A forgotten trove of nearly $2 million in ether (ETH), trapped for nearly a decade after the ill-fated 2016 HongCoin Initial Coin Offering (ICO), has been liberated thanks to the expertise of a security researcher known as 0xflorent. By pinpointing and exploiting an integer overflow flaw in the outdated smart contract, 0xflorent facilitated the recovery of the long-inaccessible funds, to the relief of prior investors.
How did the funds get stuck?
Back in 2016, the HongCoin ICO fell short of its fundraising aim. As per the contract terms, this failure should have triggered a refund of ETH to backers. However, a bug in the protocol’s refund mechanism left 1,003.62 ETH irretrievably stuck, impacting 48 early stakeholders. The flaw frustrated attempts to free the funds for nine years.
Initial refund attempts faced severe restrictions; a transaction cap of 3.56 ETH thwarted significant reimbursements. Observing the contract’s design, 0xflorent discovered a vital function managed by a multi-signature wallet that hadn’t adapted the robust security upgrades introduced in Solidity over recent years. Through calculated input, 0xflorent was able to nullify balance checks, effectively overriding the fund lock.
Through a total of 41 transactions authorized by HongCoin, former investors with claims to nearly 1,000 ETH locked in the contract finally regained access to their funds. Seven others, who held smaller balances, were able to retrieve their money independently.
How was the recovery executed?
This initiative was not a one-person job. The activation required HongCoin’s multi-signature endorsement. After discussions with the HongCoin team, 0xflorent demonstrated the deactivation procedure on a test blockchain before obtaining the necessary approvals for the mainnet transactions.
The resolution allowed two notable investors to reclaim 96.5 ETH—now worth about $193,000—with other contributors also finally retrieving their entitlements as the unblocking proceeded.
– Following 41 coordinated transactions, HongCoin restored approximately 1,000 ETH to stakeholders.
– Each successive liberation provided past holders with full access to fractions or the entirety of their initial investments.
– Collaboration with the HongCoin team was pivotal to accessing these funds.
Such recoveries come when decentralized finance (DeFi) faces multiple security hurdles. Recently, a separate venture saw the return of 19.329 ETH from an abandoned ICO and the closed Liquality Wallet, exhibiting the ongoing need for vigilance.
