On the morning of November 23rd at 7:00 am, DEX aggregator and liquidity platform KyberSwap was reportedly attacked, involving funds of up to $47 million. On November 30th at 12:00 pm, the attacker of KyberSwap published settlement conditions on the chain, including complete control over Kyber company, obtaining governance mechanism of KyberDAO to implement legislative changes, and demanding that Kyber company surrender all on-chain and off-chain assets.

The core demand of the hackers is to gain complete control over Kyber and ownership of KyberDAO. In addition, they demand access to all documents and information related to the formation, structure, operation, revenue, profit, expenses, assets, liabilities, investors, salaries, and any other relevant information related to the company and protocol. They also require that the original project team members relinquish all Kyber assets, including on-chain and off-chain assets. This includes but is not limited to: shares, equity, tokens (KNC and non-KNC), partnerships, blogs, websites, servers, passwords, code, social channels, and all creative and intellectual property related to Kyber.

Hackers claim that if their demands are met, Kyber will be sold at a fair valuation, and employees will receive double their salary under the new company structure. If existing employees choose to leave the company, they will receive 12 months of paid dismissal, full benefits, and assistance in finding new jobs. Token holders and investors' assets will appreciate, and liquidity providers will receive rebates for recent market-making activities.

The hacker claimed that under his management, Kyber will undergo a complete transformation and will no longer be the seventh-ranked DEX, but a brand new cryptographic project. The message ends with the hacker signing off as "Kyber Director".

Community's perspective on this message

Rotkiapp founder Lefteris Karapetsas @LefterisJP highlighted the word "股份" (shares) in the hacker's message, stating "In order to complete the share transfer, we need the full name, actual address, etc., so that the transfer can be completed through a notary public."

Now, the whole world not only wants to know who Satoshi Nakamoto is, but also who the hacker is that attacked Kyber and left this message. Many people believe that the hacker's identity can be easily identified due to the long message left behind, such as the writing style of the message, the choice of words, and the spelling, which can be cross-referenced.

Regarding the idea of hackers wanting to gain control of Kyber and transform it into a new company, community users have stated that "I have never seen a hacker want to be a CEO in this world."

Ethereum developer @pcaversaccio said this is an unprecedented case in the black hat world. Community user @0xngmi commented that he did not know how to meet all the requirements of the Kyber hacker, and even if the settlement was successful, "who would want to use a protocol managed by the hacker?"

The hacker ended their message by stating, "Kyber is one of the earliest and longest-running DeFi protocols. No one wants to see it collapse." As a result, many community members speculate that the hacker may have previously worked for or had close contact with the KyberSwap team.

KyberSwap will respond to the hacker and where will the protocol go? BlockBeats will continue to follow up.

Welcome to join the official BlockBeats community:

Telegram Subscription Group: https://t.me/theblockbeats

Telegram Discussion Group: https://t.me/BlockBeats_App

Official Twitter Account: https://twitter.com/BlockBeatsAsia