
Hong Coin investors recover $2M after decade
A white-hat hacker has helped recover approximately $2 million worth of Ether that had been trapped in a faulty Hong Coin ICO smart contract since 2016, enabling long-delayed refunds for dozens of investors.
The pseudonymous researcher, known as 0xflorent, said about 1,003 ETH belonging to 48 investors was recovered after identifying a workaround for a bug that had disabled the project's automatic refund mechanism.
“The contract held all the investors' ETH and was supposed to auto-refund them,”
Said 0xflorent, adding:
“However, a bug in the refund function quietly broke that, and the funds got stuck.”
Hong Coin was launched in 2016 as a decentralised venture capital fund that aimed to let token holders vote on investment decisions through a decentralised autonomous organisation, but the project failed to reach its fundraising target.
Investors who contributed Ether during the ICO were supposed to receive refunds after the sale ended without meeting its funding goal, but a flaw in the smart contract left the funds inaccessible for nearly a decade.
“The way out was an admin function with an integer overflow vulnerability,”
Said 0xflorent, adding:
“Calling it with a specific input resets a holder's balance and unblocks the refund check.”
Blockchain data shows at least one investor has already received a refund of 96 ETH, while another recovered 0.5 ETH, with additional repayments expected as the recovery process continues.
The recovery follows another effort by 0xflorent in May, when the researcher helped retrieve a combined 19.33 ETH from a failed 2018 ICO project and a user affected by funds trapped in a cross-chain transfer protocol.
At the time of reporting, Ethereum price was $2,012.14.