The decentralized finance (DeFi) protocol dForce announced that they have lodged the recent attack with corresponding law enforcement to pursue the case. In the meanwhile, the bounty offer would still be valid if the attacker returned the exploited funds.

A hacker siphoned more than $3.6 million from dForce in what appears to be a reentrancy attack on a Curve vault it operated on the Arbitrum and Optimism blockchains.

1/5 Following yesterday's updates, we have been working around the clock with security firms and our partners on following the traces left by the attacker’s IP address and tracking down the exploited funds.

2/5 We have sent a second message to the exploiter on-chain via Arbitrum TX: 0xe2a89754d21c348edea86e78e627450d207c32075ee484889e7ce0814e7cbfd1 and Optimism TX: 0xea0a8471b82c3e3f552d83b943042e76f80f3116b4c91d61476770e6d66ae865.

3/5 In the meanwhile, we have also lodged the case with corresponding law enforcement to pursue the case. Again, our bounty offer would still be valid if the attacker returned the exploited funds.

4/5 Our tech team is reviewing other vaults, which will be resumed upon completion of security clearance in the next couple of days. Thank you for your patience and for giving us the time to respond to this complex problem.

5/5 The dForce core team is working closely with our partners and the dForce community to coordinate the recovery efforts and future growth plan. We are reaching out to impacted users and discussing potential actionable plans. Stay tuned for more updates!