Whitehat developer unlocks $2 million stuck in a 2016 Ethereum ICO contract for nine years
0xflorent, a security researcher, found an integer-overflow flaw in the HongCoin token sale contract that lets the team unlock funds for 48 original investors. It is the second such recovery he has publicized in eight days....
Key takeaways
- 1Security researcher 0xflorent unlocked $2 million (1,003.62 ETH) trapped in a 2016 HongCoin ICO contract for nine years using an integer-overflow flaw.
- 248 original investors became eligible to reclaim funds; two have already withdrawn 96.5 ETH worth approximately $193,000.
- 3This is the second major fund recovery 0xflorent publicized in eight days, following a May 24 recovery of 19.329 ETH from failed ICOs and expired atomic swaps.
Coins in this story
Why it matters
The recovery highlights ongoing security vulnerabilities in early Ethereum contracts that still hold investor funds, relevant as Indian retail investors increasingly participate in tokenized assets and DeFi. It also demonstrates the role of whitehat researchers in protecting crypto users amid a wave of major DeFi exploits draining hundreds of millions globally.
Explore how RWA is shaping crypto markets — aggregated stories, leading coins, and weekly momentum.
Explore narrativeRelated stories
Citi predicts the tokenized securities market will grow to $5.5 trillion by 2030
Citibank forecasts tokenized securities will surge to $5.5 trillion by 2030, up from $17 billion today. Major exchanges including DTCC and Nasdaq are embedding tokenization into core trading systems, with stablecoins and clearer U.S. regulation enabling instant on-chain settlement. Growth will concentrate in mainstream assets like U.S. Treasuries and stocks, creating significant opportunities for large financial institutions controlling both assets and payment infrastructure.
Three Sui mainnet halts in 48 hours traced to an upgrade bug by developers
The Sui Foundation's post-mortem published Sunday traces all three outages to interactions between a new address-balance feature shipped in the v1.72 release and the network's existing gas and consensus logic....