# \[BIP-455\] Assisting DNS hack victims **URL:** \ **Category:** General Proposal\ **Created:** [October 16, 2023, 12:14pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259 "2023-10-16T12:14:20Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![0xDanko](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/0xdanko/32/1376_2.png) [@0xDanko](https://forum.balancer.fi/u/0xDanko)\ **Post date:** [October 16, 2023, 12:14pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/1 "2023-10-16T12:14:20Z")
### Payload with PR [https://github.com/BalancerMaxis/multisig-ops/pull/568](https://github.com/BalancerMaxis/multisig-ops/pull/568) ### Intro Following the developments after [the DNS hack reported here](https://medium.com/balancer-protocol/dns-security-incident-post-mortem-1b1feb735aca), and given the current framework proposition on [BIP-443](https://forum.balancer.fi/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218), this proposal seeks to compensate users affected by the frontend attack by refunding 75% of their lost funds, taking BIP-443 as precedent. ### Motivation As of the time of writing, only 5 (five) users have reported loss of funds to the Balancer Maxis or other community contributors, to a total amount equivalent of $319,228,08 USD at the time of the attack. From that amount, a portion of $157,075 USD belonging to auramaxi.eth was taken care of immediately after the approval of BIP-443. The four other users manifested their will to claim for a refund of the remaining $162.153,08, taking the 25% cut under the same precedent set on that proposal, for a total of **$121.614,81 USDC on mainnet.** Given that the original proposal needed further developments (volunteer committee, Google form and public announcement), **this BIP must be treated as an exception in case BIP-443 sees any traction in the future**. However, it’s only appropriate to take from the 350k previously approved by governance as max budget for compensations. The addresses below are verified, known and damaged wallets, who will be providing on-chain signatures for wallet verification referencing this BIP in the comments below, along with a statement forgoing all further claims to restitution. The amount to be sent is 75% of the total lost by these wallets during the attack period (including amounts stolen and angel drainer contract fee), which can be verified on-chain and cross ref with @gosuto [spreadsheet here](https://docs.google.com/spreadsheets/d/1nby6q2kyA9PSvrKeMSJtRIFllxzlOHAT96SE38fnGxA/edit#gid=593597477). User #1 wallet: 0x1511e7Fe2e06BBc75Eb4CeeE7c7dC5f9af6bb781 $144,137.10 USD total (Avalanche) **108.102,83 USDC Refund** User #2 wallet: 0x5d119666CD68dDD9b3b3b5Ee7552EEdeD6843918 (oxecrypto.eth) $3,542.26 USD total (Ethereum) $907.42 (Polygon) **2.656,70 USDC Refund** User #3 wallet: 0x3056b7039deb4347ca9ab2abd7b5785fcdcc0ebf $651,62 USD total (Arbitrum) **488,72 USDC Refund** User #4 wallet: 0xa7A13659692239c143daE313a0116D5b5C18d26C $13,822.10 USD Total (Ethereum) **10.366,58 USDC Refund** ### Specification Upon approval of this BIP, the DAO Treasury will perform multi send: - 108,102.83 USDC to 0x1511e7Fe2e06BBc75Eb4CeeE7c7dC5f9af6bb781 - 2,656.70 USDC to 0xf1Ca67191b4b0FD07d8ab924E6244127E3bdeCC4 - 488.72 USDC to 0x3056b7039deb4347ca9ab2abd7b5785fcdcc0ebf - 10,366.58 USDC to 0xa7A13659692239c143daE313a0116D5b5C18d26C ---
**Author:** ![willowolive](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/willowolive/32/2862_2.png) [@willowolive](https://forum.balancer.fi/u/willowolive)\ **Post date:** [October 16, 2023, 12:27pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/2 "2023-10-16T12:27:51Z")
Hey guys/girls. Here is my digital signature: > **[Ethereum Verified Signed Message](https://etherscan.io/verifySig/25961)** > > The Ethereum BlockChain Explorer, API and Analytics Platform I hereby give up claims to any further compensation related to this situation. Thanks everyone for the assistance on this, especially Danko for taking lead. ---
**Author:** ![tuckiee](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/tuckiee/32/2867_2.png) [@tuckiee](https://forum.balancer.fi/u/tuckiee)\ **Post date:** [October 16, 2023, 9:40pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/3 "2023-10-16T21:40:23Z")
Gm. Here is my signature for verification and to acknowledge the forfeit of any further claims as outlined in BIP-443. > **[Ethereum Verified Signed Message](https://etherscan.io/verifySig/26010)** > > The Ethereum BlockChain Explorer, API and Analytics Platform Thank you so much to @0xDanko for following up and getting things in motion. ---
