# \[BIP-535\] Assisting DNS hack victims - final batch payment **URL:** \ **Category:** Governance\ **Created:** [January 16, 2024, 10:54am UTC](https://forum.balancer.fi/t/bip-535-assisting-dns-hack-victims-final-batch-payment/5507 "2024-01-16T10:54:11Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![0xDanko](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/0xdanko/32/1376_2.png) [@0xDanko](https://forum.balancer.fi/u/0xDanko)\ **Post date:** [January 16, 2024, 10:54am UTC](https://forum.balancer.fi/t/bip-535-assisting-dns-hack-victims-final-batch-payment/5507/1 "2024-01-16T10:54:11Z")
### PR with Payload > > > \- USDC payments to 2 affected wallets > \- Tenderly-sim: https://dashboard.tenderl…y.co/public/safe/safe-apps/simulator/e2900471-550c-433d-8433-1e6e66b43416 # Intro Following the developments after [the DNS hack reported here](https://medium.com/balancer-protocol/dns-security-incident-post-mortem-1b1feb735aca), and given the current framework proposition on [BIP-443](https://forum.balancer.fi/t/bip-443-restore-brand-trust-in-balancer-by-assisting-dns-hack-users/5218), precedent set by [BIP-455](https://forum.balancer.fi/t/bip-455-assisting-dns-hack-victims/5259) and last call for claims under [BIP-498](https://forum.balancer.fi/t/bip-498-assisting-dns-hack-victims-final-batch/5369), this proposal seeks to compensate users affected by the frontend attack by refunding 75% of their lost funds. # Motivation As of Dec 25th, the deadline set by BIP-498, only 7 (seven) users have reported loss of funds to the Balancer Maxis or other community contributors, to a total amount equivalent of $330,521,91 USD at the time of the attack. From that amount, a portion of $157,075 USD belonging to auramaxi.eth was taken care of immediately after the approval of BIP-443. Four other users, totaling $162,153.08 of affected funds, got their restitution under BIP-455. Two other claims remain to be addressed (see below). With these two cases, we finally expect to put this episode behind us. The addresses below are verified, known and damaged wallets, who will be providing on-chain signatures for wallet verification referencing this BIP in the comments below, along with a statement forgoing all further claims to restitution. The amount to be sent is 75% of the total lost by these wallets during the attack period (including amounts stolen and angel drainer contract fee), which can be verified on-chain and cross ref with @gosuto 's [spreadsheet here](https://docs.google.com/spreadsheets/d/1nby6q2kyA9PSvrKeMSJtRIFllxzlOHAT96SE38fnGxA/edit#gid=593597477). User #6 wallet: 0xde5cbe25c58c49ee7635216de6998f8dacd63b96 $5,842.85 USD total (Arbitrum) 4,382.14 USDC Refund User #7 wallet: 0xc4f95f674b393a49410ace864833abe836848526 $ 5,450.98 USD total (Ethereum) 4,088.24 USDC Refund Specification Upon approval of this BIP, the DAO Treasury (mainnet) will send: - 4,382.14 USDC to 0xde5cbe25c58c49ee7635216de6998f8dacd63b96 - $4,088.24 USDC to 0xc4f95f674b393a49410ace864833abe836848526 ---
**Author:** ![Estv](https://avatars.discourse-cdn.com/v4/letter/e/e95f7d/32.png) [@Estv](https://forum.balancer.fi/u/Estv)\ **Post date:** [January 16, 2024, 2:24pm UTC](https://forum.balancer.fi/t/bip-535-assisting-dns-hack-victims-final-batch-payment/5507/2 "2024-01-16T14:24:07Z")
Here is my signature for verification and to acknowledge the forfeit of any further claims. > **[Ethereum Verified Signed Message](https://etherscan.io/verifySig/34116)** > > The Ethereum BlockChain Explorer, API and Analytics Platform The information for wallet #6 defined is fully correct. Thanks a lot @0xDanko for the correct treatment and resolution of this situation. ---
**Author:** ![derekclair](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/derekclair/32/3013_2.png) [@derekclair](https://forum.balancer.fi/u/derekclair)\ **Post date:** [January 16, 2024, 9:38pm UTC](https://forum.balancer.fi/t/bip-535-assisting-dns-hack-victims-final-batch-payment/5507/3 "2024-01-16T21:38:53Z")
Wallet #7 confirmation. [Ethereum Verified Signed Message](https://etherscan.io/verifySig/34132) ---
**Author:** ![Xeonus](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.balancer.fi/xeonus/32/3621_2.png) [@Xeonus](https://forum.balancer.fi/u/Xeonus)\ **Post date:** [January 17, 2024, 6:48pm UTC](https://forum.balancer.fi/t/bip-535-assisting-dns-hack-victims-final-batch-payment/5507/4 "2024-01-17T18:48:10Z")
[https://snapshot.org/#/balancer.eth/proposal/0x86bdc37500002bffaf02418b620e147ef1917518a2641e6081fca9fa995525fe](https://snapshot.org/#/balancer.eth/proposal/0x86bdc37500002bffaf02418b620e147ef1917518a2641e6081fca9fa995525fe)