Hacker behind the Mango Markets exploit keeps $47M and returns $67M to the DeFi platform after a Mango community vote; he claims his actions were legal
- Eisenberg called the exploit a “profitable trading strategy” and said his actions were legal. — The Mango exploiter said the deal …
The BlockOsato Avan-Nomayo
Context & Ripple Effects
Mango said its funds were taken through oracle price manipulation, and the alleged exploiter subsequently put a DAO proposal before the community. The vote now converts that on-chain dispute into a partial return of funds while allowing Eisenberg to retain $47M.
The settlement did not close the underlying liability question: Mango later sought $47M in damages, while Eisenberg's later trial was described as a test of “code is law” claims.
First-order effects
Mango regains $67M, but its community-approved outcome leaves Eisenberg with $47M and makes the protocol's response depend on tokenholder governance rather than an immediate full recovery.
Eisenberg gains a community-vote-backed basis for his claim that the trades were lawful, even as Mango's reported loss stemmed from manipulated pricing.
Second-order effects
Mango's later lawsuit for the retained amount shows that the vote did not deliver legal finality; a DAO-approved recovery can coexist with claims against the recipient.
For DeFi participants, the episode makes governance proposals part of an exploit-response process, alongside technical assessments of the price manipulation itself.
Third-order effects
The later litigation and trial indicate that on-chain governance cannot by itself settle disputes over alleged market manipulation; protocol outcomes and legal accountability may diverge.
If this pattern persists, DeFi platforms will face pressure to design recovery and governance processes that preserve user trust without treating a tokenholder vote as a complete resolution of liability.
The trend: The Mango case is part of a broader collision between DAO-based dispute resolution and external legal scrutiny of alleged DeFi exploits.
Mango hacker securing himself a ~$47m bug bounty. Biggest crypto bounty by far? The current bounty going rate of 10% of exploited funds is going to need to be repriced lmao. https://twitter.com/...
$67M in various crypto assets have been returned to the DAO. Let's meet up on Monday 3 PM UTC on the Mango discord to discuss, how we can sort out this mess.
Unfortunately, the exchange this took place on, Mango Markets, became insolvent as a result, with the insurance fund being insufficient to cover all liquidations. This led to other users being unable to access their funds.
I believe all of our actions were legal open market actions, using the protocol as designed, even if the development team did not fully anticipate all the consequences of setting parameters the way they are.
To remedy the situation, I helped negotiate a settlement agreement with the insurance fund with the goal of making all users whole as soon as possible as well as recapitalizing the exchange.
This is similar to how auto deleveraging works on exchanges such as Binance and Bitmex, clawing back some profits from profitable traders in order to ensure all users funds are protected.
If you rob a bank you can't say it's not your fault because the bank was defended poorly. “Code is law” = BS. Hackers should be grateful for mega bug bounties while they last. Law enforcement will eventually catch up and pursue hackers (aka criminals) more effectively. https://tw…
We should have a web3-native court to prevent such exploits. Oh wait, @Kleros_io already did that when the same actor tried to exploit @UnslashedF and @viresfinance. https://twitter.com/...
i think if you have the latter vision you might think that market manipulation is bad, though i suppose that's not logically required. but if it's a pointless fun game then the manipulation is fine, and fun.
The world of crypto and DeFi is a world where people bend their knees to criminal hackers. Because “code is law” in their world. Programmers make for bad legislators. https://twitter.com/...
This seems like a pretty sweet deal for the hacker. Most of these “bounties” are roughly 10% of the stolen funds, but this attacker is making off with around 40%. The hacker is also holding on to $116 million in SOL that they can't cash out right now—the exchanges that... 1/2
Call this whatever you want, but the strategy itself falls directly in the “market manipulation” legal bucket regardless of any ransom deal made with the team I would be highly surprised if the SEC isn't knocking soon https://twitter.com/...
one vision for crypto is, like, “this is a computer game, and if i can figure out a way to win the computer game that the designers did not intend, then i am cool and clever. also the game pays money.”
A few months ago, Avi sued a DeFi protocol for unexpected liquidations & restricting access to his funds using price manipulation. Ironically, this is exactly what he did to Mango Market depositors a few days ago. His own old arguments will probably be used against him in court. …
5/ The aftermath - The hacker took to Realms (a Solana community platform) to offer a conditional return of a portion of the funds - Mango's reply, which appears to mostly agree to the hacker's conditions, can be read here: https://dao.mango.markets/...