**Author:** ![ericobarros](https://avatars.discourse-cdn.com/v4/letter/e/50afbb/32.png) [@ericobarros](https://forum.balancer.fi/u/ericobarros)\ **Post date:** [October 17, 2023, 2:04am UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/4 "2023-10-17T02:04:53Z")
Hey guys/girls. Here is my digital signature: > **[Ethereum Verified Signed Message](https://etherscan.io/verifySig/26024)** > > The Ethereum BlockChain Explorer, API and Analytics Platform Nova Wallet para recuperação: 0xf1Ca67191b4b0FD07d8ab924E6244127E3bdeCC4 ---
**Author:** ![0xDanko](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/0xdanko/32/1376_2.png) [@0xDanko](https://forum.balancer.fi/u/0xDanko)\ **Post date:** [October 17, 2023, 2:08pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/5 "2023-10-17T14:08:04Z")
> [@ericobarros](#): > > Nova Wallet para recuperação: 0xf1Ca67191b4b0FD07d8ab924E6244127E3bdeCC4 OK. I updated the spec to transfer funds to this new wallet. @ZenDragon if you could please edit the payload… 🙏 ---
**Author:** ![ZenDragon](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/zendragon/32/1542_2.png) [@ZenDragon](https://forum.balancer.fi/u/ZenDragon)\ **Post date:** [October 17, 2023, 2:14pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/6 "2023-10-17T14:14:46Z")
It is updated to include this address now. Thanks! ---
**Author:** ![ericobarros](https://avatars.discourse-cdn.com/v4/letter/e/50afbb/32.png) [@ericobarros](https://forum.balancer.fi/u/ericobarros)\ **Post date:** [October 17, 2023, 3:06pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/7 "2023-10-17T15:06:16Z")
Bom dia Amigos. Qnd será feito o ressarcimento para que eu possa acompanhar? ---
**Author:** ![k10clubs](https://avatars.discourse-cdn.com/v4/letter/k/3ab097/32.png) [@k10clubs](https://forum.balancer.fi/u/k10clubs)\ **Post date:** [October 18, 2023, 5:07am UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/8 "2023-10-18T05:07:25Z")
Hey everyone, here is my digital signature: > **[Ethereum Verified Signed Message](https://etherscan.io/verifySig/26103)** > > The Ethereum BlockChain Explorer, API and Analytics Platform +1 to Danko8383 for all your assistance ---
**Author:** ![0xDanko](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/0xdanko/32/1376_2.png) [@0xDanko](https://forum.balancer.fi/u/0xDanko)\ **Post date:** [October 18, 2023, 2:10pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/9 "2023-10-18T14:10:31Z")
Seems like this is getting ready to go to a vote tomorrow. Passing a vote on Monday (23rd), payments will follow next. You should see funds on your Ethereum wallet in USDC when the tx is executed on the multisig. ---
**Author:** ![Xeonus](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/xeonus/32/3621_2.png) [@Xeonus](https://forum.balancer.fi/u/Xeonus)\ **Post date:** [October 19, 2023, 8:43am UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/10 "2023-10-19T08:43:38Z")
[https://snapshot.org/#/balancer.eth/proposal/0x9270e1c5f183207bfca68456415ea1e82a027da329983f44a9c6c12671276f14](https://snapshot.org/#/balancer.eth/proposal/0x9270e1c5f183207bfca68456415ea1e82a027da329983f44a9c6c12671276f14) ---
**Author:** ![Estv](https://avatars.discourse-cdn.com/v4/letter/e/e95f7d/32.png) [@Estv](https://forum.balancer.fi/u/Estv)\ **Post date:** [November 13, 2023, 8:36am UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/11 "2023-11-13T08:36:32Z")
Would like to know what’s the latest on this topic. I would like to report i was affected by this as well ---
**Author:** ![0xDanko](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/0xdanko/32/1376_2.png) [@0xDanko](https://forum.balancer.fi/u/0xDanko)\ **Post date:** [November 13, 2023, 2:21pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/12 "2023-11-13T14:21:43Z")
Please reach me on Discord and I can assist you. We can work on a second batch of payments, but so far, we haven’t heard of any more users affected. ---
**Author:** ![Estv](https://avatars.discourse-cdn.com/v4/letter/e/e95f7d/32.png) [@Estv](https://forum.balancer.fi/u/Estv)\ **Post date:** [November 13, 2023, 3:46pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/13 "2023-11-13T15:46:35Z")
I’ll DM you here my discord user. ---
**Author:** ![derekclair](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/derekclair/32/3013_2.png) [@derekclair](https://forum.balancer.fi/u/derekclair)\ **Post date:** [January 16, 2024, 8:39pm UTC](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259/14 "2024-01-16T20:39:01Z")
Done! [Ethereum Verified Signed Message](https://etherscan.io/verifySig/34132) Thank you @0xDanko and the Balancer team.