%$0.095577
-3.17%$247.20
-9.76%$0.999762
0.03%$0.98615
-4.90%$0.00000581
-4.92%$1.89
2.36%$0.076642
-3.79%$1.30
-3.38%$4,800.58
-3.33%$0.097384
-4.54%$269.69
-2.77%$0.770622
-8.10%$4,812.35
-3.59%$1.12
-0.00%$3.68
-7.32%$1.00
0.00%$91.93
-3.36%$1.39
-4.63%$0.99987
-0.01%$115.18
-5.15%$0.997695
-0.06%$0.694623
-9.36%$0.173295
-2.44%$0.071308
-3.71%$0.00000167
-0.23%$0.999904
-0.02%$2.16
-1.63%$0.00000351
-4.62%$2.57
-4.74%$8.49
-4.47%$0.999396
0.03%$1.13
-0.03%$0.266886
-5.35%$0.00195401
-6.97%$6.95
-2.82%$0.366684
-7.38%$11.02
0.01%$8.04
-5.13%$71.94
1.28%$0.03892497
7.03%$0.096801
-2.57%$1.20
-0.76%$1.75
-3.49%$1.90
-2.95%$0.108476
-8.04%$0.902211
-2.10%$1.73
-4.01%$1.098
0.01%$0.999683
0.07%$3.49
-5.16%$0.090334
-5.55%$0.986147
-1.91%$0.04708069
-6.13%$1.00
0.00%$114.63
0.01%$0.01291597
-0.03%$0.00843557
-3.03%$0.924293
-4.82%$0.885823
24.00%$0.03179541
-6.72%$0.082393
2.83%$0.00729023
-4.11%$0.102632
-5.31%$0.999838
0.00%$0.163293
-6.07%$0.02717878
0.04%$0.999997
-0.00%$0.99832
-0.07%$0.00000615
-7.48%$26.57
21.43%$0.057777
3.83%$0.222557
-6.57%$0.999515
-0.07%$0.736526
-6.62%$1.44
-3.31%$1.09
-0.02%$0.00747196
-5.24%$26.87
-0.68%$0.01180939
-2.93%$0.251273
-6.04%$0.065214
-5.37%$0.548711
-4.70%$1.15
-0.73%$2.12
-9.08%$0.39258
-1.47%$1.027
0.02%$32.56
-8.26%$0.999808
-0.03%$0.03621931
-6.94%$155.27
-3.55%$0.999899
0.02%$135.03
-5.45%$0.239666
-4.60%$0.194234
-1.50%$0.00000034
-3.43%$1.025
0.08%$0.00000033
-0.45%$0.999715
-0.00%$0.01691238
-3.05%$0.06245
-3.02%$0.053447
-3.75%$0.348258
-6.43%$3.08
-5.24%$3.13
-5.75%$0.327631
-5.74%$1.20
-6.50%$14.97
-3.57%$0.00590471
-4.09%$0.312925
-9.52%$0.00002989
-4.58%$0.02663003
-4.88%$0.811734
0.65%$0.242458
-7.36%$0.063468
-4.84%$0.992281
-0.03%$0.078483
-6.50%$0.0000013
3.36%$0.04718341
-5.86%$0.126693
-7.01%$0.26393
-1.15%$5.86
3.62%$16.70
-1.56%$5.58
-0.10%$1.60
4.61%$0.303466
-5.75%$1.006
0.66%$12.13
0.01%$0.02315981
-2.22%$0.108185
-9.27%$6.31
-6.05%$0.239035
-0.80%$0.00251414
-5.03%$1.27
-2.93%$1.85
-1.65%$0.00004114
-2.82%$0.083916
-5.48%$0.984062
-0.01%$0.519674
-1.78%$0.999866
-0.00%$0.212395
1.65%$0.0374986
-7.59%$0.00563083
-2.94%$0.00212429
-0.99%$22.99
0.00%$0.02541736
-0.41%$0.00212716
4.78%$1.26
-7.35%$0.381058
-10.18%$0.999686
0.09%$1.21
-2.19%$0.206951
-6.57%$1.077
0.01%$0.053648
-1.09%$2.34
-0.86%$2.70
-5.89%$1.067
-0.00%$1.00
0.00%$0.059624
-4.28%$0.102608
-10.62%$18.83
-2.79%$0.081182
-2.78%$0.01972587
-7.61%$0.181178
-4.07%$0.179423
-4.22%$0.092155
-4.93%$1.00
0.00%$2.26
-7.62%$1.90
-6.83%$1.00
0.02%$0.04534515
-8.17%$0.072457
-2.93%$0.61502
-6.81%$1.79
-0.11%$0.00344358
-4.69%$0.098056
-0.57%$0.00162453
144.56%$48.00
0.21%$4,211.75
-1.47%$0.995802
-0.01%$0.154254
-3.36%$0.101782
-5.51%$1.22
-0.20%$1.004
0.74%$0.665688
-38.06%$0.424094
-4.86%$0.02042602
-5.48%$0.32921
-2.78%$0.172368
