Infini Loses $49.5M in Hack, Threatens Hacker with IP Data

The security breach emerged through a critical vulnerability in the platform’s smart contract administration. Cyvers security analysts revealed that a developer maintained administrative access to the smart contract for over three months before executing the exploit.

In response to the attack, Infini attempted to negotiate with the perpetrator, sending a message through a blockchain transaction: “We are willing to offer you 20% of the stolen assets should you choose to return the funds.” The company also claimed to have collected the attacker’s IP and device information.

This incident follows a broader pattern of cryptocurrency heists, coming shortly after crypto exchange Bybit lost approximately $1.5 billion in what stands as the largest cryptocurrency exploit to date. These attacks highlight the ongoing security challenges in the digital asset sector.

Christian Li, Infini’s founder, has taken personal responsibility for the breach and pledged to reimburse affected users from his personal funds. The stolen funds were reportedly channeled through Tornado Cash, a cryptocurrency mixer frequently used to obscure transaction trails.