Platypus Hackers Found Not Guilty in $9 Million Exploit
In a groundbreaking case for the French justice system, two brothers accused of exploiting Platypus, an automated market maker (AMM) platform, have been acquitted of any criminal wrongdoing. The Paris Judicial Court dismissed charges against Mohammed and Benamar M., who were involved in siphoning over $9 million from Platypus’ smart contract using an exploit. Although they admitted to the exploit, Mohammed claimed that he acted as a “white hat hacker” to help the platform fix its bugs. However, he lost control of the funds, and the judge ruled that he merely interacted with a smart contract that gave more than what was expected. Money laundering and concealment charges were also dropped. However, the defendants may still face civil proceedings in the future.
Exploit Details and Defendants’ Statements
The two individuals arrested for the Platypus exploit never denied their involvement. Mohammed explained that he exploited the smart contract’s emergency withdrawal function with the intention of returning the funds later and receiving a bonus. However, he lost control of a significant amount of money, and in a subsequent attempt, he managed to withdraw $280,000, which he then sent to a mixing service to hide its origin. From there, $13,000 was transferred to his brother, Benamar.
Judge’s Ruling and Potential Legal Consequences
The judge dismissed the charge of accessing a computer system, emphasizing that Mohammed had interacted with a smart contract that exceeded its intended limits. As a result, the money laundering and concealment charges were also rejected. However, the judge rejected the defense’s argument of ethical hacking and warned that the defendants could face civil complaints in the future. While the criminal charges did not hold up, the judge highlighted that there may still be financial obligations in relation to the exploited loan, and Platypus could pursue civil proceedings against the defendants.
Platypus’ Vulnerabilities and Losses
This case follows a series of exploits targeting Platypus this year. In total, the platform has lost over $11 million due to three separate incidents. The vulnerabilities in its smart contract have exposed the platform to significant financial losses and raised concerns about the overall security of the automated market-making ecosystem.
Hot Take: Acquittal Raises Questions About Smart Contract Security
The acquittal of the two brothers accused of exploiting Platypus raises important questions about the security of smart contracts within the crypto industry. While the judge ruled that the defendants did not commit any criminal offenses, it is evident that vulnerabilities in the platform’s code allowed for the unauthorized withdrawal of substantial funds. This case highlights the need for rigorous security audits and continual testing to identify and address potential weaknesses in smart contract systems. As the crypto space evolves, it is crucial for developers and platform operators to prioritize security to protect against malicious exploits and financial losses.