Bedrock, a cryptocurrency liquid restaking platform, has extended a job offer to the hacker responsible for a $2 million theft.
This follows a recent security breach on September 26, when the Web3 security firm Dedaub discovered a flaw in Bedrock’s uniBTC vaults.
Despite receiving an early warning, Bedrock failed to address the vulnerability in time, allowing the hacker to exploit the weakness.
Dedaub explained that although they notified Bedrock of the issue hours in advance, the protocol’s delayed response left it exposed.
The hacker ultimately made off with $2 million but had the potential to steal up to $75 million. A day later, Bedrock confirmed the breach, assuring users that their remaining funds were safe and announcing plans to compensate affected investors.
In a highly unconventional move, Bedrock reached out to the hacker via an on-chain message on Etherscan, offering not only a reward but also a position as a white-hat hacker, tasked with strengthening the platform’s security. So far, the hacker has not responded to the offer.
Bedrock’s handling of the situation highlights the growing trend of converting cybercriminals into security experts, reflecting the ongoing challenges in securing decentralized finance (DeFi) platforms.
The company is currently working with audit teams to recover the stolen funds and improve the protocol’s defences.
