TrustedVolumes got $2M back from its attacker. The attacker kept $2M and declared their own bounty.
An attacker returned $2M and declared the other $2M a self-earned bounty. Nobody voted on that rate.
CryptoVibe Desk · defi · exploit · trustedvolumes
- →An attacker returned 1,122 ETH worth roughly $2M to TrustedVolumes today, per Com Feed monitoring, months after a May 2026 exploit.
- →Self-declared bounties are becoming the informal standard in DeFi recoveries: attackers return what they choose, keep what they name, and protocols accept the split.
- →Watch for an official TrustedVolumes response within 7 days confirming whether the team accepts the split or pursues the remaining $2M.
- exploit → When someone finds a flaw in a crypto protocol's code and uses it to take funds that don't belong to them.
- on-chain monitoring → Automated services that watch public blockchain records in real time and alert when large or unusual transfers happen.
A TrustedVolumes attacker returned 1,122 ETH to the protocol today, per Com Feed monitoring. The transfer is worth roughly $2M at current prices. The same attacker kept an additional ~$2M and declared it a self-stated bounty.
The exploit dates to May 2026. The original drain total is not confirmed in available sources. The attacker chose the split, moved the funds today, and left no public explanation.
Self-declared bounties are quietly becoming how DeFi exploit recoveries end. An attacker returns a portion, keeps a cut they name themselves, and the protocol takes what it can get. The team's only leverage is on-chain tracking and legal exposure, both of which have a mixed record.
If you hold TrustedVolumes tokens, the current tape is this: roughly $2M came back. Whether the team accepts this as a closed case or pushes for the remaining $2M determines what happens next.
No official statement from TrustedVolumes was available at time of publication.
TrustedVolumes has no leverage in this split. The attacker set the rate, moved the funds, and went quiet. Silence from the team in the next 48 hours makes this split official by default.
An official TrustedVolumes on-chain or public response within 7 days of this transfer confirming whether the recovery is closed or the team is pursuing legal or tracking action for the remaining $2M.
Primary links and supporting reads used by the desk for this story.
Forward this.
