Security Researcher Releases $2 Million Held in 2016 Ethereum ICO Contract

In a significant breakthrough for investors, security researcher 0xflorent has successfully unlocked approximately $2 million worth of ether, or 1,003.62 ETH, that had been inaccessible for nine years due to a defect in the HongCoin token sale contract. This recovery has allowed 48 original investors to reclaim their funds.

The funds were originally part of a 2016 ICO that failed to meet its funding target, which led to a malfunction in the contract's refund mechanism. The issue stemmed from an integer-overflow vulnerability in the admin function of the smart contract, which limited refunds based on a global counter that had been significantly reduced over the years.

By collaborating with the HongCoin team's multisig wallet holders, 0xflorent was able to exploit this vulnerability, resetting token balances and bypassing a faulty refund cap that had previously blocked withdrawals. He communicated with the multisig team, validated the unlocking procedure, and they collectively executed 41 transactions to release nearly 1,000 ETH for the affected investors.

This incident marks the second recovery effort by 0xflorent in just over a week, following his successful return of 19.329 ETH valued at around $40,590 from several other inaccessible funds. His recent actions come amid heightened concerns over security in the decentralized finance (DeFi) space, which has seen significant exploits leading to substantial losses in various protocols.

0xflorent tweeted, "First white-hat exploit on Ethereum: I unlocked 1,003.62 Ξ ($2,000,000) trapped in a 2016 ICO smart contract for 9 years. The 48 original investors can now claim their funds."