-3.56%$0.291966
-4.05%$0.00000701
-5.56%$0.535646
6.24%$0.09803
-5.31%$1.086
0.08%$0.134222
-6.30%$0.02236323
-2.50%$0.236934
-4.04%$1.019
-0.05%$0.423162
4.57%$0.203755
-7.04%$0.293016
-2.25%$1,093.16
0.26%$0.282443
-0.58%$0.079896
-4.95%$0.00000095
0.71%$0.560756
-13.79%$0.00000064
-2.63%$0.998433
-0.01%$1.00
0.06%$0.314772
1.22%$0.998985
0.09%$0.999784
0.03%$0.130296
-0.43%$4.14
-5.10%$0.562839
0.99%$1.004
0.00%$0.118582
0.08%$0.00645399
-0.54%$0.548468
-5.52%$1.00
0.00%$1.74
-7.83%$1.47
-3.50%$2.28
-4.82%$1.41
-3.36%
Algorithmic market maker service Wintermute suffered a security breach on Tuesday, with hackers making off with around $160 million across 90 assets within the platform's portfolio.
In a brief statement published on Twitter, Wintermute founder and CEO Evgeny Gaevoy stated that “we’ve been hacked for about $160M in our defi operations. Cefi and OTC operations are not affected.”
While around $160 million has been appropriated by the hacker, Gaevoy noted that “out of 90 assets that has been hacked only two have been for notional over $1 million (and none more than $2.5M),” and that as a result there shouldn’t be a “major selloff” of assets.
We’ve been hacked for about $160M in our defi operations. Cefi and OTC operations are not affected
— wishful cynic (@EvgenyGaevoy) September 20, 2022
Gaevoy assured users, lenders and partners of the platform that they are “solvent with twice over that amount in equity left”, so all associated entities should expect a full restoration of operations within the coming days.
Gaevoy added that Wintermute remains open to treating the hack as a “white hat” scenario, in which the hacker returns the funds and receives a reward for identifying a vulnerability.
While Gaevoy’s tweet was published around 8am UTC, a number of Twitter users seemingly uncovered suspicious activity affecting Wintermute as early as 6am UTC, engaging in a debate on the ins and outs of wash trading after discovering that large amounts had been transferred from Wintermute into exchange liquidity pool 3pool.
Following Gaevoy’s announcement, self-proclaimed on-chain sleuth and 2D detective ZachXBT claimed to have identified the hacker’s wallet address, which contains $47.8 million in its wallet, with the remaining $114.3 million in the decentralized stablecoin exchange Curve Protocol.
Further investigation on blockchain exploration platform EtherScan reveals that the wallet in question has made 45 transactions over the past 5 hours, and holds a plethora of 80 tokens in their wallet including $12.9 million of Wrapped Bitcoin (WBTC), $3.9 million of Pax Dollar (USDP), and $2.3 million in Somnium Space CUBE tokens, among others.
Decrypt has reached out to Wintermute for comment and will update this story should the company respond.




