The Tapioca Foundation has offered a $1 million bounty to an attacker who stole $4.7 million from the decentralized finance protocol. “We are offering you a tempting bounty deal to part with these funds, which are completely legal,” read an on-chain message sent to the attacker’s crypto wallet on Oct. 20. The offer was made in exchange for the attacker returning the remaining $3.7 million.

An X post on Oct. 18 said the attack was carried out using social engineering and that 591 ETH and $2.8 million worth of USD Coin were stolen.

Tapioca co-founder Matt Marino said on Discord that the attackers were given access by software downloaded by his co-founder “Rektora” during a conversation. Marino later claimed that the attacker had withdrawn the 1,000 ETH collateral.

What do you think about this incident? We welcome your comments.